Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/ZUTF7_8DLVs6iqcU7D91xWqe-Xo.asa
File:                     ZUTF7_8DLVs6iqcU7D91xWqe-Xo.asa (raw, json)
Hash identifier:          5QirNPUcmtsZHwaskv1RmSE7lmilnNlyy8Kqg9ckis0=
Subject key identifier:   65:44:C5:EF:FF:03:2D:5B:3A:8A:A7:14:EC:3F:75:C5:6A:9E:F9:7A
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       01A0FC11F615071D066947599FCB07E77506
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/ZUTF7_8DLVs6iqcU7D91xWqe-Xo.asa
Signing time:             Fri 02 Oct 2026 10:03:50 +0000
ASPA not before:          Fri 02 Oct 2026 10:03:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199580
Providers:                AS: 30893
                          AS: 35661
                          AS: 213768
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:11:f6:15:07:1d:06:69:47:59:9f:cb:07:e7:75:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Oct  2 10:03:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6544c5efff032d5b3a8aa714ec3f75c56a9ef97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:0e:67:b1:03:22:1a:31:07:67:3e:0a:1a:
                    e0:07:31:69:57:02:13:ac:92:44:45:dd:98:82:d8:
                    5c:8f:7a:14:8a:b6:c4:56:30:89:a5:f9:d2:8d:d8:
                    38:c0:34:83:9f:d6:21:7d:f1:42:0f:00:a5:27:52:
                    51:cf:76:54:83:73:30:bd:52:be:40:32:42:38:08:
                    a5:c0:e3:f8:06:7b:ae:03:cc:99:5b:38:8d:b2:54:
                    5d:4c:c0:03:61:cc:0b:44:f8:65:bb:e7:dd:37:0d:
                    79:41:55:ca:03:88:35:d2:88:6c:03:ac:9a:74:17:
                    3a:7e:ac:c9:9e:40:4e:c3:8d:87:be:9b:41:bb:81:
                    14:61:1d:8a:a3:64:da:7e:e9:e1:39:d0:ee:e4:dd:
                    ff:ad:90:4f:33:a0:25:b1:e0:6f:58:ea:4f:d5:0c:
                    0d:37:f2:a3:69:35:29:2a:5d:14:f0:19:e1:be:e2:
                    dd:5b:de:cc:d9:57:f4:73:f4:0e:1e:35:16:12:c3:
                    fa:11:e1:44:46:f5:1a:b6:d4:a8:be:e9:fa:28:4a:
                    72:2c:38:38:41:dd:62:3b:41:47:a2:9b:d0:9d:14:
                    45:ad:44:f9:9b:d5:ad:79:10:d9:ce:08:6b:1c:c1:
                    17:cf:11:2e:17:65:e3:df:d9:c5:78:0f:07:7e:9d:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:C5:EF:FF:03:2D:5B:3A:8A:A7:14:EC:3F:75:C5:6A:9E:F9:7A
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/ZUTF7_8DLVs6iqcU7D91xWqe-Xo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199580

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:36:66:6c:b3:e7:0e:4c:b8:06:9b:7c:fa:b8:ff:32:8d:
         62:e0:9a:8e:96:32:45:aa:eb:d5:5c:12:b4:3c:c2:00:ce:e1:
         86:37:2e:33:d6:cd:b5:83:09:64:80:0a:ba:8e:d7:ce:c9:c8:
         e5:e8:e7:42:71:60:af:71:b6:07:e3:7b:7e:1f:79:7a:a2:ad:
         cb:24:f6:30:26:36:4d:95:cd:bb:b1:68:e9:d3:cd:11:5c:c2:
         de:79:07:17:15:36:e0:0d:64:45:4c:75:bc:1b:4f:73:3e:77:
         c7:da:70:b9:9b:f6:d1:8c:59:db:0c:b0:1c:bd:a9:47:ef:17:
         34:13:6b:e8:3d:ba:41:54:2f:c2:af:74:76:5f:76:d8:59:4a:
         e7:4f:57:af:16:da:c7:b8:e8:dd:18:be:dc:10:fa:01:48:5d:
         34:e5:b3:4f:ac:5d:1a:67:14:51:f6:30:d7:a2:c0:1e:7b:c2:
         22:b5:90:c7:1b:64:03:5c:ae:2d:b7:12:d6:55:9b:5c:9c:a3:
         5f:80:71:69:b3:a0:1b:9c:36:b5:43:8d:d0:82:b2:e2:b3:3e:
         16:dd:b2:a9:bb:47:21:40:5e:1f:a8:ab:72:86:7d:49:eb:de:
         a5:a2:ab:7e:13:4c:a0:6f:b1:eb:02:52:11:0e:c3:95:30:06:
         6d:40:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:12:11 2026 by rpki-client