Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa
File:                     kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa (raw, json)
Hash identifier:          cC2GU/9BHYBvQG2eT+9DYoAdn2wHGg8+/Gm7GNob5z0=
Subject key identifier:   90:D6:C6:3A:B9:DF:AB:48:33:1D:FA:91:2F:89:38:91:01:C9:AA:2D
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A09082357655936AB331682DED58A05161
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa
Signing time:             Fri 11 Sep 2026 12:47:27 +0000
ASPA not before:          Fri 11 Sep 2026 12:47:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            5381
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:82:35:76:55:93:6a:b3:31:68:2d:ed:58:a0:51:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 11 12:47:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=90d6c63ab9dfab48331dfa912f89389101c9aa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:4e:99:a7:fa:47:86:4e:8b:4e:ec:70:74:
                    75:c7:cd:31:c0:4d:97:09:54:98:4c:87:6a:09:f7:
                    db:a6:ad:79:b6:c2:c5:e2:d9:14:b7:95:53:57:b0:
                    8f:3a:cc:e4:99:45:f8:f1:09:3f:08:6e:03:8c:c9:
                    36:c2:67:82:e6:98:6c:e1:31:7b:97:84:c0:b8:67:
                    a1:4c:a5:f7:bf:0f:a5:68:b7:ea:e6:58:8a:d0:82:
                    b2:91:9e:ce:65:87:ba:31:4a:52:94:8f:df:15:89:
                    8a:54:bd:21:62:81:7a:e4:25:71:c1:af:f8:3c:af:
                    4a:ec:40:f9:ec:8c:e0:86:4f:0a:96:58:d2:6a:a7:
                    fb:cf:fc:d5:9b:3f:c5:51:ba:85:71:5a:56:46:11:
                    5c:5d:48:29:b9:2a:ab:e6:06:4e:83:b4:7b:d9:35:
                    7c:42:58:42:b3:10:11:43:97:51:50:47:16:23:ea:
                    d7:12:67:60:72:9b:75:fa:01:48:d3:45:15:18:80:
                    88:e9:be:fa:74:32:f1:d1:bf:aa:0c:13:93:1e:d3:
                    d8:fe:f6:a5:bd:d7:91:8d:ee:1d:c5:ac:06:66:04:
                    67:4e:be:c9:6b:27:c8:0d:3f:4e:42:90:71:b0:5f:
                    f8:35:0e:53:e4:24:d4:4b:12:01:86:13:de:e0:63:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:C6:3A:B9:DF:AB:48:33:1D:FA:91:2F:89:38:91:01:C9:AA:2D
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5381

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:9d:78:d1:2f:e8:03:e8:e9:9c:a9:bd:2b:a4:dc:4c:54:
         01:13:1c:76:73:19:7c:18:d9:4d:e6:6d:1e:23:b4:47:25:a9:
         61:1f:aa:bd:59:08:60:ce:c7:ea:4e:62:cc:b5:51:02:f3:29:
         c1:74:c6:8d:2f:b6:73:4b:27:1a:49:56:ec:c7:ea:e6:57:0f:
         5a:fb:41:4f:5e:bb:fb:92:87:4d:bb:3b:1d:95:c3:e2:de:f8:
         94:cc:23:62:f8:6c:c8:ef:b0:3b:d9:69:a7:20:0d:7a:7c:b6:
         f2:09:6b:04:d3:24:79:76:6b:b9:79:d8:2c:55:3f:b2:97:5d:
         b0:ee:a8:1a:be:28:69:49:4f:02:04:d2:ef:af:27:ad:1c:5f:
         ea:1b:fd:87:21:f7:38:39:dd:15:0a:d0:7e:b4:d3:e1:ce:10:
         b3:9d:f4:9e:e2:1a:1a:15:7c:77:d0:f0:10:22:ec:fe:32:ac:
         d6:dc:19:71:c5:6e:28:4b:88:e8:72:80:7c:42:45:26:8e:11:
         78:f1:43:6a:66:2d:8a:2f:d0:03:54:39:f7:08:5e:91:3e:ca:
         30:02:f0:90:d2:10:d1:f5:32:4a:81:cd:84:a3:b8:3e:70:0a:
         7c:81:82:b2:2a:e2:3f:42:d4:c4:66:69:d0:ce:90:4f:c7:be:
         39:da:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:11:50 2026 by rpki-client