Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/2Da_HNdbpt1g8RClhoc6y5NOyXw.asa
File:                     2Da_HNdbpt1g8RClhoc6y5NOyXw.asa (raw, json)
Hash identifier:          e7ratRtzKkgYwQ8J6M1al0MUrV4bWTHMDvlaN0crirI=
Subject key identifier:   D8:36:BF:1C:D7:5B:A6:DD:60:F1:10:A5:86:87:3A:CB:93:4E:C9:7C
Certificate issuer:       /CN=5dadda4179dc2d54402e28292a735745234f3176
Certificate serial:       01A0EEA7F148312B8690295C67B047EA92BF
Authority key identifier: 5D:AD:DA:41:79:DC:2D:54:40:2E:28:29:2A:73:57:45:23:4F:31:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/2Da_HNdbpt1g8RClhoc6y5NOyXw.asa
Signing time:             Tue 29 Sep 2026 19:32:58 +0000
ASPA not before:          Tue 29 Sep 2026 19:32:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218579
Providers:                AS: 16276
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:a7:f1:48:31:2b:86:90:29:5c:67:b0:47:ea:92:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dadda4179dc2d54402e28292a735745234f3176
        Validity
            Not Before: Sep 29 19:32:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d836bf1cd75ba6dd60f110a586873acb934ec97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:24:35:85:84:bc:a8:f7:b7:f2:a9:3a:ff:
                    76:63:a4:dc:8e:02:a8:33:19:ee:24:01:53:a7:45:
                    be:9f:ff:20:97:dd:59:8c:b7:21:7e:bc:59:99:75:
                    e7:a4:81:13:77:5a:c9:0d:ff:0b:b6:74:0e:b5:04:
                    c2:ac:3c:0a:8e:86:f0:5d:1a:31:e9:60:58:9c:68:
                    13:9c:1c:49:26:69:6c:0b:81:2b:1c:bc:11:df:17:
                    a1:5f:70:72:c2:cb:10:17:35:7c:27:d5:20:9b:0e:
                    88:62:99:86:b7:bc:57:b0:ca:af:bd:64:6d:63:d1:
                    e0:b6:b2:f5:d8:d7:b9:2e:eb:6e:e6:51:22:e5:91:
                    c4:51:26:31:81:5a:f8:ae:54:bd:98:b1:0a:e7:c8:
                    e6:d2:60:b0:99:58:f8:d9:7c:59:fb:fe:76:b9:c5:
                    b7:dd:e3:3d:60:e4:92:be:e5:e1:ae:ef:5b:b8:e2:
                    1c:1c:81:49:f1:73:a9:ac:0b:d0:86:63:b0:de:14:
                    4f:32:27:1e:55:04:e3:31:ea:f3:d9:f1:c8:d4:c9:
                    a8:69:15:ac:53:9b:29:c6:41:26:88:71:2b:76:51:
                    74:a7:e4:28:27:f2:9e:d3:7d:58:35:a1:01:3f:7a:
                    fa:f6:88:b8:28:a0:81:24:3e:18:ea:be:a1:cc:ce:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:BF:1C:D7:5B:A6:DD:60:F1:10:A5:86:87:3A:CB:93:4E:C9:7C
            X509v3 Authority Key Identifier:
                keyid:5D:AD:DA:41:79:DC:2D:54:40:2E:28:29:2A:73:57:45:23:4F:31:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/2Da_HNdbpt1g8RClhoc6y5NOyXw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218579

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:b4:7b:6b:bc:13:a9:a5:90:f1:de:e3:73:c9:53:6e:07:
         b3:63:53:b1:f4:63:60:9c:02:a6:60:5b:a8:66:d2:51:bb:77:
         10:9d:0b:24:4e:f1:29:82:47:4b:c2:8e:6e:8f:cc:ad:e2:72:
         d9:5b:50:5a:c0:ec:09:7b:f8:4d:fe:b1:f7:d6:e7:88:4d:47:
         b3:ca:73:bb:8a:7e:47:94:7e:60:84:ab:96:25:61:20:8c:36:
         33:4c:f9:23:07:67:d8:3c:ca:5d:54:23:f4:80:b9:ac:39:b2:
         db:a6:f2:00:52:5a:96:47:70:9c:ec:ad:c8:f4:74:74:e9:55:
         52:6b:b0:5a:03:d3:ef:b3:05:01:1e:56:c2:21:f0:b2:11:c5:
         36:4f:9e:74:ea:7b:d9:6c:91:04:ab:67:e2:f3:2f:b4:99:4e:
         ce:c8:a6:0d:2b:02:b2:f2:c7:21:5d:22:0e:cb:08:9d:7c:af:
         5f:0e:01:92:3e:54:3e:5d:26:b8:2e:05:2e:3e:4f:65:6e:9a:
         aa:46:c3:e0:39:ee:22:c4:1c:09:61:92:59:14:b4:9d:4d:79:
         93:7b:19:5c:2a:ca:ee:0b:32:7b:7e:7f:d6:d6:53:5c:23:13:
         46:d2:29:eb:88:b1:99:6f:be:43:fd:bf:97:74:b2:71:ae:61:
         47:bb:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:47:23 2026 by rpki-client