Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/SoPl-FceNQvh4tMfOxE_AcHtfm8.asa
File:                     SoPl-FceNQvh4tMfOxE_AcHtfm8.asa (raw, json)
Hash identifier:          cUeLaA0Vht9SwijgrX9Tc4UBzzMa5+2lTsXKWwL+29g=
Subject key identifier:   4A:83:E5:F8:57:1E:35:0B:E1:E2:D3:1F:3B:11:3F:01:C1:ED:7E:6F
Certificate issuer:       /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial:       01A0496A355032AF250DAA5ABEABA53A9A60
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/SoPl-FceNQvh4tMfOxE_AcHtfm8.asa
Signing time:             Fri 28 Aug 2026 17:28:12 +0000
ASPA not before:          Fri 28 Aug 2026 17:28:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214017
Providers:                AS: 5405
                          AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:49:6a:35:50:32:af:25:0d:aa:5a:be:ab:a5:3a:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
        Validity
            Not Before: Aug 28 17:28:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a83e5f8571e350be1e2d31f3b113f01c1ed7e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:f7:8b:70:b2:c5:99:66:1b:7d:8a:a1:18:
                    00:ec:91:b3:87:64:cf:63:85:0d:19:28:7b:e4:86:
                    9d:e0:02:d4:e4:fc:bf:64:15:9a:dd:18:51:df:d9:
                    22:fc:1d:34:de:fd:d1:17:bf:62:fb:da:60:fa:ed:
                    e4:92:dd:30:28:ae:24:16:30:14:b2:4e:e3:c6:56:
                    18:20:5f:e3:a5:ca:4e:dc:60:87:dc:91:0d:a5:58:
                    10:63:42:6d:86:59:f2:68:d5:e7:dd:cc:23:c2:be:
                    f0:04:6c:1b:ec:f8:12:ac:ac:1f:1a:57:46:fa:06:
                    85:73:35:eb:5b:af:34:6d:37:a8:16:36:e6:d5:4b:
                    a4:c4:8a:12:45:6a:32:8a:50:b0:2e:c2:d4:ed:d7:
                    91:c7:0e:37:0f:29:e7:09:60:74:8d:9b:6b:97:1c:
                    66:f2:b0:71:7f:fd:43:29:11:54:ec:d7:ba:54:04:
                    f1:50:3e:a5:0d:95:94:ee:2b:c1:ca:e1:54:81:06:
                    a5:9d:bc:9e:48:84:c6:f2:d9:a4:e4:7a:64:73:71:
                    51:ec:86:00:8d:50:4f:87:b4:a4:09:43:27:31:79:
                    fb:d8:0d:7c:64:78:3a:ff:16:eb:a5:d0:e0:8c:4d:
                    f4:82:1c:a3:70:56:62:74:1d:a8:19:bc:48:1e:53:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:E5:F8:57:1E:35:0B:E1:E2:D3:1F:3B:11:3F:01:C1:ED:7E:6F
            X509v3 Authority Key Identifier:
                keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/SoPl-FceNQvh4tMfOxE_AcHtfm8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214017

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:45:89:c4:d6:bd:5d:d6:ed:36:cd:09:4e:02:33:74:79:
         99:2f:a7:01:dc:da:77:44:1d:40:1b:69:81:82:ac:e2:8c:41:
         4d:48:bc:e3:11:77:a5:e8:42:c3:39:66:b4:cb:be:e8:cc:9d:
         6d:bb:3f:3f:cb:3d:e3:22:91:17:af:15:e6:a2:35:eb:a2:dd:
         cc:29:68:d2:21:85:e5:3f:d9:cd:fc:1d:c4:5e:dd:ca:6c:ab:
         98:f9:73:ec:6c:8a:98:08:74:c8:37:8f:dd:cd:f9:9e:cd:54:
         a8:eb:d0:13:96:dd:6e:cc:82:de:f0:93:24:fe:4a:b9:13:fb:
         97:ce:56:ab:63:d4:15:b2:c6:8e:4a:87:8b:69:ee:b8:1a:11:
         41:47:4b:e0:48:39:10:1e:08:5c:fe:5e:15:a8:d5:ba:d0:4b:
         17:56:22:05:99:dd:5e:df:50:0f:d9:06:a0:2f:f5:bc:35:e6:
         0c:36:8e:32:39:06:73:43:fc:7c:d3:a1:b5:5f:a6:5b:aa:8f:
         81:e5:36:7e:42:81:57:56:45:37:dc:4d:0a:4a:4b:3f:fe:aa:
         e9:37:09:ba:97:cc:ab:84:5e:b2:43:dd:a8:31:a9:99:ed:c3:
         d0:7e:6f:91:80:a5:b1:14:aa:3a:7e:25:e3:0b:4f:bf:de:e3:
         5d:65:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:43 2026 by rpki-client