Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/2kDI2fX-vOvB11NNeAS3cg-93eM.asa
File:                     2kDI2fX-vOvB11NNeAS3cg-93eM.asa (raw, json)
Hash identifier:          NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=
Subject key identifier:   DA:40:C8:D9:F5:FE:BC:EB:C1:D7:53:4D:78:04:B7:72:0F:BD:DD:E3
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       01A047B0ECBCADE79EA550C5C6D71501460C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/2kDI2fX-vOvB11NNeAS3cg-93eM.asa
Signing time:             Fri 28 Aug 2026 09:26:12 +0000
ASPA not before:          Fri 28 Aug 2026 09:26:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41483
Providers:                AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:47:b0:ec:bc:ad:e7:9e:a5:50:c5:c6:d7:15:01:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Aug 28 09:26:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da40c8d9f5febcebc1d7534d7804b7720fbddde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:be:52:51:44:63:5d:eb:a1:2d:01:23:80:
                    dc:c6:4a:4c:32:c6:f5:0a:3a:8e:fa:e8:26:76:d8:
                    cb:60:20:fa:01:14:01:a3:7d:63:44:ea:39:a2:88:
                    92:8b:60:9a:15:84:4e:cc:5e:81:05:e6:f3:b0:de:
                    ba:84:ab:a0:86:4c:9a:98:e9:0b:7f:d3:03:c8:8b:
                    ac:79:ea:2f:40:28:a3:d9:82:b4:09:fa:68:fd:5e:
                    3d:e5:1a:33:13:0c:9b:0b:21:34:6b:6d:9f:94:2f:
                    2c:90:cf:a3:18:2d:2f:be:94:61:11:b9:e0:dc:a3:
                    7d:b3:b5:83:aa:5b:39:5d:6b:1d:b4:48:04:ab:8d:
                    d1:e1:9b:ae:7c:23:83:c5:0e:16:a3:22:ed:12:7b:
                    37:4f:2f:8d:ae:29:a3:2b:f2:60:ce:9d:79:0a:fe:
                    a3:2f:d7:22:92:1d:fa:65:84:78:7d:c1:14:01:c8:
                    5d:0f:03:30:df:a5:ad:42:a3:f6:2e:7d:08:6e:15:
                    83:01:d4:2d:3a:43:cd:00:61:bc:a5:3a:50:9a:fa:
                    cc:1b:a4:38:32:7b:a6:09:21:26:78:44:96:9a:56:
                    b4:a7:31:e1:17:cb:ac:52:1b:af:8b:58:e5:1a:06:
                    1c:4f:35:91:e6:02:d2:59:23:da:99:42:6d:a5:33:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:40:C8:D9:F5:FE:BC:EB:C1:D7:53:4D:78:04:B7:72:0F:BD:DD:E3
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/2kDI2fX-vOvB11NNeAS3cg-93eM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41483

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:8a:fb:f3:b9:07:9c:17:c8:f1:33:1a:0c:f7:68:5c:94:
         31:a4:37:a5:2c:23:3e:7b:6e:45:65:94:cc:c4:12:1b:66:3d:
         81:05:04:21:84:53:83:eb:bb:c3:50:bf:09:2a:b1:21:73:bb:
         d4:58:cd:78:2a:45:a3:50:8c:a2:b7:b9:39:e9:a4:d8:62:2b:
         7c:ff:38:e9:33:e2:bd:a9:2d:8a:88:68:6d:99:45:34:71:06:
         1f:10:15:8c:cf:6b:1b:06:3d:50:67:c6:3f:30:ed:91:43:6b:
         d7:b3:51:cf:09:dd:54:f4:05:73:05:e1:e2:93:d5:a8:e9:79:
         b5:36:03:73:fc:1a:60:7a:cb:47:69:11:35:29:bd:43:12:c6:
         53:55:9e:5d:4a:a3:4f:8c:21:91:1d:2b:58:76:73:f3:5d:1c:
         fa:80:a9:3e:25:3e:82:7f:1f:a0:12:b8:24:4a:0f:ec:6e:4c:
         5f:52:10:d2:0d:b4:30:94:9d:7f:c0:dd:ae:ba:89:05:8f:6d:
         2a:21:39:7f:70:81:78:e5:e1:03:9f:7c:d8:34:0c:ea:97:b7:
         1a:ba:13:c9:e7:01:93:7b:de:b8:6b:50:df:d4:45:42:ac:d3:
         cd:dc:40:dc:11:50:e1:b4:ba:b1:c7:79:0c:45:35:a6:e1:44:
         4f:93:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:58 2026 by rpki-client