Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/Q9IKX8gclZ49OSuVIy_qLh9GHSk.asa
File:                     Q9IKX8gclZ49OSuVIy_qLh9GHSk.asa (raw, json)
Hash identifier:          k9C8kKQQODgzh/NpCguXWlVMjbQ31tCPj7PWyAJG/1k=
Subject key identifier:   43:D2:0A:5F:C8:1C:95:9E:3D:39:2B:95:23:2F:EA:2E:1F:46:1D:29
Certificate issuer:       /CN=786cb846a73959b38f514376feeec11c4bb31ad0
Certificate serial:       019FA9E08FFA89BB0DBFC6ADAFEB418E95F5
Authority key identifier: 78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/Q9IKX8gclZ49OSuVIy_qLh9GHSk.asa
Signing time:             Tue 28 Jul 2026 17:58:14 +0000
ASPA not before:          Tue 28 Jul 2026 17:58:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219444
Providers:                AS: 29467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e0:8f:fa:89:bb:0d:bf:c6:ad:af:eb:41:8e:95:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786cb846a73959b38f514376feeec11c4bb31ad0
        Validity
            Not Before: Jul 28 17:58:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43d20a5fc81c959e3d392b95232fea2e1f461d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:86:8e:4b:54:d3:cc:ad:3b:e3:63:67:3d:
                    58:00:a2:2a:38:0b:b3:c8:e1:92:b7:f3:98:9b:fc:
                    30:e8:0f:17:f4:3d:ae:0a:f2:90:4c:cf:28:18:76:
                    8a:56:b0:87:47:9f:12:ca:85:2f:ae:b1:89:2c:49:
                    39:9e:58:9d:9f:c5:d4:58:4f:9c:ec:df:4f:9d:8b:
                    d1:ff:5c:83:29:16:35:fd:1c:cf:47:3f:87:15:b4:
                    8b:38:65:d7:22:c9:81:8c:cf:f8:65:98:ce:0c:72:
                    ae:17:0b:99:6f:a0:b1:b0:44:16:82:56:1d:3e:e1:
                    a6:14:90:f5:9b:aa:b5:09:4b:44:bc:a3:d0:89:14:
                    32:7f:2c:03:5a:a6:82:f1:02:85:ab:b6:f3:aa:ae:
                    78:a9:cf:98:31:12:67:80:0c:fa:8e:7c:e3:5d:63:
                    30:e1:bb:65:71:69:c1:93:47:b7:d1:bc:6d:04:0e:
                    cb:c8:31:11:22:38:4f:ed:cb:68:8c:1f:36:0d:d5:
                    c1:e5:1d:55:52:9a:a7:30:f3:9d:d1:3b:61:6c:c7:
                    7b:be:eb:5c:5a:30:2c:8f:d1:90:02:9b:b4:a0:ae:
                    9b:a2:c6:f4:d8:b9:a7:21:a8:0a:97:c3:f5:e6:d8:
                    1b:68:f6:b3:02:fc:8b:30:bf:49:4b:09:de:b7:60:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D2:0A:5F:C8:1C:95:9E:3D:39:2B:95:23:2F:EA:2E:1F:46:1D:29
            X509v3 Authority Key Identifier:
                keyid:78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/Q9IKX8gclZ49OSuVIy_qLh9GHSk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219444

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:c0:19:43:4e:6c:e8:d9:50:3b:1b:9a:70:e4:24:7c:48:
         e2:be:4f:90:49:17:ea:ba:7e:bd:8e:66:24:6d:dc:19:2e:36:
         11:9c:03:35:69:fa:2c:17:50:65:e9:cb:db:65:81:07:7a:2a:
         0c:ca:a7:42:39:7b:c9:f9:0e:f2:21:c1:01:dd:52:1d:1b:28:
         d3:2b:23:8e:e7:86:77:c8:fa:97:8a:9a:a6:9d:a1:68:49:4e:
         93:6e:7a:18:98:17:fb:ed:d3:3f:96:47:ce:b6:ff:6d:9c:72:
         d8:36:f8:b6:32:70:31:67:71:62:07:e0:93:ae:0c:e4:36:6c:
         82:d4:e2:b9:f5:5e:5e:91:be:c6:f1:e6:be:22:07:38:4e:a0:
         d2:8e:68:a4:81:05:92:8c:dc:c9:93:a3:67:36:4d:d1:85:8a:
         26:9c:c0:e1:45:7a:ac:7e:da:5b:79:06:4c:58:88:cf:7f:95:
         a1:0d:b5:77:68:87:d5:28:50:a6:1e:b2:b4:e2:c0:a8:92:af:
         f4:52:6b:7f:cd:99:61:40:fd:f8:31:96:9c:aa:1a:41:09:8c:
         a3:15:d1:0d:e8:dc:6d:7f:09:c3:77:22:ce:be:e3:aa:e0:a8:
         4f:78:2e:63:36:45:83:07:15:b5:64:61:36:ec:ab:72:c3:b5:
         23:2a:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:00 2026 by rpki-client