Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/1MpBSqYh4-eLIKXO26B_rn0Gs04.asa
File:                     1MpBSqYh4-eLIKXO26B_rn0Gs04.asa (raw, json)
Hash identifier:          6dAz34hsdLD1myyxx41DcqNtSwJARjZKKn5MpMYgXRE=
Subject key identifier:   D4:CA:41:4A:A6:21:E3:E7:8B:20:A5:CE:DB:A0:7F:AE:7D:06:B3:4E
Certificate issuer:       /CN=3de9dfc69d3a4747cb87d581e1ebcaf60f2ec878
Certificate serial:       01A184762D197610EED6B8B1A10A21966C1F
Authority key identifier: 3D:E9:DF:C6:9D:3A:47:47:CB:87:D5:81:E1:EB:CA:F6:0F:2E:C8:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Penfxp06R0fLh9WB4evK9g8uyHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/1MpBSqYh4-eLIKXO26B_rn0Gs04.asa
Signing time:             Wed 28 Oct 2026 21:41:39 +0000
ASPA not before:          Wed 28 Oct 2026 21:41:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218294
Providers:                AS: 52025
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/Penfxp06R0fLh9WB4evK9g8uyHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/Penfxp06R0fLh9WB4evK9g8uyHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Penfxp06R0fLh9WB4evK9g8uyHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:76:2d:19:76:10:ee:d6:b8:b1:a1:0a:21:96:6c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de9dfc69d3a4747cb87d581e1ebcaf60f2ec878
        Validity
            Not Before: Oct 28 21:41:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4ca414aa621e3e78b20a5cedba07fae7d06b34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:d7:70:f0:4c:60:79:5e:a4:df:a2:8a:52:
                    8b:c5:78:d5:32:fe:f7:82:b3:74:e8:3e:18:c9:b0:
                    47:90:b2:a9:86:83:61:dc:38:7f:eb:2a:da:02:d4:
                    2b:45:05:6b:70:36:86:50:ed:86:a5:fc:46:ad:24:
                    fc:66:1d:9b:10:46:4a:ec:9f:03:00:45:5c:f6:11:
                    6e:a3:05:65:7b:39:2e:e1:41:ba:c6:47:8c:7c:9a:
                    a1:67:20:cd:3c:ea:0b:c1:9e:bb:1b:72:a1:e3:33:
                    bb:6c:7e:69:93:2c:22:77:f1:0d:9c:d0:05:81:44:
                    c1:cd:d3:88:e2:13:1c:f4:49:7c:3e:46:3f:18:08:
                    65:85:c7:6c:6f:c8:60:04:bd:77:79:9a:3e:37:85:
                    01:99:d3:78:52:db:3d:1d:0e:e1:c2:0a:aa:ed:7b:
                    e0:03:8c:70:1f:6a:08:ac:b0:9e:ca:b1:17:d9:3d:
                    5b:11:f8:9d:20:25:31:1a:7a:34:b3:7b:fe:5b:08:
                    a2:01:f7:91:d4:f8:28:c0:7c:59:2d:f6:a2:99:51:
                    cb:0b:1f:c4:6c:fa:de:fa:cf:1a:fe:b3:6b:bf:1b:
                    6f:54:b6:11:55:68:f0:84:0a:23:f7:bf:14:fb:54:
                    af:58:d5:f8:a3:81:3e:d8:b0:01:5d:47:0b:2a:37:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:41:4A:A6:21:E3:E7:8B:20:A5:CE:DB:A0:7F:AE:7D:06:B3:4E
            X509v3 Authority Key Identifier:
                keyid:3D:E9:DF:C6:9D:3A:47:47:CB:87:D5:81:E1:EB:CA:F6:0F:2E:C8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Penfxp06R0fLh9WB4evK9g8uyHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/1MpBSqYh4-eLIKXO26B_rn0Gs04.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/Penfxp06R0fLh9WB4evK9g8uyHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218294

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:c7:ad:0d:37:b7:f7:13:97:21:43:b2:01:eb:5c:00:c0:
         36:f2:fa:a1:5e:74:52:7c:3e:3d:20:ae:4f:87:e3:48:76:81:
         2a:a6:be:60:37:c2:bc:89:70:1e:10:74:2f:44:83:5b:ad:c2:
         4c:51:f3:89:a7:5a:43:51:52:c3:5d:c0:41:13:5d:54:10:c5:
         a2:fa:30:81:f6:b0:77:fc:80:1c:94:19:a9:96:ae:e4:b6:2a:
         25:04:40:0c:68:b0:d6:ac:b3:17:b0:09:92:e5:92:70:a8:5d:
         4b:0c:6d:92:a1:e8:ef:c9:4b:e0:43:40:ab:c6:04:fa:5f:5c:
         42:19:e3:20:20:9f:2b:3a:b9:cf:79:e3:c2:32:6f:3e:91:1b:
         a6:03:ef:14:30:7a:ff:e5:ac:2b:ea:a8:51:4a:35:dd:5c:b4:
         c8:af:a5:55:66:50:51:f9:45:c3:bf:7f:d2:48:41:fa:7d:8e:
         dd:a0:86:af:19:1d:73:c8:c3:d8:e5:15:5f:11:26:b7:fb:b5:
         c3:99:2a:43:77:d2:78:d0:69:b1:16:c3:c2:c7:8d:e2:50:df:
         d1:e7:01:76:e6:7a:16:ff:10:53:37:c5:57:0c:bc:26:12:bd:
         a3:e4:d1:01:3d:91:51:88:bd:51:4c:56:db:20:db:e3:31:db:
         a5:55:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:53 2026 by rpki-client