Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/jasqyusTyG-UyVTvUiFxovakIMA.asa
File:                     jasqyusTyG-UyVTvUiFxovakIMA.asa (raw, json)
Hash identifier:          Bvg9V+XXYmQ0mBfPNmI16zoLSVqyVKXkkbwL0JWyFM4=
Subject key identifier:   8D:AB:2A:CA:EB:13:C8:6F:94:C9:54:EF:52:21:71:A2:F6:A4:20:C0
Certificate issuer:       /CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
Certificate serial:       01A130CA7C49A25349BBBD7D193A3DC6A457
Authority key identifier: 1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/jasqyusTyG-UyVTvUiFxovakIMA.asa
Signing time:             Mon 12 Oct 2026 15:45:38 +0000
ASPA not before:          Mon 12 Oct 2026 15:45:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215599
Providers:                AS: 9002
                          AS: 50124
                          AS: 60132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:ca:7c:49:a2:53:49:bb:bd:7d:19:3a:3d:c6:a4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a27ef63af3bc29b6f6418a499f02764a4383cb7
        Validity
            Not Before: Oct 12 15:45:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dab2acaeb13c86f94c954ef522171a2f6a420c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:ca:5a:9d:e0:35:98:18:c6:bc:69:c6:80:
                    78:3a:b9:f4:af:e4:29:ad:26:4a:32:c9:17:0e:b8:
                    a5:c3:2f:1d:1a:3c:27:ca:44:2d:cf:3a:7e:96:83:
                    ed:3f:7a:d7:56:c2:52:0c:10:43:61:77:9f:74:d8:
                    42:58:62:19:ab:96:ae:1e:94:51:b1:99:6c:2a:a4:
                    78:19:9b:c3:21:76:a6:d1:17:37:62:3c:c9:a0:9b:
                    a3:89:ae:41:93:31:90:5b:94:92:3b:52:bf:3d:5f:
                    5a:c5:04:dd:5c:c4:22:af:f7:cb:57:03:d2:4d:a2:
                    ab:ac:a2:2a:19:28:10:79:b6:cd:4c:50:72:29:76:
                    94:be:f0:b4:4e:ca:63:13:3f:3f:5a:ba:2a:a2:53:
                    a0:8a:ef:95:13:b3:5d:64:7e:06:2f:b1:f9:1f:0d:
                    52:b3:8b:0a:4a:c5:59:0f:e5:74:28:0d:b3:2d:81:
                    47:2f:90:a2:60:af:df:7e:90:26:6e:c2:fd:9d:d5:
                    b8:81:37:8b:23:95:e3:91:b5:dc:2d:e5:3f:90:28:
                    92:63:b4:44:ea:58:16:24:d8:24:0b:b0:ec:fc:26:
                    14:00:82:cf:a8:c1:c9:07:a7:78:53:0b:65:c2:22:
                    d0:c7:93:95:b5:40:85:02:d1:59:d6:9c:e5:53:19:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:2A:CA:EB:13:C8:6F:94:C9:54:EF:52:21:71:A2:F6:A4:20:C0
            X509v3 Authority Key Identifier:
                keyid:1A:27:EF:63:AF:3B:C2:9B:6F:64:18:A4:99:F0:27:64:A4:38:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GifvY687wptvZBikmfAnZKQ4PLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/jasqyusTyG-UyVTvUiFxovakIMA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/08c87e-256c-4802-ae6c-e2a3ddb653d2/1/GifvY687wptvZBikmfAnZKQ4PLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215599

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:ff:10:ae:83:0a:34:98:9b:ce:f8:ad:90:bb:39:fd:a7:
         c0:17:ec:9a:b9:31:2d:47:bd:2c:34:05:b2:e2:08:53:bb:79:
         f6:0c:56:49:e3:64:65:0f:63:0d:45:21:9b:88:a7:6b:e3:9e:
         07:26:20:b1:9d:ce:b6:46:2d:38:f5:2c:b7:fb:8f:01:dc:32:
         a8:90:12:e6:81:a8:69:aa:20:52:bf:8a:e6:1d:3a:49:a1:13:
         91:6b:87:0a:d2:da:85:d5:36:67:9f:f3:4b:b6:33:75:1a:14:
         71:8f:2c:69:e6:17:01:ee:1d:64:d3:7f:e1:c2:4f:5c:c4:de:
         69:eb:61:28:4b:4e:ae:07:7a:59:34:c0:77:55:e7:58:0c:2e:
         13:85:17:a8:28:bc:da:f9:56:d1:08:78:43:02:d2:4b:04:8c:
         3e:2b:1d:20:d2:2d:71:96:6e:c8:fa:07:63:66:02:0b:67:e7:
         d9:01:69:b6:5f:47:e7:8d:0e:d1:d7:ca:15:46:17:36:65:73:
         1d:17:9e:af:2b:cc:2f:f2:f7:45:19:9a:26:81:95:5c:a2:cc:
         22:a6:5c:69:ac:fa:66:16:5f:fa:d6:15:fa:e6:ea:43:ef:08:
         98:ce:1a:6b:ad:a3:99:f4:4c:3b:49:71:a0:2e:3e:1c:d5:2c:
         aa:9b:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:28 2026 by rpki-client