Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/9PaaOmSrOKJberWeGKQpWTfgVbM.asa
File:                     9PaaOmSrOKJberWeGKQpWTfgVbM.asa (raw, json)
Hash identifier:          gv1K/NL9Q+mdG4vtMNP0YBGVCY29lnFJ34ohTAPnDSI=
Subject key identifier:   F4:F6:9A:3A:64:AB:38:A2:5B:7A:B5:9E:18:A4:29:59:37:E0:55:B3
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       01A1205097E01412850BDF112EF0F309B5E7
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/9PaaOmSrOKJberWeGKQpWTfgVbM.asa
Signing time:             Fri 09 Oct 2026 10:58:35 +0000
ASPA not before:          Fri 09 Oct 2026 10:58:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218443
Providers:                AS: 44066
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:50:97:e0:14:12:85:0b:df:11:2e:f0:f3:09:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Oct  9 10:58:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f4f69a3a64ab38a25b7ab59e18a4295937e055b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:c9:be:d6:8d:df:ce:a0:16:9b:b9:cf:74:
                    3c:47:b6:f2:f5:f8:d4:7a:cb:82:c4:f8:b5:9e:e2:
                    6d:7e:ff:f1:2a:af:3a:42:84:90:fb:d8:a9:22:54:
                    c9:ff:5b:e6:80:a1:ea:bf:fa:de:51:8b:bb:49:5e:
                    cf:85:40:c7:a2:6e:c8:7b:0d:a5:a3:23:5a:71:a0:
                    6d:dd:d3:33:ba:15:02:46:33:c3:bc:29:f1:80:84:
                    fe:01:fb:3b:b1:f7:f7:8f:40:b1:0f:2b:52:40:57:
                    36:cc:ea:67:3a:5a:31:37:76:db:f6:ec:29:c2:f0:
                    2c:d9:3d:0c:d6:2e:3f:b4:33:10:10:32:88:cc:7f:
                    df:53:89:d1:f8:2f:a3:de:02:b3:e2:e4:99:c7:22:
                    02:8c:a8:65:84:7b:92:5e:52:36:69:2c:b3:83:bb:
                    ca:3e:84:6c:d3:f1:0f:01:0e:7d:e2:9f:12:8d:05:
                    17:ee:75:a5:f7:f6:d6:cf:b9:f4:0d:41:05:09:c0:
                    35:d5:a3:e6:cc:22:25:8c:c5:fd:e8:be:22:c0:29:
                    3e:b1:58:f8:46:60:35:75:71:01:d4:ee:17:93:35:
                    c5:3a:51:8f:e5:82:7b:b0:3e:37:60:da:dd:fb:30:
                    38:84:9b:4e:c8:66:32:d1:00:be:7c:49:f9:3a:6d:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:9A:3A:64:AB:38:A2:5B:7A:B5:9E:18:A4:29:59:37:E0:55:B3
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/9PaaOmSrOKJberWeGKQpWTfgVbM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218443

    Signature Algorithm: sha256WithRSAEncryption
         8a:88:33:6c:dc:0e:b6:8b:7a:ca:1a:f8:e6:51:a1:50:fa:17:
         b1:16:c8:93:e3:24:93:2f:33:f9:c8:03:c5:20:57:6b:b2:64:
         7a:22:be:4b:40:29:21:f2:74:df:c0:96:cf:f2:47:9f:65:0c:
         39:8e:f1:1d:18:c8:ec:37:c0:22:d8:0d:c3:53:e7:31:47:0f:
         42:96:1d:13:c0:69:a0:45:27:f2:5b:f8:9b:db:2d:e3:cc:24:
         e2:95:e7:da:b3:6f:cf:ab:22:e7:88:41:ac:73:a1:dc:f0:96:
         41:f4:e4:ca:78:0d:ad:54:1d:03:7d:34:43:51:3c:e7:3c:16:
         8d:60:ec:26:c0:37:f7:e8:e5:b4:83:2b:e9:33:c0:c1:c4:19:
         c4:10:bd:23:40:1d:28:2f:46:91:aa:aa:18:de:bd:74:89:b2:
         a4:5e:30:1d:9b:57:78:7c:f5:e0:01:6c:38:99:ca:e3:cb:77:
         90:dd:35:7b:ff:8f:fe:17:71:31:06:82:29:12:5f:e1:13:ef:
         bb:2a:eb:e7:24:bb:78:0f:71:86:a5:d2:7f:4a:72:9a:b4:ea:
         4b:81:17:7b:e2:9e:32:71:d2:c5:5c:79:f9:7e:49:b8:26:e0:
         ed:09:04:e0:b3:0d:18:2a:88:52:85:3d:cf:f4:e2:63:82:2b:
         5d:27:3c:25
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaEgUJfgFBKFC98RLvDzCbXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYxMDA5MTA1ODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY2OWEzYTY0YWIzOGEyNWI3YWI1OWUxOGE0Mjk1OTM3ZTA1NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDfJvtaN386gFpu5z3Q8R7by9fjU
esuCxPi1nuJtfv/xKq86QoSQ+9ipIlTJ/1vmgKHqv/reUYu7SV7PhUDHom7Iew2l
oyNacaBt3dMzuhUCRjPDvCnxgIT+Afs7sff3j0CxDytSQFc2zOpnOloxN3bb9uwp
wvAs2T0M1i4/tDMQEDKIzH/fU4nR+C+j3gKz4uSZxyICjKhlhHuSXlI2aSyzg7vK
PoRs0/EPAQ594p8SjQUX7nWl9/bWz7n0DUEFCcA11aPmzCIljMX96L4iwCk+sVj4
RmA1dXEB1O4XkzXFOlGP5YJ7sD43YNrd+zA4hJtOyGYy0QC+fEn5Om3jQQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPT2mjpkqziiW3q1nhikKVk34FWzMB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvOVBhYU9tU3JPS0piZXJXZUdLUXBXVGZnVmJNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNVSzANBgkqhkiG
9w0BAQsFAAOCAQEAiogzbNwOtot6yhr45lGhUPoXsRbIk+Mkky8z+cgDxSBXa7Jk
eiK+S0ApIfJ038CWz/JHn2UMOY7xHRjI7DfAItgNw1PnMUcPQpYdE8BpoEUn8lv4
m9st48wk4pXn2rNvz6si54hBrHOh3PCWQfTkyngNrVQdA300Q1E85zwWjWDsJsA3
9+jltIMr6TPAwcQZxBC9I0AdKC9GkaqqGN69dImypF4wHZtXeHz14AFsOJnK48t3
kN01e/+P/hdxMQaCKRJf4RPvuyrr5yS7eA9xhqXSf0pymrTqS4EXe+KeMnHSxVx5
+X5JuCbg7QkE4LMNGCqIUoU9z/TiY4IrXSc8JQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:22 2026 by rpki-client