Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa
File:                     Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa (raw, json)
Hash identifier:          quX3s05TDBTsl7FDpEE0QIqSfiJxqhXmhPqfuYs2tQc=
Subject key identifier:   5E:6D:94:18:49:1D:88:A8:46:D6:83:16:0F:19:79:01:A5:8C:ED:28
Certificate issuer:       /CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Certificate serial:       01A043374012C2847EF39549787B57A150F9
Authority key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa
Signing time:             Thu 27 Aug 2026 12:34:49 +0000
ASPA not before:          Thu 27 Aug 2026 12:34:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218857
Providers:                AS: 60132
                          AS: 197133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:43:37:40:12:c2:84:7e:f3:95:49:78:7b:57:a1:50:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
        Validity
            Not Before: Aug 27 12:34:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e6d9418491d88a846d683160f197901a58ced28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:19:84:0f:1d:2a:6e:38:aa:20:72:96:d7:
                    ab:c5:86:7c:83:09:8c:aa:29:52:f0:ab:ec:fd:d9:
                    30:47:f7:4a:2c:3c:67:ee:02:c0:91:f2:5c:29:3b:
                    13:9e:6c:c4:03:8a:bd:4a:64:99:46:a6:1b:e4:d4:
                    c4:08:91:cd:bd:b7:00:a7:1d:c9:cc:27:6f:64:ad:
                    3e:b6:b4:b0:31:2e:75:28:c3:6d:52:6c:44:28:7c:
                    20:6f:49:89:4a:1b:84:24:23:e4:4b:57:40:0b:13:
                    5d:ea:d3:b0:0e:d1:8f:23:5f:0f:fa:3b:dd:08:15:
                    11:7d:c0:2d:49:6f:1d:51:8e:c5:0c:9b:2e:17:b3:
                    69:c9:05:24:5b:ec:6c:e4:0c:91:70:ee:30:e9:81:
                    31:91:2f:6c:1d:38:13:e5:a1:8a:99:4c:c6:0d:59:
                    f6:9e:c2:ed:36:03:41:f7:34:13:bb:97:4e:8d:1f:
                    41:85:ed:6d:44:b7:40:2d:01:7f:97:1f:d6:4e:e9:
                    0c:32:e1:13:fb:b2:bc:6e:ac:1b:0a:c8:d4:34:a6:
                    0d:04:d0:4a:65:c2:52:a6:7b:51:9b:a3:eb:b8:53:
                    2b:a4:5f:cb:7f:33:f2:ea:41:90:ee:aa:15:fc:2d:
                    85:0a:fb:a4:4b:99:fc:c9:45:16:c4:f2:73:d6:84:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6D:94:18:49:1D:88:A8:46:D6:83:16:0F:19:79:01:A5:8C:ED:28
            X509v3 Authority Key Identifier:
                keyid:1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218857

    Signature Algorithm: sha256WithRSAEncryption
         33:10:3d:63:c1:24:ad:13:42:c1:b1:1c:43:c5:c4:1f:ed:9c:
         75:65:50:9a:4f:e9:0b:55:3e:3d:c8:d4:30:20:7a:04:41:21:
         a1:fd:1c:a5:24:40:4a:57:ce:00:50:d2:2e:a3:b6:c9:d8:b8:
         7e:2c:fd:6f:a5:2d:6c:d4:18:08:b3:a4:45:9c:bd:df:35:cf:
         ca:94:e5:12:57:f7:70:a2:1e:fe:a7:d5:f3:62:fa:9c:37:df:
         8a:f8:70:dc:90:f7:66:93:15:ea:e7:ca:97:af:1e:cb:7d:81:
         8e:7a:b7:cd:94:10:51:21:9f:f9:9d:55:9a:41:c0:f7:e2:ac:
         57:0d:de:48:2d:45:d2:56:6e:db:c1:a2:02:71:da:95:1f:2a:
         d5:81:c1:42:86:21:ee:ec:9e:52:0d:6f:24:91:8b:9c:ad:d5:
         50:2b:fa:fd:27:69:f7:a5:e3:ed:a9:d7:5e:eb:d2:ac:5c:99:
         22:f4:a4:41:ca:8a:8b:f9:03:de:26:bc:36:d6:9f:a3:51:32:
         bf:8a:e0:b4:ef:32:85:b2:f5:60:41:fb:3d:97:37:37:81:93:
         5b:b9:1f:6a:0d:43:03:83:de:f7:9f:3e:43:2e:81:d3:c9:5a:
         3f:3a:83:e9:ac:7e:76:5e:a6:08:a0:57:ff:4a:b0:b8:ab:97:
         67:e5:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:31:18 2026 by rpki-client