Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/17kQshB363KWnmuIeBKThtYVQ5E.asa
File:                     17kQshB363KWnmuIeBKThtYVQ5E.asa (raw, json)
Hash identifier:          q5bzKCk6gTxlEMmUUF8Dkow0UZ47/8gkAlFSBNvHUCw=
Subject key identifier:   D7:B9:10:B2:10:77:EB:72:96:9E:6B:88:78:12:93:86:D6:15:43:91
Certificate issuer:       /CN=ba54d08b2b9006e66a483d482604f48b948529bb
Certificate serial:       01A19C9F3F365068C30DE8BC9A69C2167723
Authority key identifier: BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/17kQshB363KWnmuIeBKThtYVQ5E.asa
Signing time:             Mon 02 Nov 2026 14:17:24 +0000
ASPA not before:          Mon 02 Nov 2026 14:17:24 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218216
Providers:                AS: 8283
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9c:9f:3f:36:50:68:c3:0d:e8:bc:9a:69:c2:16:77:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba54d08b2b9006e66a483d482604f48b948529bb
        Validity
            Not Before: Nov  2 14:17:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7b910b21077eb72969e6b8878129386d6154391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:2c:9d:04:22:89:65:68:78:cc:db:f5:1a:
                    05:5e:de:18:8b:28:bf:41:29:d3:e2:e3:c8:8c:32:
                    5b:15:cd:3b:62:23:d4:4b:fe:bb:53:11:87:61:a0:
                    cf:3d:51:bf:61:d9:88:42:98:61:60:a1:31:ea:b0:
                    86:ff:3c:7c:72:4a:a9:0d:97:83:65:c7:0f:26:05:
                    08:ee:be:60:95:55:5d:ac:78:73:8c:8e:39:a5:0f:
                    90:49:20:72:87:df:f1:50:5c:c2:53:93:ce:00:63:
                    c9:09:e7:ec:da:d5:df:60:74:9c:36:08:38:e3:52:
                    11:c0:d6:c6:58:6e:d7:b6:84:2a:93:97:86:1d:61:
                    a1:93:31:65:9a:0e:78:bb:2d:0b:c8:09:de:ae:85:
                    98:f6:58:ab:ae:f3:33:5b:65:1c:c8:52:e6:3e:f2:
                    e9:26:9d:90:81:e4:c5:d1:59:3d:6f:21:0a:bb:1c:
                    a4:2d:65:99:73:ac:03:38:2e:17:a4:9d:33:62:eb:
                    ca:90:e9:47:f1:22:21:55:fb:a5:f7:09:93:0e:e8:
                    89:28:64:a1:1d:f7:e6:e0:f4:be:6e:a6:4f:58:6a:
                    fe:1a:fa:d8:19:e6:06:b0:33:4a:fb:df:a0:0a:eb:
                    95:07:5a:9d:06:66:f7:2d:69:69:9d:29:3a:da:e0:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:10:B2:10:77:EB:72:96:9E:6B:88:78:12:93:86:D6:15:43:91
            X509v3 Authority Key Identifier:
                keyid:BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/17kQshB363KWnmuIeBKThtYVQ5E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218216

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:5b:3b:f0:d3:4c:49:b8:19:53:7a:a5:fe:4e:65:36:c5:
         4f:41:53:78:c2:0b:6d:ae:f4:a3:07:01:64:55:1a:45:67:13:
         b4:ee:50:0b:31:eb:1c:f4:67:33:08:a4:87:57:35:35:61:2a:
         40:54:6b:08:32:ab:a2:c7:39:ae:67:da:7d:bc:c0:ea:d1:b4:
         72:fc:e2:86:c6:a7:33:aa:8e:74:75:08:e5:7b:6d:d0:1c:e7:
         a0:92:d1:25:95:70:61:4d:43:bc:9c:7c:b0:98:d1:a0:50:23:
         dd:40:95:d0:07:06:73:e1:1a:f3:22:0c:44:c6:a3:3a:07:bd:
         49:71:6b:78:28:a1:d8:e7:3e:a0:c6:6d:d4:17:fe:ce:e1:f2:
         ae:b2:cf:cf:2c:a6:e9:cc:5b:6a:47:f1:a5:1c:7c:c2:24:71:
         b8:a3:62:0c:4f:3f:88:62:6d:d5:8d:88:65:af:1d:70:4d:74:
         83:4c:ea:81:1e:ed:83:b1:ee:69:0e:14:e0:32:b0:2e:f5:29:
         d6:06:9e:7f:ca:19:24:4c:96:e4:2d:c4:11:f3:56:78:5b:c6:
         1d:7d:63:73:b1:44:a6:c4:b0:fd:f6:97:3e:cf:fc:22:5e:bc:
         51:db:c3:3b:d6:19:2c:a7:82:20:59:26:b7:62:0a:41:2a:63:
         73:0c:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:51:34 2026 by rpki-client