Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1-weOiU_pH6PrjNpa-GE0KnH7irc.asa
File:                     1-weOiU_pH6PrjNpa-GE0KnH7irc.asa (raw, json)
Hash identifier:          JI42zOYreA+n37JUoTRA2ZhWTsJcuughghX2Yz9FgMA=
Subject key identifier:   FB:07:8E:89:4F:E9:1F:A3:EB:8C:DA:5A:F8:61:34:2A:71:FB:8A:B7
Certificate issuer:       /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial:       01A0AA678AA369485A2FF43795856BB7C208
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1-weOiU_pH6PrjNpa-GE0KnH7irc.asa
Signing time:             Wed 16 Sep 2026 13:28:27 +0000
ASPA not before:          Wed 16 Sep 2026 13:28:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219369
Providers:                AS: 209505
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:aa:67:8a:a3:69:48:5a:2f:f4:37:95:85:6b:b7:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
        Validity
            Not Before: Sep 16 13:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb078e894fe91fa3eb8cda5af861342a71fb8ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:78:77:9a:73:ff:b5:09:f4:f9:0b:a3:69:
                    a7:15:ac:0d:28:61:d6:84:d6:2b:41:05:19:a3:6d:
                    61:03:cd:65:a6:24:ad:e8:1c:5c:9a:33:a3:8f:9b:
                    04:30:cd:b9:6f:4d:e2:48:cb:24:f2:28:f9:fd:e3:
                    7b:60:7b:f2:ab:b9:64:31:e9:04:c4:00:a6:ea:c0:
                    b8:a4:9e:a9:b9:ad:19:df:ae:1c:1b:91:9d:89:93:
                    66:c4:fb:53:7c:ed:0d:07:b4:bc:77:4f:48:c5:2d:
                    4f:57:d7:21:ee:b7:b9:0e:df:33:3e:a1:af:11:13:
                    34:fc:75:c0:d6:5f:6c:3f:22:95:02:86:e5:92:f3:
                    84:79:c0:b9:0b:86:68:36:e5:73:f3:96:d4:73:0a:
                    b9:70:62:b3:fa:d4:18:5b:da:db:33:89:4a:d7:3e:
                    cc:00:fd:1c:13:22:63:5e:5b:95:65:93:ab:61:03:
                    5c:64:9c:70:b8:10:4e:82:81:51:e6:01:f5:45:2d:
                    70:0e:e0:7d:8c:ee:fb:d2:74:a3:11:32:c4:1a:68:
                    32:5b:c4:c8:16:a9:64:f6:83:0a:ec:0a:77:c5:4c:
                    26:f7:a9:df:2f:4e:ee:57:a7:ad:54:e6:df:47:4b:
                    9d:21:3e:7c:e1:15:ae:b5:5a:f0:f9:60:35:9e:e9:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:8E:89:4F:E9:1F:A3:EB:8C:DA:5A:F8:61:34:2A:71:FB:8A:B7
            X509v3 Authority Key Identifier:
                keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1-weOiU_pH6PrjNpa-GE0KnH7irc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219369

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:d3:0b:f4:a9:db:74:32:9f:bc:dd:7e:0b:96:f0:38:7e:
         2c:fd:a3:73:57:e6:fd:19:49:9d:6c:62:91:97:52:48:72:46:
         a4:71:d4:cc:43:d2:65:21:dc:13:a8:00:a1:8c:1e:28:de:0d:
         b5:fb:b7:e3:b1:82:22:79:98:75:8a:0c:68:fa:bd:db:b3:fb:
         06:03:3d:d3:c7:31:21:0c:41:06:03:fe:f6:9b:2f:ca:de:90:
         8f:d1:2b:a0:4a:4c:f0:60:f9:df:db:80:f8:12:85:7e:7f:4f:
         4d:15:25:af:52:a6:d9:61:6d:97:b6:f5:fc:d9:42:50:8c:be:
         60:86:8d:ba:c1:e8:7b:29:48:ca:aa:90:fb:47:bd:0a:1c:55:
         f8:16:b1:01:16:cc:66:47:fe:fb:42:66:87:fb:64:44:8d:d6:
         48:4f:d1:6e:ae:a1:b6:af:9f:30:b9:ae:4c:2e:db:35:3e:a8:
         8f:ed:5b:e1:ce:76:24:d7:6f:7b:b5:f4:78:a0:82:3f:c2:fe:
         6e:86:6c:f1:f0:af:1d:bd:44:fa:7a:5c:62:dd:55:e0:2a:78:
         11:4e:a3:f3:16:5e:d1:b6:5a:d5:89:92:4c:ed:36:af:2c:4c:
         86:91:a2:f8:32:da:36:80:16:51:4f:f0:4b:a2:f3:9f:d9:42:
         c6:db:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:20 2026 by rpki-client