Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/MY9A8Xeb0N-K5vXDJ0vD1mBf-CM.asa
File:                     MY9A8Xeb0N-K5vXDJ0vD1mBf-CM.asa (raw, json)
Hash identifier:          FBGJv4o6KkeEqxmZUBg/x2ekwQ+aHLPbavU8HGMllfo=
Subject key identifier:   31:8F:40:F1:77:9B:D0:DF:8A:E6:F5:C3:27:4B:C3:D6:60:5F:F8:23
Certificate issuer:       /CN=46ee41899a0f5176df8a72ad172b1e59bf3999df
Certificate serial:       01A1CC001763EDF11834B40BF81ED2E7C45D
Authority key identifier: 46:EE:41:89:9A:0F:51:76:DF:8A:72:AD:17:2B:1E:59:BF:39:99:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru5BiZoPUXbfinKtFyseWb85md8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/MY9A8Xeb0N-K5vXDJ0vD1mBf-CM.asa
Signing time:             Wed 11 Nov 2026 19:05:20 +0000
ASPA not before:          Wed 11 Nov 2026 19:05:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218218
Providers:                AS: 6939
                          AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 208210
                          AS: 210233
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/Ru5BiZoPUXbfinKtFyseWb85md8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/Ru5BiZoPUXbfinKtFyseWb85md8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru5BiZoPUXbfinKtFyseWb85md8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cc:00:17:63:ed:f1:18:34:b4:0b:f8:1e:d2:e7:c4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ee41899a0f5176df8a72ad172b1e59bf3999df
        Validity
            Not Before: Nov 11 19:05:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=318f40f1779bd0df8ae6f5c3274bc3d6605ff823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:7c:f5:e9:e4:50:3d:ec:2a:9d:c9:65:36:
                    e4:7c:31:d0:4e:ae:e4:bf:a0:1e:75:4d:82:5e:30:
                    6c:0c:ef:83:de:c9:58:ec:99:e3:70:7f:4b:7d:9d:
                    6c:9a:d9:e5:c6:db:b0:ec:8e:ae:d4:7c:1e:3b:bb:
                    a2:ad:41:86:10:dc:e3:ed:51:69:22:4a:03:87:50:
                    b4:e2:f6:d2:f0:4b:26:31:7d:72:aa:ad:d4:73:4f:
                    01:ee:d3:9c:16:1c:33:57:2c:ae:5b:b0:61:07:b2:
                    bf:f2:9b:33:ce:5d:aa:38:7a:0b:52:98:40:55:d7:
                    ad:87:b0:63:0d:fe:ef:c0:36:af:52:31:20:57:71:
                    58:ae:6e:a8:65:b2:31:dc:52:83:0a:f8:2d:1c:83:
                    38:df:9d:88:76:f9:e9:91:07:2c:3f:02:45:3b:62:
                    7f:5d:38:15:f7:48:ab:1a:24:7b:73:c8:75:84:0c:
                    d0:93:4e:d1:a3:ba:05:2e:fd:d7:c9:79:9a:31:93:
                    f4:20:07:71:90:09:83:dd:e8:33:f8:8a:c6:b8:45:
                    31:0f:c2:22:5e:fa:b1:33:90:62:f3:6e:86:15:3f:
                    78:64:c0:c8:95:21:3c:6e:b5:1a:b0:4a:0b:9d:ed:
                    fb:e3:6b:16:00:8e:cc:2a:88:eb:63:fb:76:2d:d6:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8F:40:F1:77:9B:D0:DF:8A:E6:F5:C3:27:4B:C3:D6:60:5F:F8:23
            X509v3 Authority Key Identifier:
