Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/0nsQlI2Q6VKuaOUgjwGNyZF3vB8.asa
File:                     0nsQlI2Q6VKuaOUgjwGNyZF3vB8.asa (raw, json)
Hash identifier:          Ie7UawQmjTH7gM7c8xmI0RKRLAkQn7R/Yr36TjZeG/o=
Subject key identifier:   D2:7B:10:94:8D:90:E9:52:AE:68:E5:20:8F:01:8D:C9:91:77:BC:1F
Certificate issuer:       /CN=41eef1fa5c42862f64a535d7d59ae60748255aac
Certificate serial:       01A11F35424B284076B39ACF85170202AB9D
Authority key identifier: 41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/0nsQlI2Q6VKuaOUgjwGNyZF3vB8.asa
Signing time:             Fri 09 Oct 2026 05:49:06 +0000
ASPA not before:          Fri 09 Oct 2026 05:49:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219484
Providers:                AS: 24521
                          AS: 137409
                          AS: 138840
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:35:42:4b:28:40:76:b3:9a:cf:85:17:02:02:ab:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41eef1fa5c42862f64a535d7d59ae60748255aac
        Validity
            Not Before: Oct  9 05:49:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d27b10948d90e952ae68e5208f018dc99177bc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:68:c0:f1:e9:fc:ed:fe:ec:76:37:34:d0:
                    bf:4e:d9:6e:96:44:49:c3:46:7b:43:5a:04:8e:97:
                    73:0f:0a:e6:cf:b7:7e:d2:5b:fd:a0:be:a7:ef:7b:
                    58:41:ab:53:53:32:dc:19:2f:7f:9b:d0:ae:9f:c8:
                    ed:af:14:54:b6:42:3e:17:6a:70:83:fe:8d:11:e3:
                    7a:c7:e6:43:bd:a5:68:9d:26:fc:92:31:ba:47:95:
                    49:bd:1b:ee:1b:21:57:6a:41:74:b0:07:b7:6e:43:
                    de:21:a1:44:de:6a:44:24:1f:5e:2c:db:4b:61:54:
                    29:1a:9d:a3:a0:da:a6:56:74:dc:ab:da:b8:cf:28:
                    c9:b2:cf:38:07:14:53:9a:4d:f6:bf:84:7e:c4:dc:
                    98:2a:f2:c2:c9:73:a2:35:f0:19:b8:43:a2:96:ef:
                    e0:90:31:25:bd:d1:21:84:ff:71:ec:9e:1a:b8:06:
                    54:4f:da:9c:7d:25:c5:2d:77:0b:24:50:71:95:85:
                    c7:07:e8:89:99:82:de:a5:a0:cb:01:21:ca:74:67:
                    a2:36:89:b7:49:50:fc:83:8f:c0:87:5f:e7:30:b3:
                    1c:27:62:ae:5a:d3:5d:58:5d:e9:c8:59:08:f3:e7:
                    95:1a:c8:77:15:29:9d:06:c7:e4:29:d4:fd:42:c5:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:10:94:8D:90:E9:52:AE:68:E5:20:8F:01:8D:C9:91:77:BC:1F
            X509v3 Authority Key Identifier:
                keyid:41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/0nsQlI2Q6VKuaOUgjwGNyZF3vB8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219484

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:be:ba:d4:81:9f:a4:6d:4e:e9:15:90:39:cf:5a:4c:7d:
         68:0c:41:7e:27:ee:4b:97:14:9d:e8:91:65:df:81:de:22:27:
         ce:eb:95:49:a4:7b:2e:8c:fe:d3:65:8b:9e:89:2e:11:57:bd:
         3b:a8:d0:d1:94:e7:8b:ba:32:80:de:48:8c:ac:7b:3f:14:10:
         c0:0e:44:49:dc:07:3a:85:78:d2:ed:4f:d3:cf:aa:6e:b2:68:
         5d:c0:d2:3c:08:88:a7:44:85:fd:12:2e:b1:f6:80:92:5e:8f:
         e1:04:7f:9b:fb:6f:ec:79:e0:4b:10:08:c2:9e:ba:2c:67:ee:
         70:e3:92:e1:4e:fc:17:9d:b0:bb:07:40:56:b7:64:83:b3:7c:
         51:37:97:dd:16:26:ae:08:ef:9b:14:63:91:ef:8c:4a:94:98:
         19:7e:fb:0a:3c:7b:24:51:4f:55:ff:67:29:1e:fa:0c:22:b5:
         56:62:71:38:ef:00:be:b2:4e:ac:e8:4d:26:cb:78:04:46:19:
         83:dd:85:90:c3:76:bf:cf:a2:cb:e3:b3:39:5a:db:51:c4:04:
         6f:e7:f0:ac:2e:33:09:81:26:e8:a1:bd:44:da:f5:9a:a3:9c:
         1c:0f:8b:26:ee:1f:58:2d:6b:1a:82:00:00:c0:fd:f5:7f:f0:
         e7:95:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:43:24 2026 by rpki-client