Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/_sh4thc09FjUhaJ-CIlOqE5ACws.asa
File:                     _sh4thc09FjUhaJ-CIlOqE5ACws.asa (raw, json)
Hash identifier:          gGKwfbzOsuFNMjqj35SauYDnxOtxjx9w9YhsbYtE8Zs=
Subject key identifier:   FE:C8:78:B6:17:34:F4:58:D4:85:A2:7E:08:89:4E:A8:4E:40:0B:0B
Certificate issuer:       /CN=7f97da938200e42ea80c348280b0f6216d9d0458
Certificate serial:       01A17CE502D497D86C264BA3924F99C321B1
Authority key identifier: 7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/_sh4thc09FjUhaJ-CIlOqE5ACws.asa
Signing time:             Tue 27 Oct 2026 10:25:45 +0000
ASPA not before:          Tue 27 Oct 2026 10:25:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218367
Providers:                AS: 39122
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:e5:02:d4:97:d8:6c:26:4b:a3:92:4f:99:c3:21:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f97da938200e42ea80c348280b0f6216d9d0458
        Validity
            Not Before: Oct 27 10:25:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fec878b61734f458d485a27e08894ea84e400b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:40:8d:91:f9:cb:6e:e0:ba:00:a1:f8:6c:
                    ef:f9:45:78:90:b4:37:9a:18:18:d1:ab:c8:70:4d:
                    cd:44:11:8f:79:b8:88:c6:0b:49:5e:b4:c9:20:a1:
                    59:f6:91:85:d2:4d:f2:87:cd:28:a4:6c:47:f1:ad:
                    97:c7:e1:2c:b3:42:2b:66:72:02:3a:51:9c:b8:db:
                    f7:d3:6f:80:ba:ed:31:2a:1d:cc:59:c6:65:15:cd:
                    32:92:a9:2b:89:ec:aa:43:d8:01:e9:3a:da:2d:98:
                    21:55:44:23:18:ef:f9:2a:83:53:f9:fe:d1:1a:19:
                    96:4c:4b:96:cc:74:2e:44:31:79:c3:7b:65:db:22:
                    da:3f:a2:52:ea:fa:b0:71:b7:8a:98:3c:f9:d5:1a:
                    f6:1d:f6:0f:13:5b:c4:7b:43:b1:4b:2c:a3:c3:78:
                    8a:cf:35:64:dd:d7:44:d0:1e:cd:dc:6a:82:ed:2a:
                    12:ea:0e:6e:cb:be:a7:b8:35:18:5c:42:ad:ec:52:
                    05:0e:5d:46:94:e8:d7:7f:33:b9:10:65:38:a2:1c:
                    1c:22:20:66:7a:b9:da:cc:8a:98:60:25:7a:22:ec:
                    1f:83:52:7b:d8:d1:36:68:9e:7c:51:95:37:31:60:
                    a3:54:33:f0:bf:ca:76:1c:24:26:b5:b2:82:77:d6:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:78:B6:17:34:F4:58:D4:85:A2:7E:08:89:4E:A8:4E:40:0B:0B
            X509v3 Authority Key Identifier:
                keyid:7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/_sh4thc09FjUhaJ-CIlOqE5ACws.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218367

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:ca:32:29:32:38:5d:18:e4:8d:36:03:70:5f:2a:d9:e2:
         66:95:88:e6:36:a6:10:81:a7:da:c1:ee:06:72:b6:b4:81:bb:
         92:be:f3:48:7e:2d:5c:33:fc:80:96:e1:1e:b8:a5:8b:90:45:
         e0:6c:de:30:cc:40:45:fb:3e:55:bf:bf:5c:91:48:03:1f:73:
         50:bf:58:82:42:74:1f:7b:73:15:6f:77:b9:de:56:d4:c2:89:
         52:f8:d0:18:b7:63:54:ae:46:53:48:5f:5b:61:5b:26:64:7f:
         49:f9:7c:92:c0:41:02:a5:9d:20:11:f4:d9:54:cf:7e:ff:23:
         64:4d:38:73:0b:42:09:e3:24:3f:5b:aa:ba:bf:53:bc:6f:36:
         3b:e3:4a:86:2e:65:f9:d5:de:10:0d:22:62:95:66:cf:32:47:
         05:cf:e9:04:c0:c7:af:79:b8:53:48:d4:f5:f3:40:0c:f1:53:
         c0:14:07:cd:7f:b9:7e:51:ec:3b:f8:c4:7b:ff:9f:ba:9b:48:
         72:1e:c1:a4:1d:86:2c:a1:67:e3:4c:94:ab:ca:88:e6:bc:21:
         a2:10:97:1a:6a:24:ee:c2:e8:60:f8:bf:05:73:33:43:a6:2a:
         16:40:74:19:58:ee:ad:4a:d2:ec:3c:be:34:d3:53:df:b9:13:
         95:47:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:53 2026 by rpki-client