Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/JLByziykIJxOkdRHlfnOUIKld14.asa
File:                     JLByziykIJxOkdRHlfnOUIKld14.asa (raw, json)
Hash identifier:          HqyCTDNuHO2yjsx9RL3OglB542RB34xPOGuCGG7RJxc=
Subject key identifier:   24:B0:72:CE:2C:A4:20:9C:4E:91:D4:47:95:F9:CE:50:82:A5:77:5E
Certificate issuer:       /CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Certificate serial:       01A183CEA3C5CB9E3E764887D2EF26C19673
Authority key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/JLByziykIJxOkdRHlfnOUIKld14.asa
Signing time:             Wed 28 Oct 2026 18:38:39 +0000
ASPA not before:          Wed 28 Oct 2026 18:38:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218805
Providers:                AS: 6939
                          AS: 47272
                          AS: 205941
                          AS: 212396
                          AS: 214480
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:ce:a3:c5:cb:9e:3e:76:48:87:d2:ef:26:c1:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
        Validity
            Not Before: Oct 28 18:38:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24b072ce2ca4209c4e91d44795f9ce5082a5775e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:be:c5:46:86:2c:33:56:44:99:ca:a0:e8:
                    60:ff:98:4d:fb:3b:5f:a7:7d:8e:3d:8b:f3:7a:d2:
                    22:df:11:09:10:e6:4c:6d:01:aa:4b:ec:4c:33:df:
                    09:2f:04:fd:d9:ed:ee:93:cf:dc:19:5d:40:6b:5c:
                    dc:55:60:0c:ee:43:b3:f2:02:1f:6d:85:5e:a9:7f:
                    b2:7f:78:b3:41:1d:96:f8:b6:da:e1:c7:0e:fd:a3:
                    97:91:4a:4b:de:2d:a1:c8:e6:48:11:c6:6a:31:35:
                    ea:e6:24:dd:6a:9f:00:da:c7:c6:4f:c9:40:9b:4b:
                    a5:f5:50:c1:01:a2:d4:18:79:69:1e:fb:df:0f:c9:
                    6a:41:f4:2a:b9:ae:29:1f:03:9f:32:54:a3:de:e5:
                    9b:18:49:b6:56:9a:ac:6a:04:58:85:1f:09:9d:c5:
                    e5:76:05:9b:ba:8c:9a:4e:5b:dd:de:d6:85:97:12:
                    e0:7d:24:91:b3:af:a6:a0:dc:24:e0:b6:d1:cc:e6:
                    a5:ff:8a:40:f9:9f:e1:10:34:d9:26:c1:3b:0d:2c:
                    1f:d6:8f:44:7b:24:c8:97:a1:a5:9a:ab:cc:c8:37:
                    2f:61:af:e5:ee:57:a8:3b:73:85:47:d5:91:e0:78:
                    83:7e:90:4f:bf:3c:26:65:f1:fc:c9:bf:83:45:96:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B0:72:CE:2C:A4:20:9C:4E:91:D4:47:95:F9:CE:50:82:A5:77:5E
            X509v3 Authority Key Identifier:
                keyid:D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/JLByziykIJxOkdRHlfnOUIKld14.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218805

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:32:f4:8e:79:a3:f1:ef:bf:5c:b5:a3:2d:72:c6:cd:70:
         96:32:19:8d:14:ab:d2:a1:6f:e0:d4:30:10:62:8f:88:5c:f7:
         da:2a:ee:bf:a2:f3:34:52:31:24:7c:15:e2:2e:b2:80:54:75:
         cc:29:aa:7e:2f:6e:23:70:8f:1e:dc:13:b0:14:1a:8c:34:02:
         23:09:e0:1d:1b:42:7c:42:35:1b:bd:4e:b9:d5:b8:28:b3:ba:
         e2:3b:ca:6f:9c:ce:4e:73:07:da:83:a1:66:22:f5:12:a9:76:
         35:78:2e:13:74:96:5e:7f:99:8f:26:bf:cd:15:8f:50:b4:06:
         2b:92:02:32:ca:73:44:a9:ff:ba:1e:eb:17:6a:82:81:0c:5d:
         d0:2a:65:2f:1d:98:06:fc:78:74:1a:2b:43:ce:53:5d:78:db:
         94:03:e3:e1:35:fc:0d:04:ef:a3:bb:ab:0e:f3:86:ff:7d:33:
         51:50:2c:44:e5:c5:71:db:cf:a7:bd:35:71:3f:2e:24:55:78:
         3c:4f:de:52:6d:a8:4f:d8:06:78:e8:16:eb:9e:b5:b0:6a:c6:
         76:a8:49:31:cb:90:eb:fa:32:1d:32:db:3c:9f:0b:bd:f7:db:
         11:dd:66:76:2c:ae:ca:93:4b:1a:40:9d:93:6a:b8:38:02:89:
         2a:b1:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:47:41 2026 by rpki-client