Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/3a32IJmzLulvHDXPinVJuIWxxd0.asa
File:                     3a32IJmzLulvHDXPinVJuIWxxd0.asa (raw, json)
Hash identifier:          k1qnCL9fUv9xE6kZymyF31c/7bS7xOt8+iPI7hRc540=
Subject key identifier:   DD:AD:F6:20:99:B3:2E:E9:6F:1C:35:CF:8A:75:49:B8:85:B1:C5:DD
Certificate issuer:       /CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
Certificate serial:       01A080F3DC1DE34B9F94BDFC35B420A6458D
Authority key identifier: 1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/3a32IJmzLulvHDXPinVJuIWxxd0.asa
Signing time:             Tue 08 Sep 2026 12:17:40 +0000
ASPA not before:          Tue 08 Sep 2026 12:17:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218744
Providers:                AS: 212683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:80:f3:dc:1d:e3:4b:9f:94:bd:fc:35:b4:20:a6:45:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
        Validity
            Not Before: Sep  8 12:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ddadf62099b32ee96f1c35cf8a7549b885b1c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:f3:84:52:70:bf:ea:b3:13:6e:df:01:16:
                    e4:f3:26:ff:a4:dc:f1:a3:85:96:69:ca:62:3b:ac:
                    1c:86:e6:22:1a:0c:ae:c9:ad:f7:a1:28:d4:07:c4:
                    c0:86:97:64:94:95:80:74:c6:80:05:22:c3:85:34:
                    24:5b:ed:95:6b:ec:d4:42:29:3a:e9:db:b7:bb:01:
                    7a:26:9a:38:90:c9:46:3d:7d:5c:2e:a0:0f:8e:a7:
                    f5:f3:68:ce:5a:b4:d6:5a:db:e7:c0:50:83:c5:0b:
                    c4:ee:b0:64:7d:55:33:3c:8d:18:a7:f7:32:1a:6f:
                    6d:cf:80:b8:b5:4a:83:2b:ab:8c:94:4b:76:78:c6:
                    d3:c7:01:5f:2d:bf:34:af:63:3d:6a:38:76:77:09:
                    3f:4d:66:c5:7f:20:e3:76:ed:86:6d:bc:ba:a0:d6:
                    b4:21:0d:18:bd:b2:a5:8a:c7:b6:b6:44:4a:9d:aa:
                    ad:74:b8:d4:95:0e:da:c0:8d:c7:03:d6:60:fd:4f:
                    8c:1c:33:d3:7e:13:87:7b:78:f1:4b:45:e0:b4:a8:
                    a9:16:7f:1a:08:ed:6e:b9:a9:9c:df:2c:bb:86:11:
                    2c:de:38:bf:fb:11:4d:39:67:73:9a:2d:a2:51:fd:
                    3a:69:52:48:6d:bf:4f:d1:d1:fd:f1:ec:6c:3f:40:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:F6:20:99:B3:2E:E9:6F:1C:35:CF:8A:75:49:B8:85:B1:C5:DD
            X509v3 Authority Key Identifier:
                keyid:1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/3a32IJmzLulvHDXPinVJuIWxxd0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218744

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:7d:5f:54:60:85:14:4c:ce:6d:97:13:f3:b3:3a:03:23:
         ce:64:74:ca:0e:8f:82:92:bd:9a:bb:b6:1e:62:b5:c5:15:d9:
         88:ab:7e:48:2d:31:9a:00:49:00:da:7b:b9:e4:ec:f7:b7:95:
         84:0c:78:61:dc:06:b0:17:f6:f4:78:81:56:81:80:ba:9b:e9:
         1e:1c:5c:40:16:4e:3b:c4:b0:1e:a9:99:02:ea:e3:8e:b9:81:
         02:25:91:de:10:40:75:6e:1e:08:54:a2:df:5f:c6:19:b4:26:
         02:f5:bc:ca:ae:01:fa:c4:10:63:50:6d:25:15:3f:5a:f0:8d:
         7c:25:9d:15:4d:ae:d9:67:dd:d0:f6:f1:1e:b7:ae:7e:06:6e:
         3c:bc:49:26:e9:98:db:7b:60:c0:b3:93:a3:cb:b4:87:ea:44:
         7b:0b:a2:53:76:71:e7:7c:80:b8:42:76:d8:9b:a3:08:13:88:
         91:14:5e:98:4b:3c:d9:92:ba:d4:77:54:f2:4b:ff:f0:b5:ea:
         5c:30:28:98:e2:f4:5a:95:66:29:d0:e8:f1:b3:d6:02:4f:c4:
         9b:9f:47:64:43:e0:f0:6f:c6:85:b8:ce:6e:43:7e:5d:eb:d6:
         6c:b9:a1:72:74:3d:c2:10:e9:b5:03:cb:ed:74:52:b0:ef:7a:
         ce:dc:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:10 2026 by rpki-client