Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/o6UVHrVb8rAUpp_kArqGUAzqOeQ.asa
File:                     o6UVHrVb8rAUpp_kArqGUAzqOeQ.asa (raw, json)
Hash identifier:          LNAnmDFKlI9cMQgetXS/uq7E/u1kT01bazDwBx54fvQ=
Subject key identifier:   A3:A5:15:1E:B5:5B:F2:B0:14:A6:9F:E4:02:BA:86:50:0C:EA:39:E4
Certificate issuer:       /CN=51384e6c4b9ec0bd1acb45d31951bd004c87c1e7
Certificate serial:       01A13F2A4DA82F58821692BF34C160B2A105
Authority key identifier: 51:38:4E:6C:4B:9E:C0:BD:1A:CB:45:D3:19:51:BD:00:4C:87:C1:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UThObEuewL0ay0XTGVG9AEyHwec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/o6UVHrVb8rAUpp_kArqGUAzqOeQ.asa
Signing time:             Thu 15 Oct 2026 10:44:59 +0000
ASPA not before:          Thu 15 Oct 2026 10:44:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218983
Providers:                AS: 219521
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/UThObEuewL0ay0XTGVG9AEyHwec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/UThObEuewL0ay0XTGVG9AEyHwec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UThObEuewL0ay0XTGVG9AEyHwec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:2a:4d:a8:2f:58:82:16:92:bf:34:c1:60:b2:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51384e6c4b9ec0bd1acb45d31951bd004c87c1e7
        Validity
            Not Before: Oct 15 10:44:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3a5151eb55bf2b014a69fe402ba86500cea39e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:89:39:22:0e:a8:aa:01:bd:b6:f3:6c:10:
                    d8:15:b6:db:df:f8:4d:e4:2c:1e:6d:5e:8b:2f:d2:
                    68:32:48:ce:f1:b3:b7:90:e4:88:01:ec:1c:a9:26:
                    8b:f7:11:9d:2b:63:84:89:65:3f:03:a9:80:4d:61:
                    c5:9b:23:b6:ed:ac:21:ca:5b:e6:0c:ea:fc:ad:8c:
                    81:41:25:30:fe:d4:60:1c:cc:17:48:05:d7:08:e4:
                    67:56:d5:fa:d2:cc:2b:47:3a:24:e3:b3:cd:0b:00:
                    d0:57:cc:0e:80:48:b2:0f:16:30:56:de:73:42:9e:
                    39:07:cb:63:e2:ab:e7:e4:e4:b3:c4:21:fc:37:6f:
                    9f:2e:8e:b9:f3:af:01:7a:03:f9:58:02:db:82:a2:
                    b7:a0:81:32:5a:be:77:20:d6:b5:0a:3a:bb:dc:da:
                    2d:32:6e:84:41:88:e7:60:1c:64:04:f7:41:81:67:
                    8c:12:db:c8:49:b7:38:31:94:5c:f8:66:9d:08:bd:
                    9e:95:f7:71:12:d3:12:67:40:5c:2e:88:4b:41:c3:
                    18:ed:78:69:a8:9a:93:94:a0:4b:ab:11:12:01:5c:
                    04:d3:7b:ee:28:d0:7f:ec:04:18:9d:96:8f:73:0b:
                    3a:f3:0e:8f:a1:e2:34:cd:f6:b5:07:82:93:d8:58:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A5:15:1E:B5:5B:F2:B0:14:A6:9F:E4:02:BA:86:50:0C:EA:39:E4
            X509v3 Authority Key Identifier:
                keyid:51:38:4E:6C:4B:9E:C0:BD:1A:CB:45:D3:19:51:BD:00:4C:87:C1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UThObEuewL0ay0XTGVG9AEyHwec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/o6UVHrVb8rAUpp_kArqGUAzqOeQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2a2830-a4d5-48b1-b787-4f450b8c0492/1/UThObEuewL0ay0XTGVG9AEyHwec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218983

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:d1:ce:af:b7:70:76:c7:cd:e2:f1:38:b8:67:e7:4b:fa:
         3f:9c:5f:17:09:6b:57:33:ba:f5:54:0e:df:b8:94:90:b7:d3:
         d6:aa:8a:63:16:b3:16:6e:e0:fc:d0:ec:54:c1:4b:46:b3:87:
         5f:da:1a:61:56:f5:2b:39:8d:b1:28:6e:78:e0:77:ed:d9:fe:
         ff:b6:a0:bb:58:6a:be:ae:36:4b:1c:89:d6:f5:79:da:1a:eb:
         c8:0d:fd:8b:a2:82:ad:08:6d:c4:0f:4d:76:72:3d:06:b4:30:
         e3:ff:f0:05:2a:74:5a:f8:63:98:24:20:1b:d9:60:76:b5:ef:
         36:38:f9:be:8a:d3:98:cb:1b:49:cf:e7:12:1c:ed:58:77:9d:
         7a:51:c8:ce:78:57:01:f2:2f:ba:8f:7e:9a:b9:bc:4c:49:63:
         36:61:c0:be:56:0d:d2:c5:a4:a5:0b:7a:9a:c6:8f:08:9f:fd:
         d1:a1:4f:4a:66:20:74:1d:bf:32:a1:bf:87:38:94:e5:af:20:
         60:e1:39:90:4f:c8:9d:61:bb:37:7c:ae:c9:39:8e:33:f6:08:
         72:c2:5c:98:68:e9:09:97:5e:28:9a:27:1f:3b:f7:a3:4e:32:
         ba:d1:f4:4f:d7:67:31:66:16:cc:8a:7d:3d:da:9e:50:92:ac:
         dc:ba:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:52:36 2026 by rpki-client