                keyid:46:EE:41:89:9A:0F:51:76:DF:8A:72:AD:17:2B:1E:59:BF:39:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru5BiZoPUXbfinKtFyseWb85md8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/MY9A8Xeb0N-K5vXDJ0vD1mBf-CM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/Ru5BiZoPUXbfinKtFyseWb85md8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218218

    Signature Algorithm: sha256WithRSAEncryption
         f2:e8:54:39:99:d6:48:00:0b:39:92:fb:a0:a8:7f:49:19:5f:
         59:ea:aa:93:ba:98:7d:65:e1:45:6a:86:29:91:e8:c4:78:51:
         d7:e2:ab:13:64:69:85:f1:21:0b:c1:c9:8c:31:12:b0:34:8c:
         b3:cc:a8:67:0c:54:92:28:6d:49:4d:30:45:8f:d3:4c:54:53:
         9e:d4:6d:28:af:69:d9:78:12:e5:82:12:74:e2:ba:eb:58:7f:
         d7:8f:28:09:52:ee:57:63:88:d1:4c:d1:cb:44:ea:6c:61:c9:
         2f:55:22:fc:97:e7:e2:a4:4e:38:bf:82:68:d2:55:93:20:5b:
         95:65:54:e5:f9:1e:43:36:f1:a9:aa:59:68:de:7e:0d:b4:9f:
         fe:49:e7:5c:e6:09:f8:b5:84:37:b5:a0:89:ee:74:23:73:55:
         b2:37:89:21:f1:61:6e:9c:4a:1d:fc:89:43:c3:a0:92:c5:32:
         9d:e9:4c:5c:80:ec:b5:a9:37:f8:e2:da:b6:59:ef:2d:a9:7b:
         7a:5a:ca:9e:0f:44:0c:3a:f7:55:0d:05:cb:78:87:83:24:4a:
         72:1b:12:1d:c4:85:0e:6f:a2:7e:6c:eb:2f:9e:9f:53:80:20:
         82:37:ff:5a:50:d5:6f:f5:7b:19:b0:a4:bc:09:7f:82:d0:44:
         0d:84:60:0e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaHMABdj7fEYNLQL+B7S58RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWU0MTg5OWEwZjUxNzZkZjhhNzJhZDE3MmIxZTU5YmYz
OTk5ZGYwHhcNMjYxMTExMTkwNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMThmNDBmMTc3OWJkMGRmOGFlNmY1YzMyNzRiYzNkNjYwNWZmODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12R89enkUD3sKp3JZTbkfDHQTq7k
v6AedU2CXjBsDO+D3slY7JnjcH9LfZ1smtnlxtuw7I6u1HweO7uirUGGENzj7VFp
IkoDh1C04vbS8EsmMX1yqq3Uc08B7tOcFhwzVyyuW7BhB7K/8pszzl2qOHoLUphA
Vdeth7BjDf7vwDavUjEgV3FYrm6oZbIx3FKDCvgtHIM4352IdvnpkQcsPwJFO2J/
XTgV90irGiR7c8h1hAzQk07Ro7oFLv3XyXmaMZP0IAdxkAmD3egz+IrGuEUxD8Ii
XvqxM5Bi826GFT94ZMDIlSE8brUasEoLne3742sWAI7MKojrY/t2LdbXyQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDGPQPF3m9Dfiub1wydLw9ZgX/gjMB8GA1UdIwQY
MBaAFEbuQYmaD1F234pyrRcrHlm/OZnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnU1Qmlab1BVWGJmaW5LdEZ5c2VXYjg1bWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kOGYyODUtNTdhNy00ODY1LTgwYzMt
YTYyZDkzOGQzNWU2LzEvTVk5QThYZWIwTi1LNXZYREowdkQxbUJmLUNNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kOGYyODUtNTdhNy00ODY1LTgwYzMtYTYyZDkzOGQzNWU2
LzEvUnU1Qmlab1BVWGJmaW5LdEZ5c2VXYjg1bWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNUajANBgkqhkiG
9w0BAQsFAAOCAQEA8uhUOZnWSAALOZL7oKh/SRlfWeqqk7qYfWXhRWqGKZHoxHhR
1+KrE2RphfEhC8HJjDESsDSMs8yoZwxUkihtSU0wRY/TTFRTntRtKK9p2XgS5YIS
dOK661h/148oCVLuV2OI0UzRy0TqbGHJL1Ui/Jfn4qROOL+CaNJVkyBblWVU5fke
QzbxqapZaN5+DbSf/knnXOYJ+LWEN7Wgie50I3NVsjeJIfFhbpxKHfyJQ8OgksUy
nelMXIDstak3+OLatlnvLal7elrKng9EDDr3VQ0Fy3iHgyRKchsSHcSFDm+ifmzr
L56fU4Aggjf/WlDVb/V7GbCkvAl/gtBEDYRgDg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:40 2026 by rpki-client