Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/H2qs3ZQqvdlHKgDA_gk8S_ryct4.asa
File:                     H2qs3ZQqvdlHKgDA_gk8S_ryct4.asa (raw, json)
Hash identifier:          ITlpnWwDLnXyke1mLtpv0ncHybvgt23d76IpkIbnisw=
Subject key identifier:   1F:6A:AC:DD:94:2A:BD:D9:47:2A:00:C0:FE:09:3C:4B:FA:F2:72:DE
Certificate issuer:       /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial:       01A12F61C4DEF7D3E8A838024EFEDC4AA888
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/H2qs3ZQqvdlHKgDA_gk8S_ryct4.asa
Signing time:             Mon 12 Oct 2026 09:11:38 +0000
ASPA not before:          Mon 12 Oct 2026 09:11:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            20582
Providers:                AS: 6774
                          AS: 25091
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 15:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:61:c4:de:f7:d3:e8:a8:38:02:4e:fe:dc:4a:a8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
        Validity
            Not Before: Oct 12 09:11:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1f6aacdd942abdd9472a00c0fe093c4bfaf272de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:3c:da:85:f0:70:f5:c9:d9:ac:6b:24:16:
                    2b:b9:51:73:eb:76:a1:8b:32:9b:1f:31:6c:23:36:
                    fb:03:ed:78:06:c7:35:4a:9d:41:3c:d9:53:01:4d:
                    5a:6a:af:42:3a:61:23:1b:e7:84:bd:60:8b:97:4c:
                    d0:8f:d9:88:3c:5f:44:e9:c4:56:11:b5:ec:0c:03:
                    b2:82:27:f7:2d:66:a2:16:d1:4e:95:23:f2:1e:c9:
                    e0:67:09:3b:1d:46:b8:73:ca:74:2c:8e:e8:71:04:
                    c8:15:48:70:7e:bb:06:d7:0a:72:a8:93:6c:3c:57:
                    75:09:9e:8a:ab:99:b0:37:db:5f:e2:a3:03:b8:73:
                    3e:aa:55:4d:80:bb:70:7b:b4:42:c7:db:fe:87:1a:
                    89:fd:41:3d:3a:1b:a3:a3:1a:8c:5a:0d:6e:7b:11:
                    a5:39:bb:43:f0:2c:ff:ae:00:6c:1d:45:c4:c6:16:
                    bd:81:24:89:53:7a:a0:8a:e2:01:9b:58:7f:09:4c:
                    18:bd:cf:65:02:b2:d9:51:64:18:ed:c9:5c:fe:08:
                    73:24:26:11:b0:13:5d:c2:09:59:d2:3b:90:2c:8f:
                    c3:61:82:5d:23:96:dc:90:79:ac:a9:80:8c:28:58:
                    bb:10:b9:ed:d9:a7:32:3a:f6:e9:c8:4a:a9:82:b9:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:AC:DD:94:2A:BD:D9:47:2A:00:C0:FE:09:3C:4B:FA:F2:72:DE
            X509v3 Authority Key Identifier:
                keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/H2qs3ZQqvdlHKgDA_gk8S_ryct4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20582

    Signature Algorithm: sha256WithRSAEncryption
         55:2a:9a:c4:4b:eb:e2:c6:91:d5:96:31:73:96:cc:3f:47:ff:
         02:9e:51:e6:45:dd:2e:f1:b9:b7:d2:b7:1a:2d:9d:ae:20:24:
         6c:31:5d:e7:ee:6f:cc:4f:d4:01:f0:10:2c:ee:b5:dc:fe:cc:
         bf:96:bf:c4:9f:ac:65:b3:27:dc:8e:94:10:62:6a:67:ab:a4:
         93:29:fb:36:b9:d0:e8:db:2a:9b:69:98:42:5a:f9:d6:05:53:
         56:8c:a8:1d:07:3e:37:76:c8:14:d5:02:3b:11:de:a0:c0:0a:
         1f:0a:e4:b4:3d:74:12:a5:08:bb:25:fa:2a:03:e2:3e:48:a5:
         5f:9a:46:af:e0:43:fc:90:29:bc:67:1e:29:fc:e8:07:99:a9:
         17:7c:a4:7c:a1:58:6c:3f:b5:ca:a4:0d:2f:25:9c:e1:0f:c9:
         2d:63:e8:1a:35:a8:ef:1d:a6:51:44:a7:c4:5e:9f:82:c4:cf:
         8b:6f:2f:33:92:59:d5:de:4c:75:ba:43:85:21:0d:ea:6f:f5:
         a2:5f:79:5b:76:45:de:1a:ed:18:13:f8:b4:d6:15:44:07:86:
         5c:24:b9:ad:64:a6:a1:a0:7b:f5:c9:11:3e:82:32:fd:b3:5a:
         cd:a2:88:09:0f:e8:48:e8:c7:e0:93:ea:35:e1:8a:34:25:ea:
         d0:eb:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:51:42 2026 by rpki-client