Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/k0-sr1otnLush7BXbOQg3Kr4Zog.asa
File:                     k0-sr1otnLush7BXbOQg3Kr4Zog.asa (raw, json)
Hash identifier:          W4A6B38EMlC2Mw9enNNdoGrJvQBdROS5L+dxnC72N0M=
Subject key identifier:   93:4F:AC:AF:5A:2D:9C:BB:AC:87:B0:57:6C:E4:20:DC:AA:F8:66:88
Certificate issuer:       /CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Certificate serial:       01A062FE7E30A717194B6FD7D4495F8DA134
Authority key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/k0-sr1otnLush7BXbOQg3Kr4Zog.asa
Signing time:             Wed 02 Sep 2026 16:40:40 +0000
ASPA not before:          Wed 02 Sep 2026 16:40:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218805
Providers:                AS: 212396
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:62:fe:7e:30:a7:17:19:4b:6f:d7:d4:49:5f:8d:a1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
        Validity
            Not Before: Sep  2 16:40:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=934facaf5a2d9cbbac87b0576ce420dcaaf86688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:95:55:b4:0e:eb:ca:e1:62:69:64:07:ac:
                    77:d4:72:98:66:94:bb:b5:8c:74:de:4d:ac:10:02:
                    85:83:3a:6a:3e:4f:e2:aa:65:8c:3f:15:d3:cf:50:
                    bd:6a:da:02:ca:35:57:da:ed:3c:70:9b:39:15:dc:
                    fc:b8:d5:20:83:47:79:38:53:70:bd:75:cc:f5:09:
                    26:92:85:2b:9e:4b:59:f9:65:e4:40:5c:b2:29:a3:
                    d5:30:94:8e:58:c9:7f:43:f9:c8:4f:2b:4d:4d:ac:
                    ed:19:27:43:dd:79:3b:c3:ae:15:9a:df:25:a4:dd:
                    92:36:36:e5:94:f6:5e:9c:c8:b7:48:e9:6c:8b:cd:
                    35:42:ba:f7:c6:40:c9:7f:66:0b:7b:a5:bc:c9:0e:
                    90:01:fa:a2:ff:92:ff:22:45:af:97:36:85:67:aa:
                    3f:01:71:68:f2:5e:c1:e7:c2:8c:db:81:4d:d1:f8:
                    de:30:8a:40:c4:4f:96:7d:3c:fe:a2:5d:34:97:f2:
                    a3:4f:fd:0e:30:4a:8d:b8:85:31:1e:10:fd:cf:39:
                    00:21:81:94:83:88:b2:ed:15:88:48:6b:50:0e:90:
                    66:e7:81:3b:4b:31:35:79:76:69:a7:47:4e:17:bd:
                    54:51:2f:ad:e8:0e:df:52:00:97:3d:35:28:81:01:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:AC:AF:5A:2D:9C:BB:AC:87:B0:57:6C:E4:20:DC:AA:F8:66:88
            X509v3 Authority Key Identifier:
                keyid:D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/k0-sr1otnLush7BXbOQg3Kr4Zog.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218805

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:68:b0:3c:f4:51:31:89:ce:b0:c9:3f:69:f1:dc:07:5f:
         e5:98:0a:3d:3b:be:ae:7a:e1:ca:b8:cf:5f:06:7b:4d:27:be:
         c0:6e:3c:f7:5a:21:cc:97:a6:31:1d:bd:a2:d8:74:67:ec:05:
         e0:05:dc:1f:ab:51:52:ea:b5:f2:22:c6:2c:81:8a:ef:a0:1d:
         82:c0:96:1d:f4:4b:83:22:ee:b8:a5:3a:12:c1:31:43:0f:16:
         9f:87:b7:bf:c8:f6:7b:74:f1:c8:53:bf:4d:84:49:5a:a4:05:
         3e:e6:12:39:08:b9:86:0e:ab:66:46:46:f0:b1:38:f5:f2:82:
         42:90:12:c0:e9:63:0e:d4:0b:c5:96:9c:16:e4:de:cc:5e:6f:
         83:3a:1a:75:9c:14:8a:e7:4b:76:e7:27:f4:1c:06:b4:3e:c5:
         65:27:ca:fa:cf:c4:4c:30:52:7f:73:66:64:1e:db:e5:b3:82:
         9e:4e:57:01:e2:bc:62:b4:03:dd:ca:a5:38:a2:29:a5:36:eb:
         bc:c9:4e:b3:de:5e:8f:6e:b6:96:ff:ce:20:0f:b9:f0:6d:87:
         bf:40:06:05:b7:97:8f:da:6b:48:72:2b:46:f0:b5:20:82:38:
         6d:0d:37:5c:15:d8:e2:b7:74:33:76:21:54:fa:a5:34:7a:6a:
         cc:32:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:30 2026 by rpki-client