Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/JAEM3VPrS32ixaXP5uF4ll28cTk.asa
File:                     JAEM3VPrS32ixaXP5uF4ll28cTk.asa (raw, json)
Hash identifier:          DXnyUX7nWnXtOIsmPN+MBMxaI8PpYSzvNUUdyvsABws=
Subject key identifier:   24:01:0C:DD:53:EB:4B:7D:A2:C5:A5:CF:E6:E1:78:96:5D:BC:71:39
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       01A057222BF550FEA6A497F766ACE12CEFCC
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/JAEM3VPrS32ixaXP5uF4ll28cTk.asa
Signing time:             Mon 31 Aug 2026 09:24:12 +0000
ASPA not before:          Mon 31 Aug 2026 09:24:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218842
Providers:                AS: 24940
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:57:22:2b:f5:50:fe:a6:a4:97:f7:66:ac:e1:2c:ef:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Aug 31 09:24:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24010cdd53eb4b7da2c5a5cfe6e178965dbc7139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:bf:a1:aa:df:a1:9d:3a:52:ac:8e:3d:0f:
                    b9:ed:ea:aa:85:be:3b:72:d6:82:29:7d:29:56:1f:
                    a8:f9:e9:8a:e9:b6:f2:37:8a:1e:c0:d8:f4:4b:7d:
                    58:01:5d:92:6f:b7:a0:13:8b:f5:4e:46:b6:79:d1:
                    ae:4e:a1:e6:b3:1f:c0:8f:cf:d1:b7:45:63:dc:4a:
                    de:31:94:bb:e3:08:ea:ef:3d:df:57:b6:6d:b2:67:
                    7e:f7:eb:7c:c0:c9:41:aa:67:f9:d4:85:03:b0:2c:
                    77:a8:eb:d4:e8:d3:16:2f:83:90:d2:e6:44:b6:9b:
                    db:67:4c:f8:6e:37:79:55:3b:67:7d:27:d9:8a:12:
                    e2:60:8e:37:65:26:0d:5e:34:a1:bb:7d:aa:62:d4:
                    eb:e4:3e:9f:fe:cb:8b:bd:2f:42:d1:3a:1a:98:ef:
                    fa:af:26:c9:a9:4f:de:c8:02:0d:05:3d:2f:1b:cc:
                    09:00:25:72:a8:28:ee:a3:1e:28:a0:ca:fc:f0:01:
                    c9:a5:4e:5d:06:43:51:de:be:cc:ab:2c:87:b5:2d:
                    1d:46:1c:78:ab:06:66:4f:dc:f8:05:35:df:87:bf:
                    e6:90:ed:d8:28:54:da:0f:e7:83:fd:69:fe:54:1a:
                    83:f1:81:9c:23:bd:c9:35:a7:26:96:25:c1:74:8a:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:01:0C:DD:53:EB:4B:7D:A2:C5:A5:CF:E6:E1:78:96:5D:BC:71:39
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/JAEM3VPrS32ixaXP5uF4ll28cTk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218842

    Signature Algorithm: sha256WithRSAEncryption
         d0:5e:6a:56:4d:ec:d5:b2:c4:17:83:ba:dd:22:bb:19:5f:e5:
         f2:03:a6:85:b3:72:ef:06:bc:3c:a0:fa:7a:22:90:16:a5:31:
         38:87:9d:eb:a0:de:c4:15:cf:33:b1:81:a0:2f:e0:ae:20:69:
         f7:67:69:78:43:2c:bd:65:ed:99:77:f5:58:36:67:54:e5:2d:
         b5:2c:a3:e9:83:3d:f0:f0:39:47:5f:a4:58:72:c8:96:25:ab:
         a0:03:d3:65:3e:85:a7:4a:84:fe:8a:05:4b:5b:04:e8:db:35:
         c1:aa:6b:88:c2:c8:f1:27:69:72:12:26:12:44:db:40:2c:26:
         e1:f5:30:74:9a:48:91:1e:f4:b2:12:b4:72:39:2f:3b:3e:99:
         5d:72:e8:83:ed:44:c1:64:b0:cb:f8:b6:e9:93:2b:3e:cb:3a:
         0e:4d:20:03:97:fb:41:7a:b8:29:ae:4d:a4:66:cb:29:4e:8c:
         d6:8c:28:09:71:72:59:51:a2:73:d1:52:56:73:ea:4f:05:b0:
         27:a0:33:bd:91:a0:a1:27:c1:26:49:e5:55:eb:ee:dd:79:52:
         72:c6:51:d0:a5:e7:e6:7c:e2:22:5f:31:3d:48:75:34:85:cd:
         b6:9d:84:9d:0c:e7:ea:3e:45:60:6a:1f:eb:d8:48:bc:d8:af:
         d4:33:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:16 2026 by rpki-client