Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa
File:                     3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa (raw, json)
Hash identifier:          FAtZ3OFvDnkB+SIrUS7nfShabEffRtV9pq700sDO71A=
Subject key identifier:   DC:17:94:C7:C3:C2:30:D8:47:79:A9:C7:BE:40:0C:D1:6F:A9:D9:79
Certificate issuer:       /CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
Certificate serial:       01A1362314EC84D276AB02A20C08F458681F
Authority key identifier: C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa
Signing time:             Tue 13 Oct 2026 16:40:31 +0000
ASPA not before:          Tue 13 Oct 2026 16:40:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218464
Providers:                AS: 201279
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:23:14:ec:84:d2:76:ab:02:a2:0c:08:f4:58:68:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c019ed1e01fc0516e1e7ab118dc18479b2db130a
        Validity
            Not Before: Oct 13 16:40:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc1794c7c3c230d84779a9c7be400cd16fa9d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:93:4e:0e:3f:52:13:e3:79:27:fb:74:0d:
                    5f:b2:a1:5f:0c:0a:98:3f:cc:7b:e8:7f:22:af:4e:
                    2b:01:6c:1e:54:23:56:05:8c:9e:94:e5:e1:a6:7d:
                    b5:54:9e:9a:64:3c:73:8c:54:50:42:fa:98:19:63:
                    ce:39:6d:10:24:26:d1:13:18:eb:2e:0f:e1:0b:68:
                    89:b7:7b:2c:13:6d:43:54:57:6f:91:d3:2d:e7:93:
                    2d:04:19:98:6c:03:53:86:fc:e6:22:9f:b4:86:d2:
                    77:4e:4b:fe:f4:f2:27:9d:b2:ec:3c:b6:6e:01:00:
                    22:f0:4e:d4:ae:33:22:8c:df:84:45:c5:6c:02:79:
                    b9:eb:cd:7e:08:27:00:1f:53:0b:e0:33:30:bd:fa:
                    82:1e:f5:98:4b:9c:90:10:60:a2:bd:f0:6f:18:35:
                    8b:12:d9:7f:ed:af:7f:9d:71:f2:d4:89:22:78:9e:
                    c0:2a:ec:6a:84:d0:7e:39:b2:7f:55:36:f3:51:bb:
                    cb:80:61:60:0c:7b:ce:23:c3:e0:54:9e:d2:fa:8b:
                    26:6e:65:cd:44:aa:1b:85:39:47:e3:5d:6a:ea:b5:
                    70:03:fb:77:2c:a7:8f:21:82:3a:51:d9:6a:d2:2a:
                    fc:5b:f0:9d:0e:2c:76:b3:f8:50:38:e3:07:3e:3a:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:94:C7:C3:C2:30:D8:47:79:A9:C7:BE:40:0C:D1:6F:A9:D9:79
            X509v3 Authority Key Identifier:
                keyid:C0:19:ED:1E:01:FC:05:16:E1:E7:AB:11:8D:C1:84:79:B2:DB:13:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBntHgH8BRbh56sRjcGEebLbEwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/3BeUx8PCMNhHeanHvkAM0W-p2Xk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/065d4f-86f5-4713-8e4b-11e9086612d4/1/wBntHgH8BRbh56sRjcGEebLbEwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218464

    Signature Algorithm: sha256WithRSAEncryption
         87:64:96:fb:46:a4:e8:0f:d4:e3:fe:ee:0f:d6:8d:11:d6:e7:
         41:06:6a:b9:7f:38:e2:f2:4e:5c:de:1b:d5:66:2f:e0:9e:dd:
         61:5b:71:89:e2:5f:f3:f8:06:9e:f5:d4:76:20:25:bc:ca:3a:
         49:05:61:6a:cb:54:d1:fb:6f:19:87:08:58:ff:35:7b:9d:21:
         55:be:c8:71:a6:fd:61:82:35:63:f6:cd:5b:74:87:e2:b9:1a:
         96:04:da:79:1b:24:f8:12:ad:c3:5d:c9:70:ab:7c:83:35:3a:
         3d:b3:1d:09:e6:ae:37:59:76:ee:8d:da:a6:0c:34:1b:ce:10:
         18:9e:d1:90:b2:56:a7:5a:71:68:d0:bb:5d:81:c8:4b:fa:fb:
         dd:39:79:f2:e8:54:91:87:98:f0:2d:93:94:0b:21:c2:4c:02:
         d4:94:f8:10:61:d7:11:50:31:7f:27:30:3f:f8:3d:b0:c7:6b:
         81:b9:40:97:2b:34:a1:63:5c:6b:5b:f1:5b:81:0d:0b:0a:64:
         64:9f:82:74:3d:ed:88:9a:9e:d8:44:2d:38:ab:13:74:df:6a:
         2d:1a:28:5a:63:b8:b1:f9:52:77:ab:35:e1:f7:a5:41:8f:c6:
         f5:26:dd:83:b3:31:2f:ab:7e:6f:64:00:fd:7d:a5:48:c8:8d:
         c9:1a:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----