Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/3LwS5A0dVf9kZylcBmZTxelr25I.asa
File:                     3LwS5A0dVf9kZylcBmZTxelr25I.asa (raw, json)
Hash identifier:          XjvPVcDTjk+8q3Kzn+e5D2DNDunz5XthkAkXmWKKmdE=
Subject key identifier:   DC:BC:12:E4:0D:1D:55:FF:64:67:29:5C:06:66:53:C5:E9:6B:DB:92
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       01A0E989C109B6AEFB93C286380496089398
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/3LwS5A0dVf9kZylcBmZTxelr25I.asa
Signing time:             Mon 28 Sep 2026 19:41:54 +0000
ASPA not before:          Mon 28 Sep 2026 19:41:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204279
Providers:                AS: 174
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:89:c1:09:b6:ae:fb:93:c2:86:38:04:96:08:93:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Sep 28 19:41:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dcbc12e40d1d55ff6467295c066653c5e96bdb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:ca:c9:c1:51:ac:41:44:c5:69:3d:b0:08:
                    25:91:48:e9:6b:44:df:66:d0:01:25:10:bc:33:09:
                    2c:d0:d1:d6:53:e5:83:05:0b:f9:3b:b6:94:14:b2:
                    5b:35:fc:bd:af:bb:87:24:fe:f9:59:83:0b:c9:84:
                    09:96:7b:4f:41:1c:36:bb:3a:0d:54:2c:86:f0:51:
                    63:36:5c:b7:3e:5a:59:c7:9b:fc:d5:b1:58:c4:60:
                    7c:57:44:e0:c7:a2:cf:13:60:e8:b0:69:68:26:b4:
                    07:b6:8e:29:87:a6:85:8b:0f:a4:07:f4:19:db:29:
                    89:b3:4f:1a:46:35:ee:00:f6:20:5a:5c:50:b8:d5:
                    e2:4d:5a:2a:e7:34:f2:f2:f1:b6:fb:9c:63:c9:91:
                    4a:6f:a3:54:d6:ad:83:69:a3:a9:35:d6:68:8d:09:
                    92:63:a6:1c:b4:b3:5e:1e:c8:ea:55:97:48:e9:93:
                    01:fe:61:6c:a6:37:27:34:c6:25:3f:b7:03:83:cf:
                    44:6f:83:26:da:f7:49:19:0d:4d:dc:65:07:e8:6a:
                    7c:3c:19:53:13:65:ae:be:82:6c:1a:bd:22:5c:e9:
                    a5:70:a4:c1:68:25:24:18:78:9d:80:fa:c7:5f:8c:
                    a2:a0:ca:95:43:06:d1:af:e2:ea:ab:2a:06:ed:b1:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BC:12:E4:0D:1D:55:FF:64:67:29:5C:06:66:53:C5:E9:6B:DB:92
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/3LwS5A0dVf9kZylcBmZTxelr25I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204279

    Signature Algorithm: sha256WithRSAEncryption
         66:07:59:23:c7:70:e1:2e:83:2b:9d:21:c1:88:69:78:56:ac:
         2e:6e:63:97:60:29:f0:bc:25:42:5d:83:2d:5f:54:0c:40:06:
         bf:1e:70:d7:1f:fa:ee:b6:84:ba:fe:57:1d:43:2d:7c:b0:0f:
         fb:25:9a:0c:d2:0f:7d:76:a2:56:c0:20:d9:10:a6:79:68:fc:
         bb:51:e0:22:88:e0:a4:6a:19:17:0d:e5:05:f1:91:b0:4f:70:
         e1:f9:c2:8b:dd:a3:7f:e1:c5:cd:c2:88:8f:8a:57:5a:4e:1f:
         dc:df:55:04:fb:8f:05:07:21:e0:05:e3:96:89:6d:2b:2f:2a:
         f3:e2:87:85:1f:ea:cd:dd:87:7b:dc:98:ce:30:a1:e7:42:04:
         84:d1:cc:8f:69:19:a8:80:be:80:ac:6d:a7:96:aa:d0:10:bd:
         7a:31:ee:ab:1c:b5:0c:fb:f3:d8:bb:b5:87:0a:46:2a:70:1c:
         16:f9:18:1a:29:a6:0d:d8:ff:d9:79:58:6a:b7:67:43:d5:51:
         06:21:0e:39:96:00:a2:2f:75:2a:4a:21:5b:20:b4:d2:45:63:
         b0:d6:23:eb:50:41:91:5b:65:03:a8:61:b2:4b:19:83:f2:ad:
         d8:03:ad:4b:cc:7e:3c:3c:a2:ee:89:34:c9:59:37:f2:1a:5c:
         2b:a9:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:24:56 2026 by rpki-client