Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6GRq5DAVEdkZeWhHhX1gAe_kYO8.asa
File:                     6GRq5DAVEdkZeWhHhX1gAe_kYO8.asa (raw, json)
Hash identifier:          QqzvRIhpU43y4gbwsnefeLyT3sMmuit1VKyKshZIbzU=
Subject key identifier:   E8:64:6A:E4:30:15:11:D9:19:79:68:47:85:7D:60:01:EF:E4:60:EF
Certificate issuer:       /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial:       01A1BAD81F7B0AF035348C27FCA23CF0CD23
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6GRq5DAVEdkZeWhHhX1gAe_kYO8.asa
Signing time:             Sun 08 Nov 2026 11:08:08 +0000
ASPA not before:          Sun 08 Nov 2026 11:08:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            9215
Providers:                AS: 12735
                          AS: 15924
                          AS: 34984
                          AS: 42910
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ba:d8:1f:7b:0a:f0:35:34:8c:27:fc:a2:3c:f0:cd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
        Validity
            Not Before: Nov  8 11:08:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8646ae4301511d919796847857d6001efe460ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:4a:58:55:7f:8c:b7:f7:6f:00:c2:af:5e:
                    54:e0:50:ba:d7:27:6b:dd:c0:66:64:25:24:92:31:
                    4f:fa:0d:19:b6:d0:d8:7c:00:85:d2:8f:17:85:cf:
                    6c:6f:8f:78:d6:84:cf:01:7f:03:c7:81:3c:8e:1e:
                    f0:d9:1c:60:43:87:aa:59:a1:45:e0:89:23:6c:63:
                    80:68:3d:04:c8:94:9b:63:18:1d:c2:bd:b2:6f:14:
                    d3:e7:07:4d:ec:d2:37:f7:af:79:7d:af:b5:45:48:
                    32:c2:75:a2:e6:ff:47:b6:a4:ce:72:1a:64:82:b9:
                    fc:ea:88:4d:27:98:1c:d9:3e:a7:fa:27:67:64:cb:
                    f2:86:0c:4f:a8:8e:e0:f4:c9:bc:62:f6:48:e8:8f:
                    ef:0c:01:87:1f:2f:be:e3:32:d2:03:dc:9d:1d:eb:
                    01:6c:96:5d:af:70:58:f6:68:6a:49:39:ca:74:7a:
                    6d:7d:bf:74:9f:5b:7f:9e:6a:45:58:63:78:b8:d3:
                    0a:51:e4:b1:f5:a9:d9:9e:03:ef:31:d0:47:95:55:
                    34:dd:66:42:ba:fd:f8:4f:5e:01:f6:30:f0:ea:40:
                    5d:dd:43:ac:2a:fa:95:a8:fb:4c:fa:ce:01:0c:0b:
                    0d:6a:60:95:ae:c4:df:37:74:46:9c:d8:17:4d:5b:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:6A:E4:30:15:11:D9:19:79:68:47:85:7D:60:01:EF:E4:60:EF
            X509v3 Authority Key Identifier:
                keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/6GRq5DAVEdkZeWhHhX1gAe_kYO8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9215

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:0b:4f:2d:ef:e0:f6:ed:6e:42:e0:60:ae:8d:d0:7b:aa:
         e2:51:ac:33:58:43:0b:05:08:cc:77:e2:78:df:72:dc:a7:9e:
         98:dc:18:77:38:fb:2d:7a:44:a3:1e:1e:20:45:86:4b:65:92:
         d3:e2:62:96:3c:3b:f0:d7:04:50:69:08:2e:d4:e4:4c:f6:6f:
         87:11:fa:a1:0a:b8:17:57:7a:45:5b:ac:c7:03:95:8e:71:2a:
         9a:37:e4:0b:e5:d1:a2:de:82:f2:68:aa:85:53:85:01:73:2e:
         56:7f:7a:51:f0:17:6a:f0:c1:24:71:a5:ed:1f:78:02:14:fb:
         ca:b7:d3:8c:b9:e1:9e:3e:49:14:ab:32:41:32:52:7c:af:2f:
         ec:7a:3b:73:0c:49:6b:9e:0a:fe:1f:66:cc:95:e8:57:4e:51:
         f1:da:61:11:b7:82:cc:47:2f:1c:27:ac:de:3a:7a:2d:9a:d3:
         f1:7c:2d:40:b3:bc:f3:0c:b0:06:06:30:9f:0f:e0:3d:f7:15:
         8e:22:38:84:13:0d:6f:8e:47:93:d5:1f:c2:01:3e:21:26:96:
         4b:ff:02:5a:3d:37:44:83:81:e3:70:ac:f4:06:f1:39:c6:59:
         9f:8e:b1:d5:86:b4:ad:b6:0a:2e:d9:70:21:9f:cf:c9:f8:d6:
         a8:49:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:00 2026 by rpki-client