Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/Dg3oN8bt8W-kvTdsLoc6IkgaWIk.asa
File:                     Dg3oN8bt8W-kvTdsLoc6IkgaWIk.asa (raw, json)
Hash identifier:          JU3W51kSE9J44sxrCi2xiSPugUXCMQ5yS0NJxQjmzI0=
Subject key identifier:   0E:0D:E8:37:C6:ED:F1:6F:A4:BD:37:6C:2E:87:3A:22:48:1A:58:89
Certificate issuer:       /CN=d2f42d3a35a24cd17457ee22183271d393105d6d
Certificate serial:       01A14F4AF44FD3ECBDB5BEDCD32ABA7D39A4
Authority key identifier: D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/Dg3oN8bt8W-kvTdsLoc6IkgaWIk.asa
Signing time:             Sun 18 Oct 2026 13:54:34 +0000
ASPA not before:          Sun 18 Oct 2026 13:54:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218414
Providers:                AS: 197324
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:4a:f4:4f:d3:ec:bd:b5:be:dc:d3:2a:ba:7d:39:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f42d3a35a24cd17457ee22183271d393105d6d
        Validity
            Not Before: Oct 18 13:54:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e0de837c6edf16fa4bd376c2e873a22481a5889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:02:75:71:89:85:aa:c4:32:af:a0:aa:61:
                    a7:82:c9:3c:56:46:4d:09:0e:d1:56:27:22:47:39:
                    7d:49:08:96:d4:5b:b6:9e:f0:2b:92:89:1f:2d:bc:
                    af:8a:9b:4d:46:f8:1f:80:7b:fa:35:80:3a:42:75:
                    6e:da:b8:dc:d7:d2:1f:50:95:fc:0c:6e:80:fa:ad:
                    51:17:a0:b8:84:e4:7a:b0:5e:7c:bb:18:87:b0:82:
                    96:d3:10:12:32:a8:32:98:40:25:80:63:af:3b:ec:
                    db:9e:0b:7d:89:20:62:80:07:e3:de:8d:30:d7:d2:
                    88:5c:46:bc:70:fd:f5:3e:4a:f2:56:31:89:50:a6:
                    c8:68:68:bd:d5:21:e9:6a:67:7f:d2:3b:eb:0c:c3:
                    4e:39:9c:21:74:fe:e9:a3:f9:15:18:76:70:5c:99:
                    f4:ba:f9:10:ed:ae:69:98:01:c8:10:ad:05:dd:30:
                    b1:e0:36:13:34:9f:4a:74:86:97:f9:a1:7e:27:8c:
                    07:ee:bd:b8:70:39:d7:16:1f:86:58:02:b2:6c:cc:
                    37:37:ed:11:c3:15:07:fc:73:2f:20:d4:f7:a5:00:
                    e1:54:d5:a7:2a:13:03:71:c1:0d:11:d8:50:2a:df:
                    88:a1:6b:7d:ce:08:5c:c8:5b:f4:ac:6d:91:b2:28:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:E8:37:C6:ED:F1:6F:A4:BD:37:6C:2E:87:3A:22:48:1A:58:89
            X509v3 Authority Key Identifier:
                keyid:D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/Dg3oN8bt8W-kvTdsLoc6IkgaWIk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218414

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:91:5f:46:e2:e9:a5:95:10:49:b1:e8:19:38:f4:29:a8:
         5b:47:88:13:54:96:0f:1c:ed:88:30:dc:e0:89:5c:ed:50:7c:
         18:69:b5:08:1f:93:50:ee:93:13:db:37:63:e4:3e:1c:6f:99:
         91:3a:e0:f5:5c:21:7a:9e:34:80:0a:c6:e4:c7:e0:4a:09:c1:
         f8:95:da:90:62:24:62:71:db:1f:3e:af:cd:95:74:7d:39:0f:
         ac:11:86:1a:5a:4a:41:f8:f8:3d:9d:32:c0:cb:24:c3:f7:8e:
         95:d3:33:7a:2d:1b:e0:df:c1:69:d1:aa:05:2f:49:65:9c:9b:
         a5:e2:b6:17:d4:de:0d:a0:ce:0f:03:11:f4:79:62:a1:f0:ca:
         22:29:2f:d9:8c:95:8c:f8:49:91:7d:bc:4d:38:2f:eb:d4:e1:
         b0:fb:2d:a0:11:56:df:e4:56:dc:db:43:00:b5:96:ca:3a:b3:
         e7:68:16:3a:e8:c8:9b:bd:4e:27:1c:55:34:6a:2c:cb:00:4b:
         9e:37:2f:c2:fe:9c:b2:3d:de:21:26:71:7e:ad:7e:de:7e:8d:
         a3:f5:44:e4:b5:a8:cc:10:46:eb:7b:24:11:16:1f:f8:6c:49:
         50:4f:ea:13:b1:29:fb:ac:3a:4f:9d:22:69:a2:2a:2f:31:94:
         43:b9:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:49:53 2026 by rpki-client