Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/kptNEdgJFZMV2ikOMSg-YMjenVw.asa
File:                     kptNEdgJFZMV2ikOMSg-YMjenVw.asa (raw, json)
Hash identifier:          CndQJXwam6R8MtXbomguZUKJNt8WXPXl5E/IIBUh3+0=
Subject key identifier:   92:9B:4D:11:D8:09:15:93:15:DA:29:0E:31:28:3E:60:C8:DE:9D:5C
Certificate issuer:       /CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
Certificate serial:       01A1688C181303199D345DF0DDFE29A796EF
Authority key identifier: A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/kptNEdgJFZMV2ikOMSg-YMjenVw.asa
Signing time:             Fri 23 Oct 2026 11:36:13 +0000
ASPA not before:          Fri 23 Oct 2026 11:36:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219297
Providers:                AS: 41051
                          AS: 52025
                          AS: 197324
                          AS: 199133
                          AS: 200993
                          AS: 205941
                          AS: 212895
                          AS: 215828
                          AS: 218569
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:8c:18:13:03:19:9d:34:5d:f0:dd:fe:29:a7:96:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
        Validity
            Not Before: Oct 23 11:36:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=929b4d11d809159315da290e31283e60c8de9d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:3d:4a:ab:cd:1e:2d:e2:bb:af:06:97:97:
                    ab:cb:d8:0d:ff:d1:19:3e:58:e7:3a:f2:88:18:f6:
                    c5:8f:aa:50:3c:9b:80:70:6a:0b:6a:7d:20:6f:40:
                    72:89:15:fe:d1:52:3a:cf:6e:5f:aa:3a:b7:a9:d1:
                    2d:b5:ab:4f:49:ba:10:81:44:c6:fc:a7:ee:95:b2:
                    90:71:3e:60:1c:d1:33:bb:f3:a4:8d:5c:64:85:38:
                    99:ea:65:a3:32:d9:16:42:bc:b0:f8:68:e6:8b:7a:
                    10:c7:9a:c2:1e:16:c3:08:3a:1a:c8:bb:62:24:5b:
                    60:c5:34:23:a0:62:7d:66:24:ef:93:ed:ca:f9:0d:
                    51:77:d0:79:8a:c7:82:12:06:6b:13:ef:b6:89:83:
                    e6:5f:cb:48:b6:05:05:07:9f:43:0d:a8:0e:e3:66:
                    b4:61:2f:15:ac:14:72:56:ff:e4:59:d1:b2:8e:3f:
                    c8:5e:1a:a7:2f:b8:71:52:9f:60:16:ee:e9:f5:aa:
                    23:12:59:b8:24:8f:5f:bf:75:7b:dd:70:bc:73:33:
                    08:79:2c:22:ab:e5:9d:77:c0:19:10:cf:c6:99:a2:
                    73:3b:8c:ad:9b:c7:b7:10:c2:3d:c4:59:dc:35:c0:
                    54:94:8a:62:49:22:86:ee:a6:c5:c8:2d:0f:c5:7e:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9B:4D:11:D8:09:15:93:15:DA:29:0E:31:28:3E:60:C8:DE:9D:5C
            X509v3 Authority Key Identifier:
                keyid:A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/kptNEdgJFZMV2ikOMSg-YMjenVw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219297

    Signature Algorithm: sha256WithRSAEncryption
         92:65:56:dd:50:5f:31:f5:e2:61:ef:1e:e1:8b:19:49:d3:e2:
         8e:e1:0a:cd:63:af:29:de:50:15:3b:bd:a1:e3:4e:cf:d3:be:
         35:eb:63:c4:b7:35:15:76:69:3b:b3:33:0c:b2:64:a5:73:3b:
         a8:dc:89:3d:0f:07:4e:b9:e4:74:d0:89:e2:79:d0:2a:b7:99:
         42:4b:c4:bc:de:e5:96:7b:20:59:29:a3:1d:1b:a4:ad:e9:c2:
         78:88:67:36:e9:e7:10:ad:7c:af:4d:10:11:54:40:60:bd:b2:
         c4:85:e8:27:f4:2c:99:e7:20:36:b3:10:06:d3:30:73:2e:44:
         86:7a:8b:04:58:99:4f:dd:5d:79:ed:1f:aa:c6:ff:ed:e0:ad:
         52:bd:78:c9:e9:45:75:29:18:67:85:6d:4c:ca:50:a9:d2:de:
         68:96:69:f4:60:c0:a6:0b:38:00:95:48:20:73:9a:ee:70:f4:
         3f:75:7d:70:17:e6:3a:72:a9:2d:b3:70:a4:30:7a:cf:88:fa:
         fc:c6:de:74:c0:81:5c:d1:fc:6e:1f:80:02:f1:ed:82:b4:4e:
         1c:d3:03:01:7c:1c:2c:c5:54:45:04:f7:5f:2f:ba:34:ad:f6:
         d4:0d:30:96:58:fd:5f:96:3e:bc:8c:66:4c:83:2d:5e:66:31:
         cf:f0:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:52:50 2026 by rpki-client