Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa
File:                     ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa (raw, json)
Hash identifier:          Mugd9gLE6hvJKv2zQiEqD0piVAHiUgLK+6JoN1CkxKs=
Subject key identifier:   8A:51:C2:BB:9C:36:4D:6E:DE:39:05:EF:BA:14:36:61:4A:B7:A9:A8
Certificate issuer:       /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial:       01A08ACD06E884A0B330DB3957E2C74F880F
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa
Signing time:             Thu 10 Sep 2026 10:11:27 +0000
ASPA not before:          Thu 10 Sep 2026 10:11:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214618
Providers:                AS: 174
                          AS: 1299
                          AS: 6939
                          AS: 13335
                          AS: 16276
                          AS: 16509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:cd:06:e8:84:a0:b3:30:db:39:57:e2:c7:4f:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
        Validity
            Not Before: Sep 10 10:11:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a51c2bb9c364d6ede3905efba1436614ab7a9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:88:bb:53:2a:e1:3e:66:17:25:55:3d:85:
                    29:7f:c7:7a:76:92:1f:bf:8a:ea:be:80:07:6c:56:
                    99:3b:b6:7c:3f:48:15:f5:e9:56:14:9b:91:17:3d:
                    1e:9b:3a:c6:6f:59:cc:71:e2:45:23:8e:38:ed:00:
                    02:fe:06:6b:2d:9b:c4:f6:bb:f2:4a:30:3b:95:0e:
                    3f:44:3f:33:65:78:25:55:ab:11:2a:4d:43:7e:c9:
                    a3:2a:0a:66:22:7f:38:c1:dc:21:89:c4:a7:9e:6f:
                    00:f2:c6:2e:8f:12:80:0c:86:2d:93:a8:6b:1d:6d:
                    05:ea:99:c1:93:90:80:08:6e:59:96:eb:46:93:d9:
                    a0:ee:8c:a8:08:11:e9:e5:6a:7a:7d:96:1e:fb:ca:
                    88:e4:5f:a7:a5:ef:6a:0b:77:34:ba:bb:8c:9a:b3:
                    75:1f:50:b7:7a:23:cf:42:c2:b9:7a:d7:8d:1f:7c:
                    c4:9b:a6:c5:45:a3:2f:20:b5:81:d5:6e:b0:27:0a:
                    df:54:5c:f4:ba:6b:3e:99:8d:8d:9c:91:77:db:7f:
                    1e:25:99:3e:4b:7a:3b:fc:ae:94:76:f0:0e:4c:82:
                    b0:71:21:7a:86:bf:3f:33:bb:c1:9c:81:6e:a9:8b:
                    08:31:6b:7d:4a:43:a2:53:9b:58:25:1e:f0:79:b4:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:51:C2:BB:9C:36:4D:6E:DE:39:05:EF:BA:14:36:61:4A:B7:A9:A8
            X509v3 Authority Key Identifier:
                keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214618

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:83:8d:d7:df:99:d6:92:21:da:e3:c9:aa:ab:03:f7:8f:
         bb:d9:c6:bf:26:3a:c8:f0:be:00:c4:7d:25:ea:cd:bf:96:7d:
         0a:8f:97:c7:bf:ec:6b:30:f9:01:6f:1b:b0:43:be:e3:73:24:
         d3:3b:b6:64:f0:b2:94:be:3f:49:7d:70:0e:59:17:10:53:10:
         1d:b9:f8:ec:40:83:19:39:31:ac:ab:af:48:9a:3a:41:3f:a6:
         5c:4c:9d:c9:d7:f3:60:bf:dd:85:71:36:9f:c7:e6:54:fe:bb:
         60:9b:8e:da:7c:14:06:7a:9e:75:9d:9b:cf:5d:c9:f0:f5:3b:
         77:00:77:2c:fb:a7:c6:d4:eb:31:f2:07:b1:10:20:cf:6b:dc:
         b3:3f:ce:30:10:98:c2:94:76:0e:3d:5c:97:bb:fa:c9:91:55:
         c9:d4:fe:06:b1:bb:b8:c0:f7:28:c1:45:b3:b1:7c:6c:8f:ab:
         74:1c:b6:27:0b:02:b8:43:74:4b:59:4f:9c:d0:25:50:1f:ce:
         ec:38:bc:86:dc:ae:3f:a0:0c:e5:5d:76:7f:9b:7b:d3:23:91:
         04:86:24:3c:dd:42:4f:3e:3c:f9:8e:85:e5:f9:d9:3e:f3:a8:
         d3:4d:3a:c8:1d:55:0d:f9:91:42:54:eb:e9:61:92:76:fd:ba:
         c6:09:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:20 2026 by rpki-client