Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/GAan2WSNwDwNOZhBnumKjAue39U.asa
File:                     GAan2WSNwDwNOZhBnumKjAue39U.asa (raw, json)
Hash identifier:          /a8EjBa5XpMrlIoJiss4QJ6do5ij3kyP1B0Oh3gQUSY=
Subject key identifier:   18:06:A7:D9:64:8D:C0:3C:0D:39:98:41:9E:E9:8A:8C:0B:9E:DF:D5
Certificate issuer:       /CN=359e5f053eb9d429d8eb50118e439d097346cabb
Certificate serial:       01A110E5EBF2EDC294547D13BA43E6CED953
Authority key identifier: 35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/GAan2WSNwDwNOZhBnumKjAue39U.asa
Signing time:             Tue 06 Oct 2026 11:07:45 +0000
ASPA not before:          Tue 06 Oct 2026 11:07:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218522
Providers:                AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:e5:eb:f2:ed:c2:94:54:7d:13:ba:43:e6:ce:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359e5f053eb9d429d8eb50118e439d097346cabb
        Validity
            Not Before: Oct  6 11:07:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1806a7d9648dc03c0d3998419ee98a8c0b9edfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:69:dc:5e:ca:3c:e3:5d:d2:c4:3b:50:e1:
                    3e:68:9b:13:a5:8d:6f:08:81:65:60:92:e7:bf:3e:
                    23:66:06:4d:46:7c:55:04:94:21:ff:51:eb:aa:9f:
                    8e:8c:e2:29:b5:d8:3f:0b:30:01:02:a7:7e:3d:62:
                    d5:e9:73:a2:c2:8f:67:79:5a:fa:fd:1b:74:14:8b:
                    5b:28:81:5e:4d:7a:70:95:b0:b9:3a:4f:aa:be:42:
                    b5:1b:5e:f5:59:f6:c6:48:1d:60:bc:7b:00:e2:86:
                    51:7e:0e:6a:6e:25:ca:f9:11:5c:11:cf:9e:52:4b:
                    7c:76:38:64:57:cc:1d:22:dd:dc:3b:67:06:4a:d2:
                    1e:cc:39:c7:dc:a7:e2:45:48:12:b4:8d:ce:63:12:
                    09:0b:34:59:6d:9d:f1:7a:06:14:f4:f0:39:bb:d6:
                    80:57:00:52:66:ea:c4:1a:f1:41:3f:57:f8:e1:b8:
                    5c:9b:d3:c2:d0:28:37:f9:ae:77:ea:03:1d:3c:04:
                    d8:04:d2:dd:00:76:11:8e:9f:2c:0b:a6:e9:e2:66:
                    7a:7f:2a:a9:d2:27:76:09:ac:f3:22:aa:c0:98:47:
                    ca:09:1d:e8:12:65:f5:34:6a:16:2b:e2:f4:87:e5:
                    42:3c:b8:52:94:d6:34:a9:41:7d:3e:67:8f:4c:93:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:06:A7:D9:64:8D:C0:3C:0D:39:98:41:9E:E9:8A:8C:0B:9E:DF:D5
            X509v3 Authority Key Identifier:
                keyid:35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/GAan2WSNwDwNOZhBnumKjAue39U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218522

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:a8:84:38:86:5c:6d:6a:29:6d:01:06:59:2e:c9:a2:38:
         c7:5f:e4:77:0f:31:6e:db:db:6d:9e:7f:b3:b8:7d:51:fe:8b:
         04:84:1f:19:10:5f:df:07:38:c8:fa:62:3b:14:93:4d:69:d5:
         fa:96:7c:7f:38:ab:c1:fe:0a:bd:5e:d0:05:43:61:aa:4d:b8:
         9f:af:cc:cb:99:c3:eb:a6:0c:49:f3:32:16:ba:05:ef:21:33:
         49:19:2c:d7:7c:f4:2b:12:fa:2f:5c:81:d7:f5:85:8d:0a:a0:
         00:af:b4:2a:cd:42:8c:38:0e:74:cd:ca:84:33:22:50:5d:43:
         a3:aa:5d:0d:38:a2:df:05:06:d3:e7:02:7b:31:b3:da:1f:40:
         f9:11:46:27:88:4a:97:8a:af:f0:33:b1:97:3a:71:c1:23:7a:
         ab:90:3c:e6:09:8f:8f:1b:f8:a7:c5:4b:9b:eb:18:b0:c2:ae:
         ee:69:aa:2a:64:a4:91:55:fd:19:4f:7f:e1:8c:56:f4:93:c3:
         9e:24:8a:f1:27:b1:32:a4:69:43:68:98:d8:58:5a:38:06:2e:
         e5:95:54:1e:0a:d4:6f:10:37:7e:0e:51:ee:ec:ea:3a:91:9c:
         a4:1d:d8:2d:a5:03:c8:fd:bb:9e:e7:20:17:df:65:12:de:0e:
         78:11:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:56:46 2026 by rpki-client