Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/acHMKDDAny77mFlFekDthVD-HwQ.asa
File:                     acHMKDDAny77mFlFekDthVD-HwQ.asa (raw, json)
Hash identifier:          r0oNC5LUxdKZp22QmFysh2E5iCvU7Qx6C+dapc6LziI=
Subject key identifier:   69:C1:CC:28:30:C0:9F:2E:FB:98:59:45:7A:40:ED:85:50:FE:1F:04
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       01A1AC90A9A38776765889966D4E09956E81
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/acHMKDDAny77mFlFekDthVD-HwQ.asa
Signing time:             Thu 05 Nov 2026 16:35:24 +0000
ASPA not before:          Thu 05 Nov 2026 16:35:24 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210246
Providers:                AS: 50606
                          AS: 210104
                          AS: 219062
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ac:90:a9:a3:87:76:76:58:89:96:6d:4e:09:95:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Nov  5 16:35:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69c1cc2830c09f2efb9859457a40ed8550fe1f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:99:90:1d:0b:96:a6:da:51:d1:a2:8f:3d:15:
                    95:b1:e0:88:5f:6e:00:96:cf:b2:e5:b7:34:9b:79:
                    7b:5b:7e:50:6d:4f:bd:cf:62:7e:57:1a:ae:76:0f:
                    58:01:36:35:db:56:d0:24:16:cc:32:ee:fd:1f:db:
                    30:e1:cb:81:a6:2c:b4:82:4f:85:68:4d:09:31:3e:
                    67:63:aa:1b:7c:8d:f6:8e:04:b1:c0:c8:b3:86:17:
                    56:47:74:53:52:26:e0:95:f0:d9:9f:aa:3d:3b:c7:
                    a8:7b:f6:29:0d:60:25:4b:8d:84:23:3c:ee:da:96:
                    e0:d4:8e:fe:43:27:6d:7a:e4:f3:16:12:03:59:54:
                    ca:91:e4:71:25:cf:99:58:43:05:ee:b9:22:63:08:
                    91:4b:4d:6f:ef:66:96:04:55:ea:a7:c2:d6:f0:b9:
                    62:07:17:58:5c:e4:e9:a3:38:a2:c9:98:5b:ff:e1:
                    79:66:55:22:f8:79:aa:e9:db:de:43:e9:0c:ce:a4:
                    c9:36:de:6f:b5:2c:93:3f:60:38:86:7a:41:18:73:
                    82:93:ad:ef:b8:af:0c:e8:fb:bf:08:3f:1e:88:0c:
                    4c:05:62:cf:04:71:d5:c9:85:26:4e:63:a3:f9:2f:
                    e7:0e:2e:61:a6:79:2f:77:10:c1:80:d4:7b:ba:c8:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:CC:28:30:C0:9F:2E:FB:98:59:45:7A:40:ED:85:50:FE:1F:04
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/acHMKDDAny77mFlFekDthVD-HwQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210246

    Signature Algorithm: sha256WithRSAEncryption
         41:be:1c:2c:57:74:d5:38:34:15:b2:ff:bf:dc:38:ec:b6:c7:
         bc:2b:16:14:ce:2f:da:d8:91:30:63:4f:43:4c:ef:56:43:85:
         ff:4e:23:75:76:53:cb:12:c1:8b:43:50:f1:4c:a8:bf:90:f6:
         41:2d:79:7f:65:51:12:4c:f2:2a:1d:76:7f:41:ed:90:15:70:
         c6:c3:e7:ed:97:72:08:4e:d1:32:2e:7b:e4:ac:d1:0f:0a:2c:
         f8:47:a5:fa:4d:ea:68:df:b9:ac:51:35:11:4c:83:e3:78:2c:
         9e:d9:51:bd:fd:50:fc:6e:a0:e9:1b:1f:3d:a8:81:83:c5:f2:
         52:67:d2:fc:37:b6:61:91:39:a8:d8:d3:85:cd:63:cf:f5:28:
         bd:34:48:bd:3d:56:82:58:c6:a2:04:57:5c:5c:34:85:b8:28:
         f3:28:ca:8b:38:82:a6:fe:bd:61:1a:b7:14:a2:32:42:af:60:
         3e:2f:3d:54:dc:44:14:91:00:52:48:36:15:6c:07:d6:bd:29:
         04:0c:d1:e0:e5:ea:a6:f8:46:88:71:d3:7c:85:44:dd:60:44:
         63:56:45:ff:da:19:13:05:e7:dd:ec:04:99:a2:49:af:12:ee:
         e5:f5:5b:49:e5:44:ee:13:b3:bb:01:07:74:b7:d9:27:4f:1e:
         ac:53:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:28:00 2026 by rpki-client