Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/kARQD6YJAGepNx8PRXe8gdCaYas.asa
File:                     kARQD6YJAGepNx8PRXe8gdCaYas.asa (raw, json)
Hash identifier:          5FnGkcZgdhWej+GgPzbTwk5zp1QjKUWO2FoFoquTq6c=
Subject key identifier:   90:04:50:0F:A6:09:00:67:A9:37:1F:0F:45:77:BC:81:D0:9A:61:AB
Certificate issuer:       /CN=4e0ef5b44f1330cd744a8cdec7a6768766b2e07f
Certificate serial:       01A1644021EEE407C1D1BCF8CF18868D7743
Authority key identifier: 4E:0E:F5:B4:4F:13:30:CD:74:4A:8C:DE:C7:A6:76:87:66:B2:E0:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tg71tE8TMM10Sozex6Z2h2ay4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/kARQD6YJAGepNx8PRXe8gdCaYas.asa
Signing time:             Thu 22 Oct 2026 15:34:46 +0000
ASPA not before:          Thu 22 Oct 2026 15:34:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218569
Providers:                AS: 6939
                          AS: 41051
                          AS: 200993
                          AS: 204539
                          AS: 205941
                          AS: 214205
                          AS: 215296
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/Tg71tE8TMM10Sozex6Z2h2ay4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/Tg71tE8TMM10Sozex6Z2h2ay4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tg71tE8TMM10Sozex6Z2h2ay4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:40:21:ee:e4:07:c1:d1:bc:f8:cf:18:86:8d:77:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0ef5b44f1330cd744a8cdec7a6768766b2e07f
        Validity
            Not Before: Oct 22 15:34:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9004500fa6090067a9371f0f4577bc81d09a61ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:0a:64:8d:1d:9f:07:02:18:1d:0a:52:33:
                    b2:e6:85:75:d7:83:ce:58:a1:2a:e9:ce:ea:11:d9:
                    89:5b:22:10:b5:33:50:53:75:44:61:23:22:c0:40:
                    78:dc:3a:ba:52:2c:a8:85:63:90:c6:17:c7:21:d8:
                    c0:00:be:e4:d9:fa:d6:36:71:82:e3:73:61:fe:ea:
                    c6:3b:37:8f:cb:40:45:48:f8:0e:83:ab:e4:a4:f3:
                    cc:6b:8b:44:68:bf:1f:1a:72:3d:25:42:02:b8:f5:
                    c7:99:c8:d6:31:e8:0b:53:b6:ad:5c:9b:20:5a:1d:
                    5e:93:c2:af:4e:20:45:12:f2:f2:00:4f:82:74:31:
                    7d:63:78:5e:8c:7e:6e:65:34:ee:94:ba:0c:a7:0c:
                    d9:7f:5b:8a:38:08:e8:1e:00:bf:ab:0d:db:95:9b:
                    e8:89:48:b4:e6:09:ca:2f:32:be:5c:d8:7a:e8:77:
                    a2:ef:0c:f3:46:bf:c6:b3:73:e0:4b:34:43:e5:ec:
                    23:ca:dc:22:e6:77:7c:1e:63:5d:82:93:5a:80:dc:
                    3f:88:51:6a:ae:86:67:da:63:6d:08:94:f9:a2:61:
                    83:5b:47:9e:6f:68:59:c3:9b:07:60:42:a2:71:9d:
                    5e:54:7c:f1:27:d7:94:9b:7f:b9:9b:fd:2e:f6:8e:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:50:0F:A6:09:00:67:A9:37:1F:0F:45:77:BC:81:D0:9A:61:AB
            X509v3 Authority Key Identifier:
                keyid:4E:0E:F5:B4:4F:13:30:CD:74:4A:8C:DE:C7:A6:76:87:66:B2:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg71tE8TMM10Sozex6Z2h2ay4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/kARQD6YJAGepNx8PRXe8gdCaYas.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/Tg71tE8TMM10Sozex6Z2h2ay4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218569

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:13:70:2b:fa:2a:81:b6:e7:e2:5f:fa:06:82:22:9f:19:
         7a:13:f8:97:06:e8:ee:67:0b:66:20:1d:13:27:41:85:e9:20:
         dc:54:f7:b8:34:a2:18:04:e8:a5:e7:9e:44:17:a4:74:80:c7:
         39:9b:4f:bb:03:58:59:46:f9:8e:ba:33:28:5e:57:67:69:7f:
         c9:b3:64:99:aa:43:67:aa:17:2d:af:b0:32:63:f8:0b:2b:1f:
         da:e5:ae:3f:2c:36:b0:fc:c1:d9:65:06:e1:4d:22:63:17:8c:
         d2:ea:8b:c9:4b:c3:6c:4a:f0:9c:43:60:29:c3:12:44:a5:c7:
         33:26:8d:14:d9:8e:f0:74:6a:82:4b:5d:5d:14:6a:ac:b9:02:
         f3:c8:9a:0d:fd:ac:37:21:d7:ac:07:3a:4b:24:35:55:e0:f9:
         4d:65:ed:e7:50:e3:aa:8c:d9:f2:0a:23:d5:fb:55:f0:06:68:
         9c:a9:6e:66:d2:62:c3:ec:19:d3:5d:f3:b2:22:d1:0a:24:d8:
         e8:37:02:88:0d:40:e0:52:26:96:76:16:4f:1b:7d:9c:93:ca:
         ff:4b:eb:59:55:43:63:f0:bd:61:c6:47:26:16:24:46:cc:ad:
         24:cf:d2:48:9e:b0:ab:29:3c:76:34:d1:2b:62:6d:4c:c0:fa:
         c7:95:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:07:01 2026 by rpki-client