Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/avTiZEFVUIqZn8NEqCXXlMA0Y9c.asa
File:                     avTiZEFVUIqZn8NEqCXXlMA0Y9c.asa (raw, json)
Hash identifier:          8En8xlLXzgXIOCk3+5Xlraq48AoS3hIgsDIWo7/NKcQ=
Subject key identifier:   6A:F4:E2:64:41:55:50:8A:99:9F:C3:44:A8:25:D7:94:C0:34:63:D7
Certificate issuer:       /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial:       01A03E41FEF5AE9BD36D31D01F7280C26B65
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/avTiZEFVUIqZn8NEqCXXlMA0Y9c.asa
Signing time:             Wed 26 Aug 2026 13:28:27 +0000
ASPA not before:          Wed 26 Aug 2026 13:28:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209203
Providers:                AS: 48408
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:41:fe:f5:ae:9b:d3:6d:31:d0:1f:72:80:c2:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
        Validity
            Not Before: Aug 26 13:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6af4e2644155508a999fc344a825d794c03463d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:d1:e4:8e:16:0e:8e:cc:11:ea:13:c3:9a:
                    66:17:85:13:b4:99:39:bb:66:0e:ea:c4:97:9b:5a:
                    5d:da:4d:87:a2:3e:26:ae:61:a1:6b:87:ce:e1:f6:
                    6c:8e:ec:84:3e:35:8f:95:11:53:2d:5f:31:a6:f1:
                    df:b1:71:77:91:e0:47:0e:ef:0a:c4:d8:c7:de:e6:
                    df:00:02:6e:6d:99:04:c2:75:8d:35:eb:ba:9f:60:
                    cc:b6:b4:78:87:03:d9:4c:5b:e4:28:bd:c7:4c:1a:
                    95:3c:73:4a:ca:91:27:51:2c:a9:f3:7f:7a:58:e6:
                    4a:0b:dd:db:1c:8d:6a:6f:c4:cc:9c:a9:27:a7:fb:
                    18:9c:a1:aa:26:9a:e6:6f:ae:94:27:00:1d:b1:35:
                    49:f3:1a:5c:93:ac:29:ae:9d:4c:71:8c:34:f9:36:
                    de:3b:b4:68:18:c5:72:39:36:6e:a0:1f:c5:6e:f4:
                    d1:c7:bf:2a:d9:69:92:a7:71:f6:2f:bf:7d:e7:a1:
                    fa:24:c0:9b:97:a7:ca:96:02:cf:b1:ae:83:4d:ac:
                    8a:3a:a6:ff:9c:84:1c:67:a3:e6:89:cc:44:ae:2f:
                    72:dc:12:d8:44:de:41:58:14:73:8b:6a:ed:e6:8d:
                    85:9e:fe:ea:bb:78:3e:ae:14:b7:22:48:bc:8e:85:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:E2:64:41:55:50:8A:99:9F:C3:44:A8:25:D7:94:C0:34:63:D7
            X509v3 Authority Key Identifier:
                keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/avTiZEFVUIqZn8NEqCXXlMA0Y9c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209203

    Signature Algorithm: sha256WithRSAEncryption
         61:54:0e:e0:f6:3d:69:5b:3b:92:09:2e:2b:91:c7:bf:d8:63:
         99:35:0b:bd:63:dd:53:06:2b:de:d6:9e:2c:6b:ed:b3:dd:b7:
         26:b1:ee:a9:48:6b:81:cd:7a:ad:b5:ed:2e:78:08:ad:b9:74:
         bb:8c:fa:b2:12:40:f5:68:44:72:3e:55:23:fc:e3:dd:44:93:
         80:a9:c3:22:4e:98:a6:8c:c6:f8:15:f0:3b:03:c2:c9:d8:d2:
         bf:b9:d3:bc:08:67:09:42:ab:80:85:0d:9b:ae:0f:59:03:04:
         72:25:1b:50:ec:a3:10:0d:e0:60:0a:5d:7c:7e:55:8f:98:1b:
         51:46:77:ed:06:86:36:34:c6:b4:a1:5e:dc:12:1e:81:c9:a4:
         66:2b:63:12:01:68:d4:b9:a4:74:09:d9:b3:6f:d3:a6:16:a4:
         c7:84:7e:1c:e5:6a:db:57:fb:88:cf:02:bb:a2:9a:db:81:1b:
         45:c2:cb:c8:9a:f0:18:ad:02:c3:fc:e8:e2:34:7e:13:df:e0:
         21:c1:8c:1f:45:a5:34:84:50:88:43:f0:84:71:4d:bf:ef:c0:
         a3:7e:be:b2:eb:16:ed:ce:6e:8b:3a:91:c4:57:34:b0:40:27:
         39:a2:f8:c1:c0:c9:98:76:d4:d6:3f:07:de:fa:6f:ca:5f:e6:
         d0:5f:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:50 2026 by rpki-client