Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/k9lpM3Ang6e0ydGpf6fcbAcTYsQ.asa
File:                     k9lpM3Ang6e0ydGpf6fcbAcTYsQ.asa (raw, json)
Hash identifier:          UMn49SaxGg3KlhiSs6YyqMDYKSAEgpvqiedoxuphpv0=
Subject key identifier:   93:D9:69:33:70:27:83:A7:B4:C9:D1:A9:7F:A7:DC:6C:07:13:62:C4
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       01A0D8ADF55D40E6C85D2D0B903BCC40192D
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/k9lpM3Ang6e0ydGpf6fcbAcTYsQ.asa
Signing time:             Fri 25 Sep 2026 13:07:54 +0000
ASPA not before:          Fri 25 Sep 2026 13:07:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213683
Providers:                AS: 174
                          AS: 6939
                          AS: 24940
                          AS: 57961
                          AS: 58137
                          AS: 198890
                          AS: 199081
                          AS: 205119
                          AS: 205923
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:ad:f5:5d:40:e6:c8:5d:2d:0b:90:3b:cc:40:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Sep 25 13:07:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93d96933702783a7b4c9d1a97fa7dc6c071362c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:2a:4b:81:d2:9c:94:40:5d:d7:60:be:d5:
                    ca:76:d7:64:ae:6e:9b:11:c3:46:22:75:1e:16:83:
                    2b:3c:25:7a:1f:27:29:f7:41:b6:7f:70:87:f0:2b:
                    3b:05:67:ce:30:9b:9c:e7:35:7f:58:e1:35:7a:58:
                    0f:0a:43:58:11:9b:a3:f7:b8:4e:6a:3a:c8:99:31:
                    6b:1b:ed:e7:a2:d6:81:53:99:20:90:87:b0:a9:7c:
                    49:ce:23:b2:76:db:e3:43:92:bf:eb:61:8c:24:c9:
                    f9:51:3a:4c:72:72:55:8d:c4:f5:a9:97:be:9b:2f:
                    f5:4f:78:8c:77:fd:ec:56:4e:61:7f:0a:35:58:fd:
                    f2:73:58:42:71:e4:f4:ba:b2:4e:c2:ef:4f:15:d4:
                    fb:23:62:77:24:b9:32:dd:54:f0:ee:bc:06:c0:3e:
                    40:8d:61:a2:07:11:0c:07:34:cd:4a:a4:2a:ac:8a:
                    dc:ff:ba:2d:24:52:68:c4:68:30:fd:71:e8:ac:fe:
                    3e:1f:23:36:e8:4f:8e:7d:93:a7:94:0d:9c:2a:05:
                    d1:f6:a0:42:2f:0c:2a:d0:83:7e:8e:91:76:80:ad:
                    8e:99:7d:86:6b:de:45:df:df:33:f1:f3:06:aa:1e:
                    20:87:30:47:01:ee:f3:ed:03:60:1f:85:26:3d:89:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:69:33:70:27:83:A7:B4:C9:D1:A9:7F:A7:DC:6C:07:13:62:C4
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/k9lpM3Ang6e0ydGpf6fcbAcTYsQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213683

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:c3:b7:62:d0:08:43:4b:ac:44:c0:2a:7d:67:af:d1:2a:
         03:08:9b:07:bd:cb:24:74:e7:16:1c:2f:08:28:5a:bc:87:a6:
         bf:8a:07:11:3a:42:c4:e1:1e:72:d7:70:d7:98:f4:83:da:cb:
         f1:d4:b0:16:ca:1a:de:0e:46:8d:59:92:59:1f:ab:93:97:da:
         e9:d3:d5:40:f8:16:43:74:98:92:42:2b:5f:69:56:34:80:d2:
         84:95:a8:3e:7a:0d:4f:bc:40:4b:91:92:fb:b6:46:bb:ff:1e:
         32:9e:a7:2d:63:9a:43:3b:c9:0a:0e:fc:96:75:0a:d3:92:bb:
         8d:64:4e:3b:18:15:3c:7f:1d:dc:26:db:09:f2:b4:38:d7:c4:
         42:b7:05:22:2a:c2:a4:08:8c:cf:0e:8a:2a:25:33:75:85:a6:
         bb:3e:45:86:b6:d9:73:ce:1a:df:ce:85:57:6e:e2:c4:00:06:
         e3:3f:e2:db:33:d4:91:f1:19:93:53:8b:7c:68:ac:01:b3:4c:
         6b:9d:1d:ad:06:69:b1:30:e4:cf:a3:71:2f:50:a3:b3:33:a6:
         07:68:3c:42:3a:48:41:72:80:c7:b4:73:b2:e0:ca:d8:7c:75:
         85:02:39:db:c5:09:fd:03:98:84:75:af:13:31:43:91:d5:92:
         8f:21:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:41 2026 by rpki-client