Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1ISxknL2j6iEseP88MYXfEejals.asa
File:                     1ISxknL2j6iEseP88MYXfEejals.asa (raw, json)
Hash identifier:          rgQ1SVRAuIn1ka2gJd0geTiBX/uYJju5Q4NZb72nd38=
Subject key identifier:   D4:84:B1:92:72:F6:8F:A8:84:B1:E3:FC:F0:C6:17:7C:47:A3:6A:5B
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       01A0C58E0F75F6307179931F958F58D1E01A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1ISxknL2j6iEseP88MYXfEejals.asa
Signing time:             Mon 21 Sep 2026 20:00:16 +0000
ASPA not before:          Mon 21 Sep 2026 20:00:16 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35661
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 6939
                          AS: 25369
                          AS: 30823
                          AS: 35133
                          AS: 39801
                          AS: 44530
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:0f:75:f6:30:71:79:93:1f:95:8f:58:d1:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Sep 21 20:00:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d484b19272f68fa884b1e3fcf0c6177c47a36a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:11:bc:e0:02:44:30:68:d7:41:15:1b:e9:
                    cf:23:a7:d4:fa:7d:fc:65:80:ae:f4:31:e2:72:2c:
                    8e:cb:38:fd:19:d5:37:bd:d4:b5:d3:15:d3:b9:ff:
                    ff:0c:21:be:79:58:cf:8b:e2:78:11:20:57:b6:df:
                    5f:0f:53:3a:a4:d7:40:46:f6:1c:8b:35:24:a2:b5:
                    c7:da:bb:46:09:b4:d5:a8:ce:33:54:57:f1:87:68:
                    54:c0:1e:66:b8:3c:b6:85:34:f3:a3:6d:df:05:c8:
                    03:f2:e5:6a:9b:f0:0d:f2:2b:20:89:cf:8e:e5:4c:
                    9f:41:ae:e2:eb:6c:5a:3f:6a:20:b6:ee:c2:96:de:
                    b0:0d:0e:7a:86:18:b0:15:fd:cf:07:2d:ce:d8:04:
                    fe:03:6a:ba:3e:70:bd:5b:5e:bd:cb:0f:c2:da:b3:
                    f4:c7:5a:fc:65:46:f1:bd:b4:0c:fb:f8:d4:8b:90:
                    23:18:c1:ca:e3:3c:2e:9a:8b:1a:8e:f2:ef:d4:7e:
                    77:8e:7f:af:7d:6b:37:5f:01:6f:f4:41:5a:e2:51:
                    c9:3a:fe:3f:47:4f:14:e5:ec:ac:3d:a2:66:74:8d:
                    10:36:b9:2d:ff:7a:7b:ec:ed:2f:58:ca:ab:18:25:
                    89:04:9c:97:dd:3a:1f:a9:47:36:48:a4:cf:c9:48:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:B1:92:72:F6:8F:A8:84:B1:E3:FC:F0:C6:17:7C:47:A3:6A:5B
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1ISxknL2j6iEseP88MYXfEejals.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35661

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:79:af:f3:9f:01:65:2a:1d:ed:48:02:3d:4b:ac:18:52:
         98:9e:32:29:30:1a:4b:e4:a7:24:71:10:09:49:39:cd:3d:8e:
         34:ba:45:83:7b:82:a1:01:e1:9b:34:7b:b1:3a:94:61:f1:d2:
         ac:32:00:2c:34:aa:b8:73:4b:8d:ce:f9:29:08:30:80:bf:b5:
         51:18:f3:bb:f5:d4:3d:dd:da:c7:37:ef:b5:3e:4e:4d:1d:27:
         5c:10:a0:84:cd:3c:36:81:a4:26:50:f4:6a:9d:9f:3f:f5:4d:
         11:89:f3:72:58:8c:f8:e3:0e:21:5c:7b:9b:82:d3:1a:b5:f4:
         8b:1b:fe:6f:1c:67:3a:3d:07:9b:6b:70:c1:db:d1:8b:ea:b4:
         1b:74:9c:51:fb:5b:d1:90:db:81:87:5a:f5:37:eb:23:88:b5:
         fe:34:86:85:4f:a3:06:d1:d3:70:f6:61:89:91:e5:df:d8:fe:
         93:eb:3a:57:fb:9a:19:f1:1d:74:3b:a0:45:5d:29:ec:6d:76:
         97:ff:a8:b2:ab:fc:a4:0f:75:e2:0a:3c:09:2a:fe:ba:cd:f7:
         80:1a:c2:7d:50:34:88:71:7e:67:cd:5b:d8:fb:97:d4:d9:3a:
         e3:e1:5d:68:48:5c:c8:6c:1b:04:8e:64:96:c2:bf:2a:22:03:
         72:3e:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:39 2026 by rpki-client