Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/540dlO-AJLVfcuxXIcBEnEhADCs.asa
File:                     540dlO-AJLVfcuxXIcBEnEhADCs.asa (raw, json)
Hash identifier:          yW8W3OcRiwXg3Ew3hr59S/Kqve2OAMPzKvd8bih2nRI=
Subject key identifier:   E7:8D:1D:94:EF:80:24:B5:5F:72:EC:57:21:C0:44:9C:48:40:0C:2B
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       01A0ED93C5B0F8C3610534D6FD6A3D782575
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/540dlO-AJLVfcuxXIcBEnEhADCs.asa
Signing time:             Tue 29 Sep 2026 14:31:19 +0000
ASPA not before:          Tue 29 Sep 2026 14:31:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209620
Providers:                AS: 174
                          AS: 21032
                          AS: 58243
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:93:c5:b0:f8:c3:61:05:34:d6:fd:6a:3d:78:25:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Sep 29 14:31:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e78d1d94ef8024b55f72ec5721c0449c48400c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:8f:7e:7b:69:87:0f:14:15:f5:ec:34:5c:
                    5c:15:7f:d0:81:fe:4e:96:d6:0a:9c:ab:5a:50:a9:
                    30:85:ff:35:63:57:cd:87:21:cd:31:21:93:46:86:
                    66:b4:e3:ce:27:49:53:ff:2d:4f:0e:15:4f:09:5e:
                    e1:88:91:69:e9:65:fe:c2:f3:20:49:b1:cb:bb:87:
                    51:47:7e:2d:26:1b:00:51:f3:41:a9:d9:6f:25:bd:
                    1d:ec:92:37:9d:c3:30:a0:cb:05:20:e4:71:8c:ec:
                    1b:06:f4:e2:a0:7f:33:22:35:45:c6:9e:c7:2c:69:
                    b3:1a:0a:25:c0:ec:fb:ef:c2:04:02:9b:14:31:f4:
                    bf:3e:4b:2e:d2:7a:44:f4:8f:94:13:13:eb:fa:5a:
                    74:16:11:23:d1:94:02:c3:e7:b4:fc:2b:4b:0c:1a:
                    78:b7:61:77:c5:81:df:42:41:ed:2d:d1:d8:28:dd:
                    85:d9:9c:1e:29:5b:b7:54:e8:68:b5:a5:af:de:27:
                    fe:95:f1:f9:2f:38:86:7e:30:4d:4a:76:e9:ed:44:
                    46:48:ab:01:62:e0:53:f5:c8:60:3f:e5:66:30:6c:
                    21:f0:40:1d:00:d8:24:db:9a:ef:8c:6f:6f:68:5a:
                    06:9d:ad:42:b6:f1:96:ee:5b:da:d7:2e:06:42:83:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:1D:94:EF:80:24:B5:5F:72:EC:57:21:C0:44:9C:48:40:0C:2B
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/540dlO-AJLVfcuxXIcBEnEhADCs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209620

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:f1:05:64:9f:34:cc:30:5f:5d:8b:7d:f2:84:db:4d:5b:
         a6:d2:7d:30:06:72:ec:93:5b:82:3c:e2:9e:06:ce:ac:14:05:
         08:f2:ee:4b:36:74:fe:7f:28:d9:dc:38:fb:8e:e0:cf:90:6f:
         6e:e9:25:05:ae:55:bf:5e:43:67:9f:7a:52:55:9d:76:a9:6a:
         fe:16:8f:59:3c:48:60:73:c8:e8:92:c7:90:4f:03:ca:91:10:
         83:ae:99:0f:7b:3e:84:c4:fb:68:ad:86:48:9e:ac:04:7b:c1:
         d0:be:b8:10:52:00:8f:6b:e7:e6:5d:a1:1a:3b:2f:fb:43:53:
         ca:88:97:d8:f5:80:cc:c1:8a:e1:a8:72:c6:f2:b2:01:a4:4e:
         8c:68:ae:e8:7d:43:fa:52:37:3b:c4:cc:51:cd:26:69:9f:11:
         e9:1b:99:dc:f4:44:f0:84:90:57:27:72:81:39:29:2d:7f:0b:
         0b:c4:18:ef:f3:d7:08:7c:62:19:e9:b6:01:b7:29:76:e5:26:
         2d:49:fb:0c:a0:c4:55:31:92:2f:8a:9f:09:ae:3e:60:aa:3d:
         b5:29:0d:49:d2:8d:62:1c:8a:4b:4d:02:bf:e7:2a:17:86:24:
         ab:72:dc:23:9a:34:ec:c9:7e:29:48:f3:ac:d0:16:6f:b9:fa:
         30:86:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:07:03 2026 by rpki-client