Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/T6kejoeO8STRz12YhgigU3Mw9pU.asa
File:                     T6kejoeO8STRz12YhgigU3Mw9pU.asa (raw, json)
Hash identifier:          mBj2WlGYT5rOFIrcWZaLOEyCZhQV1mqT63bqRW1cB5U=
Subject key identifier:   4F:A9:1E:8E:87:8E:F1:24:D1:CF:5D:98:86:08:A0:53:73:30:F6:95
Certificate issuer:       /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial:       01A0AFC5A97FCF33B19DA288D53A2EADD135
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/T6kejoeO8STRz12YhgigU3Mw9pU.asa
Signing time:             Thu 17 Sep 2026 14:29:21 +0000
ASPA not before:          Thu 17 Sep 2026 14:29:21 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60132
Providers:                AS: 3257
                          AS: 5511
                          AS: 6461
                          AS: 8218
                          AS: 29467
                          AS: 197133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:c5:a9:7f:cf:33:b1:9d:a2:88:d5:3a:2e:ad:d1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
        Validity
            Not Before: Sep 17 14:29:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4fa91e8e878ef124d1cf5d988608a0537330f695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:7c:f5:67:8f:8a:bf:b9:ff:33:ed:f1:2f:
                    b2:35:00:bd:45:39:1e:c3:a3:39:65:e3:83:48:3f:
                    88:be:8f:16:61:c1:79:a9:ab:20:3c:c3:7b:fe:80:
                    66:a9:8c:1d:b7:d1:c8:46:61:76:ad:9d:86:49:11:
                    a8:fe:1b:79:8a:6e:5b:cb:b2:20:74:11:91:3e:c6:
                    8a:a7:e0:87:07:bb:cf:67:bc:19:99:79:95:1f:43:
                    de:da:b9:81:f8:33:4d:f1:1d:5b:41:55:47:53:b1:
                    f0:5b:b6:63:4f:5b:15:b1:75:79:d6:8e:93:51:72:
                    33:ca:72:5c:bb:2b:27:69:1b:24:73:d9:fe:6e:a9:
                    e1:35:3d:50:8a:74:d8:ea:18:16:98:5f:59:fd:69:
                    55:67:2d:b2:f0:e0:50:3f:76:6c:2d:40:23:80:a8:
                    bd:d9:f3:14:72:f6:08:dc:36:93:d4:f9:c3:3c:02:
                    2f:36:ef:01:bd:99:06:9d:4a:cf:6d:b3:d0:8d:ad:
                    74:d3:84:ac:1e:d1:b0:59:a0:05:cc:e4:00:67:7e:
                    44:1f:e1:a5:c7:19:13:67:1d:b2:5c:6e:af:17:2b:
                    23:9d:ef:12:eb:b7:8a:99:22:12:ba:e2:a6:e5:46:
                    a8:1a:a3:e5:87:92:06:83:91:1d:58:e0:d3:10:f6:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:1E:8E:87:8E:F1:24:D1:CF:5D:98:86:08:A0:53:73:30:F6:95
            X509v3 Authority Key Identifier:
                keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/T6kejoeO8STRz12YhgigU3Mw9pU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60132

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:46:ad:08:dc:35:f8:69:6f:1f:3b:ba:d2:dd:07:1a:e2:
         07:ff:ef:e5:53:5b:0e:09:d1:66:9c:47:a9:0e:b0:c4:31:9c:
         8c:00:d9:96:56:c2:65:30:a5:75:ce:1d:59:0c:60:80:28:7b:
         98:c6:93:26:a0:46:47:a9:e8:84:54:52:a3:80:5f:9e:2f:a7:
         f6:94:01:79:ab:42:b1:b6:59:ff:58:d4:30:2b:fa:38:52:a2:
         17:4f:dc:f3:81:3b:3d:b6:7a:ae:e4:41:fc:7d:3b:72:fd:5e:
         74:47:1c:21:fd:70:ac:fe:3c:e1:16:17:d4:c7:ca:33:3e:75:
         b2:e5:7c:f2:ae:99:7e:81:81:ac:7c:b1:50:ce:0e:14:88:bd:
         c2:b3:fc:6a:52:46:7f:92:78:47:83:eb:94:7e:ed:94:4f:b6:
         ea:99:8e:07:40:7a:5f:0f:95:83:6d:0b:91:a1:3c:54:29:7b:
         43:31:ba:d6:70:8a:53:98:01:a0:ea:72:d5:47:91:82:87:41:
         81:4e:65:0d:26:26:1e:85:a1:b7:62:20:56:a1:18:7f:ee:54:
         1b:33:f9:0f:44:13:43:9b:67:ab:d8:c8:4f:93:ed:3b:fa:56:
         e7:e1:27:1f:ee:9d:c3:9b:47:20:7c:30:8a:16:14:59:d9:8b:
         10:39:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:17:40 2026 by rpki-client