Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/5wwU9v8FSUogfNSN19J4VZ0oteM.asa
File:                     5wwU9v8FSUogfNSN19J4VZ0oteM.asa (raw, json)
Hash identifier:          iv4lM9e3ssfCmXLn+uP90YFSHzA4Vl/uc1bB/642ruA=
Subject key identifier:   E7:0C:14:F6:FF:05:49:4A:20:7C:D4:8D:D7:D2:78:55:9D:28:B5:E3
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       01A0D7F99A5828D3E39E96B134CC21663E54
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/5wwU9v8FSUogfNSN19J4VZ0oteM.asa
Signing time:             Fri 25 Sep 2026 09:50:54 +0000
ASPA not before:          Fri 25 Sep 2026 09:50:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61438
Providers:                AS: 174
                          AS: 1299
                          AS: 6939
                          AS: 33891
                          AS: 39912
                          AS: 47147
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:f9:9a:58:28:d3:e3:9e:96:b1:34:cc:21:66:3e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Sep 25 09:50:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e70c14f6ff05494a207cd48dd7d278559d28b5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:b7:68:b4:50:11:17:b0:93:04:c2:82:5e:
                    6d:56:44:f2:ad:23:17:f6:6e:00:fe:e9:73:69:92:
                    41:42:86:74:45:f4:d4:3c:29:c4:a9:f7:a6:0e:2a:
                    63:db:e7:34:9b:11:58:28:5b:34:07:ee:31:d6:1a:
                    b2:aa:a4:5f:66:e9:2e:83:b0:31:ab:3f:16:e0:1a:
                    22:77:f4:c5:e6:61:17:7d:42:4b:41:d5:9d:35:a8:
                    9a:b7:34:3e:ac:24:6d:4b:ed:d7:e9:d8:1f:38:d4:
                    87:48:9c:63:d5:70:87:36:dd:6f:b7:92:a1:70:aa:
                    ca:1c:77:bb:0a:c0:b8:96:8c:b0:6e:3a:49:07:58:
                    23:2e:41:8e:1f:90:e6:0a:25:80:ab:40:5c:3d:31:
                    70:cd:2e:df:35:30:3b:6f:39:0d:af:5a:50:ad:1d:
                    d1:ea:60:f4:6b:a8:63:ed:c6:f3:aa:ba:ab:12:4c:
                    2a:68:a8:58:65:5a:0f:cd:f0:1d:cb:30:39:70:d2:
                    05:e0:06:8a:51:e4:eb:34:8c:92:a7:c3:cb:07:de:
                    b7:ea:d2:aa:d4:63:a8:bf:68:67:a8:4e:c4:ae:03:
                    45:b7:94:02:e7:5c:8e:2b:a9:25:e3:43:35:f0:c5:
                    41:21:23:8a:53:6f:80:31:0b:d3:64:1b:2e:59:08:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0C:14:F6:FF:05:49:4A:20:7C:D4:8D:D7:D2:78:55:9D:28:B5:E3
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/5wwU9v8FSUogfNSN19J4VZ0oteM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61438

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:89:53:3c:5e:5e:37:f3:59:62:b8:28:13:b4:c9:0b:96:
         60:fd:eb:1c:a7:ab:a6:bf:bc:a5:7e:8e:a9:61:e6:80:07:8b:
         f8:12:51:4b:53:7a:16:1a:80:6a:3b:6e:fa:4c:d2:a5:6a:12:
         ed:ef:3d:b0:55:df:a9:35:b3:56:82:6f:a3:c4:2e:be:72:15:
         76:a3:2e:f3:78:17:59:54:01:d9:32:0b:d2:bd:9f:4d:07:9f:
         88:47:2e:d3:db:23:20:51:a3:48:1a:63:e8:a2:b9:df:d9:0f:
         f0:4b:3c:93:fe:76:c2:85:16:e2:53:2f:95:6b:ce:e2:c4:ab:
         6e:b3:40:26:a8:49:08:39:aa:cf:70:64:4b:c1:d2:c5:dc:a5:
         7b:c1:c6:8a:31:b7:e5:00:57:2b:77:f4:33:42:93:8f:ce:89:
         41:88:74:00:12:0d:60:bc:15:09:61:67:78:0b:21:ef:0b:29:
         fd:26:57:00:27:fc:fa:9b:d0:a7:a0:6b:63:7d:af:61:ad:3b:
         93:6a:90:ed:bd:32:1c:5c:39:7f:72:9a:2c:2f:9e:68:56:d5:
         10:90:77:55:0f:e0:4e:ee:3d:15:fc:3f:86:15:b7:77:05:f1:
         ab:2e:25:4b:0a:30:88:2c:a3:2d:a6:2a:b9:5a:52:d2:93:47:
         bd:1d:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:41 2026 by rpki-client