Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/pLRxZ1yLANV0Ag3k-MFvAVmTMdA.asa
File:                     pLRxZ1yLANV0Ag3k-MFvAVmTMdA.asa (raw, json)
Hash identifier:          bdglNJQ3Y+TYe08dTAuTGDUbdnYgyMjTBRRAohd7Vfg=
Subject key identifier:   A4:B4:71:67:5C:8B:00:D5:74:02:0D:E4:F8:C1:6F:01:59:93:31:D0
Certificate issuer:       /CN=13c28d4e6eab2d5493f62526d1d0af99b7354db5
Certificate serial:       01A1BFB8A83533E44A2476255B3BB1107C74
Authority key identifier: 13:C2:8D:4E:6E:AB:2D:54:93:F6:25:26:D1:D0:AF:99:B7:35:4D:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/pLRxZ1yLANV0Ag3k-MFvAVmTMdA.asa
Signing time:             Mon 09 Nov 2026 09:51:52 +0000
ASPA not before:          Mon 09 Nov 2026 09:51:52 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213434
Providers:                AS: 11967
                          AS: 41051
                          AS: 47272
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 212895
                          AS: 475699
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:bf:b8:a8:35:33:e4:4a:24:76:25:5b:3b:b1:10:7c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c28d4e6eab2d5493f62526d1d0af99b7354db5
        Validity
            Not Before: Nov  9 09:51:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a4b471675c8b00d574020de4f8c16f01599331d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1e:35:22:72:31:e1:5d:11:bf:77:d2:d3:dd:
                    b6:60:c1:4f:99:e3:f0:59:19:f8:0c:a9:4c:97:63:
                    2e:c9:19:7b:d5:c1:62:85:93:1b:e9:6d:91:3c:3e:
                    11:e2:3f:7d:dd:69:3a:a2:a2:f3:73:0d:c7:76:43:
                    f2:1c:8b:44:0b:2c:e0:52:72:3b:44:e9:46:56:fd:
                    77:39:d7:70:a5:02:bc:63:66:50:3d:2f:99:96:10:
                    5f:f7:99:14:e7:ca:22:70:0f:d6:22:b6:34:9b:62:
                    e8:df:59:e5:a4:37:51:3f:f5:ee:4f:90:ce:a9:37:
                    5c:0d:90:31:6b:3d:04:7e:3c:a7:e3:91:d4:b8:62:
                    9b:d4:68:f5:cb:51:05:2a:73:4b:1b:47:9d:58:93:
                    4e:6d:46:fc:cd:2b:01:08:04:f5:bb:60:e4:d7:74:
                    ed:39:d4:b5:08:f6:26:6e:bc:e7:09:3c:0f:cc:a4:
                    2b:fb:e3:dd:48:91:a4:ce:a3:55:7a:57:1d:5d:01:
                    cf:f6:88:ad:41:58:fe:d7:e1:ce:8a:70:bc:f8:a0:
                    97:98:a7:34:0c:a8:da:2f:74:8e:2d:6c:cc:ee:42:
                    26:27:e0:82:eb:da:0d:ec:15:d1:ba:59:42:87:53:
                    65:8d:2e:34:19:fe:88:83:54:89:80:69:3b:c9:a1:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B4:71:67:5C:8B:00:D5:74:02:0D:E4:F8:C1:6F:01:59:93:31:D0
            X509v3 Authority Key Identifier:
                keyid:13:C2:8D:4E:6E:AB:2D:54:93:F6:25:26:D1:D0:AF:99:B7:35:4D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/pLRxZ1yLANV0Ag3k-MFvAVmTMdA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213434

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:c7:9d:21:0d:94:8e:32:1d:53:92:61:1f:d9:be:8a:74:
         61:b3:e0:88:e2:03:c9:66:ca:3f:7e:b6:c7:d4:5b:54:a3:a1:
         20:7b:af:8a:7c:46:0a:fe:c8:fb:25:dd:da:cb:cd:f5:6e:2e:
         64:99:99:93:da:51:93:16:4a:89:07:1e:ea:74:19:aa:e5:d1:
         e6:65:59:e8:91:cf:90:12:68:f9:9c:ed:ee:36:ce:c0:92:b4:
         2c:26:e9:af:b7:99:dd:18:3a:02:13:70:9f:bc:97:3d:a3:0e:
         63:5e:d9:b0:85:b4:cb:42:50:22:33:b8:e0:a6:0b:81:c9:cf:
         d8:3d:a9:3b:c7:8b:48:63:26:cf:5e:e6:1a:83:d6:97:22:1e:
         97:97:b3:55:b0:57:30:62:22:51:73:e4:ab:98:8d:ab:83:fc:
         8e:56:73:d9:99:c3:3b:4d:16:e7:87:4a:96:ec:3f:b6:ce:4b:
         0a:96:06:b6:af:d3:1f:50:35:77:46:e3:43:cf:37:87:f9:72:
         a0:b2:69:e4:ad:0b:4b:1c:e5:7e:0c:b5:f6:59:bb:a2:0a:c3:
         e1:5f:e7:ba:5a:9c:c1:1f:e4:a6:49:6c:31:4c:6e:7f:df:0f:
         63:29:3e:f8:19:49:dc:48:bd:a7:ea:2c:59:08:2d:06:42:99:
         87:60:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:46 2026 by rpki-client