Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/WESCbQ3vetqiTu5o3qQFVAH2GuY.asa
File:                     WESCbQ3vetqiTu5o3qQFVAH2GuY.asa (raw, json)
Hash identifier:          1aiCAFq0XN0g2XFeCxMyN7VVcKHWH+2jHOUYyChhHCQ=
Subject key identifier:   58:44:82:6D:0D:EF:7A:DA:A2:4E:EE:68:DE:A4:05:54:01:F6:1A:E6
Certificate issuer:       /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial:       01A0CE0FF5ED1A7A4AF184CD8619C9F11C20
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/WESCbQ3vetqiTu5o3qQFVAH2GuY.asa
Signing time:             Wed 23 Sep 2026 11:39:07 +0000
ASPA not before:          Wed 23 Sep 2026 11:39:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51346
Providers:                AS: 3216
                          AS: 12389
                          AS: 17557
                          AS: 28910
                          AS: 29049
                          AS: 205103
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:0f:f5:ed:1a:7a:4a:f1:84:cd:86:19:c9:f1:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
        Validity
            Not Before: Sep 23 11:39:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5844826d0def7adaa24eee68dea4055401f61ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:3c:f7:b0:56:26:40:5e:b4:25:c6:73:8f:
                    62:ed:14:72:48:1a:39:e5:c6:95:58:18:d2:20:bc:
                    16:00:31:30:9f:fe:c2:8a:c5:21:54:3c:8a:0f:a4:
                    a7:5b:a1:f2:3d:1d:30:fa:65:48:ac:73:73:5d:ff:
                    42:33:95:e5:44:2a:96:6d:5e:3f:db:6a:15:0d:a9:
                    6d:5f:41:cc:56:49:f1:e7:c7:af:e5:a6:da:fc:39:
                    1b:b1:f5:92:f5:0d:c4:fb:75:27:12:50:62:f8:13:
                    ec:04:95:12:77:56:95:e0:52:84:93:cf:15:71:e5:
                    d9:02:23:ea:5c:51:a6:e7:18:d7:6b:5b:3b:1b:99:
                    a2:0a:a0:69:84:99:92:bf:32:94:95:a4:50:32:77:
                    b0:0e:7d:8a:89:f9:9b:e6:df:33:4b:c3:c1:ca:34:
                    fe:40:9e:66:66:01:50:98:47:aa:a0:e1:00:2b:b0:
                    88:9a:6d:8b:39:20:b0:c2:c7:3b:ad:57:1c:25:42:
                    81:ee:7f:6c:07:e2:68:ec:b3:47:69:96:a3:48:b6:
                    f8:4a:04:47:78:e7:cb:8f:04:f6:80:01:87:aa:5e:
                    78:4e:74:0a:94:0e:ea:5a:61:86:de:f1:cd:6b:6a:
                    b2:ed:d4:8c:bb:b9:7d:06:e7:17:ed:99:da:36:18:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:82:6D:0D:EF:7A:DA:A2:4E:EE:68:DE:A4:05:54:01:F6:1A:E6
            X509v3 Authority Key Identifier:
                keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/WESCbQ3vetqiTu5o3qQFVAH2GuY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51346

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:3e:95:6a:0e:0f:c1:b1:db:1d:77:2f:36:6a:f9:3e:70:
         f1:a1:7c:d9:39:46:01:d0:e0:df:b1:35:3e:30:7e:43:2b:77:
         7b:88:b9:7d:15:b4:02:1f:8c:da:b2:c6:b9:e4:a1:2d:8e:71:
         d4:d3:22:d6:ee:28:f9:b5:69:0b:27:db:7b:13:99:3a:e5:a5:
         f4:42:80:3f:f3:94:25:3c:ec:ac:98:0a:b7:ae:f8:ca:70:81:
         e0:87:ff:6a:a1:49:29:b2:d3:de:ef:d4:42:c8:60:bd:2c:05:
         64:a0:02:b6:38:6d:27:3d:9a:af:68:34:13:f4:fd:be:db:4f:
         2e:e2:9a:d1:a3:15:18:3c:7f:b4:d1:f3:5a:67:0b:44:a8:e8:
         a1:e5:8d:16:b7:d7:98:bf:53:bf:ca:8d:f2:55:9a:9d:fa:d5:
         2e:9e:21:6b:ce:47:0f:2a:1e:dd:33:ee:0f:bd:20:e0:2f:a7:
         5b:1b:68:7b:92:a9:34:1a:56:9b:52:83:4a:d1:0d:14:96:77:
         21:b4:be:51:b9:11:e0:9a:5e:b6:26:27:32:b3:4f:6a:a1:66:
         b8:0e:25:0c:90:88:57:ea:4f:37:62:6e:81:65:57:33:7d:6d:
         46:cb:90:ca:4e:8d:75:7b:c7:31:2e:07:67:d6:ac:bf:36:86:
         56:8b:1a:01
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDOD/XtGnpK8YTNhhnJ8RwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODcxZjI5MGZmZjBlMDQyNjBjNjc1M2UzODdjOWVmYjc1
YmUyOTYwHhcNMjYwOTIzMTEzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQ0ODI2ZDBkZWY3YWRhYTI0ZWVlNjhkZWE0MDU1NDAxZjYxYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUs897BWJkBetCXGc49i7RRySBo5
5caVWBjSILwWADEwn/7CisUhVDyKD6SnW6HyPR0w+mVIrHNzXf9CM5XlRCqWbV4/
22oVDaltX0HMVknx58ev5aba/DkbsfWS9Q3E+3UnElBi+BPsBJUSd1aV4FKEk88V
ceXZAiPqXFGm5xjXa1s7G5miCqBphJmSvzKUlaRQMnewDn2Kifmb5t8zS8PByjT+
QJ5mZgFQmEeqoOEAK7CImm2LOSCwwsc7rVccJUKB7n9sB+Jo7LNHaZajSLb4SgRH
eOfLjwT2gAGHql54TnQKlA7qWmGG3vHNa2qy7dSMu7l9BucX7ZnaNhih6QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFhEgm0N73raok7uaN6kBVQB9hrmMB8GA1UdIwQY
MBaAFLeHHykP/w4EJgxnU+OHye+3W+KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMt
OTU1ZjVjYjA5ODkzLzEvV0VTQ2JRM3ZldHFpVHU1bzNxUUZWQUgyR3VZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMtOTU1ZjVjYjA5ODkz
LzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIkjANBgkqhkiG
9w0BAQsFAAOCAQEAjsU+lWoOD8Gx2x13LzZq+T5w8aF82TlGAdDg37E1PjB+Qyt3
e4i5fRW0Ah+M2rLGueShLY5x1NMi1u4o+bVpCyfbexOZOuWl9EKAP/OUJTzsrJgK
t674ynCB4If/aqFJKbLT3u/UQshgvSwFZKACtjhtJz2ar2g0E/T9vttPLuKa0aMV
GDx/tNHzWmcLRKjooeWNFrfXmL9Tv8qN8lWanfrVLp4ha85HDyoe3TPuD70g4C+n
Wxtoe5KpNBpWm1KDStENFJZ3IbS+UbkR4JpetiYnMrNPaqFmuA4lDJCIV+pPN2Ju
gWVXM31tRsuQyk6NdXvHMS4HZ9asvzaGVosaAQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:55 2026 by rpki-client