Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/jI4Rloh6DFz1HmHCdBXf3y15Qtw.asa
File:                     jI4Rloh6DFz1HmHCdBXf3y15Qtw.asa (raw, json)
Hash identifier:          4TbdMsbbWioUGGQcOp+9Gcb+grYZOV2ELPq2K0XliQo=
Subject key identifier:   8C:8E:11:96:88:7A:0C:5C:F5:1E:61:C2:74:15:DF:DF:2D:79:42:DC
Certificate issuer:       /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial:       01A1AB81AA0139E6086B8B2C898CA75E0095
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/jI4Rloh6DFz1HmHCdBXf3y15Qtw.asa
Signing time:             Thu 05 Nov 2026 11:39:23 +0000
ASPA not before:          Thu 05 Nov 2026 11:39:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57934
Providers:                AS: 3204
                          AS: 41665
                          AS: 62246
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:81:aa:01:39:e6:08:6b:8b:2c:89:8c:a7:5e:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
        Validity
            Not Before: Nov  5 11:39:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c8e1196887a0c5cf51e61c27415dfdf2d7942dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:b0:4e:a3:eb:83:ee:bb:dd:5a:9d:39:33:
                    8f:c0:22:04:c9:66:c4:4b:01:0e:bc:99:32:07:f6:
                    20:ff:86:95:b8:75:97:40:76:e8:10:f3:df:80:e4:
                    07:42:4f:80:fc:2c:b9:3b:00:60:9f:0a:63:f0:ae:
                    31:4f:fc:3c:88:04:4f:a3:90:63:af:36:4c:32:c5:
                    98:eb:0f:d5:55:26:4e:21:a9:c3:0b:ce:c2:b0:0b:
                    45:a1:b4:2b:5f:9b:3c:a7:8c:29:65:da:54:4e:30:
                    1c:92:4b:5a:51:b4:a5:41:43:d4:8b:16:52:98:cb:
                    23:13:81:1c:01:9a:d5:ba:dc:d2:d5:50:f1:9f:bc:
                    a0:db:75:35:a2:25:83:31:0b:d4:1c:02:3e:3f:03:
                    94:e8:f1:d2:e1:9b:a9:0c:4d:f9:d0:82:7e:0b:cb:
                    70:99:aa:72:aa:04:5f:af:1c:65:fc:5e:7f:78:1d:
                    5a:3d:73:52:e5:ed:a0:db:d8:00:2a:62:ed:30:a7:
                    31:b0:a4:7d:e4:62:7a:95:5e:26:a1:42:38:ff:5a:
                    21:6e:8e:8a:32:d4:17:a6:28:2c:9b:4f:5d:24:24:
                    7a:2e:77:81:f2:61:e0:c9:96:8e:ab:de:a3:d0:83:
                    1c:b7:d4:98:b7:ad:1a:b3:e2:c8:1b:dc:1e:b5:78:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:11:96:88:7A:0C:5C:F5:1E:61:C2:74:15:DF:DF:2D:79:42:DC
            X509v3 Authority Key Identifier:
                keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/jI4Rloh6DFz1HmHCdBXf3y15Qtw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57934

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:d7:73:ee:4a:48:9a:5b:88:2d:7e:cc:0b:52:7d:64:aa:
         ab:5f:39:df:4f:a1:0c:97:f4:f3:4f:f0:ab:92:6c:bc:69:cb:
         66:f8:01:54:2d:43:f9:3c:09:7a:27:e5:ae:a1:25:96:d2:98:
         63:d8:b6:c7:09:88:1c:9b:ac:e2:c3:a8:22:27:a8:fd:a2:f8:
         25:14:6c:cf:3c:98:29:df:47:2f:57:4c:99:53:b6:40:7b:65:
         a0:15:7c:97:b7:b8:cb:be:c0:9e:f5:52:9f:11:9f:fb:73:6b:
         f4:16:35:30:2b:96:f5:45:ac:01:f8:d6:47:db:76:d7:34:4c:
         f3:70:5c:16:03:75:b1:ad:85:38:bb:bc:9b:94:a2:5d:82:35:
         f1:03:33:11:e4:c5:48:24:f4:3f:6b:cc:1e:a2:7f:7e:50:ac:
         b7:78:fe:e1:e5:6d:f9:95:6f:5e:0e:b6:9c:bc:81:9b:f5:81:
         86:32:b9:69:23:b2:d7:6c:8a:45:31:72:d6:70:1d:1f:66:85:
         31:fb:01:05:f2:06:df:ee:d1:4a:f6:20:6a:a9:05:57:58:b9:
         ba:46:1c:9e:38:7d:45:59:95:eb:ab:a8:29:1d:df:c6:ee:9a:
         e2:c8:4f:31:0e:ea:14:7a:99:f1:76:a3:f1:30:fd:1d:e0:94:
         7d:18:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:39 2026 by rpki-client