Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/b9JFH5XkgEnT2ogR1x8Lnp2JaQk.asa
File:                     b9JFH5XkgEnT2ogR1x8Lnp2JaQk.asa (raw, json)
Hash identifier:          12SnbchwgXP0LafCRXDmZi8p3Vp2tvU+FuT0NHs+bwE=
Subject key identifier:   6F:D2:45:1F:95:E4:80:49:D3:DA:88:11:D7:1F:0B:9E:9D:89:69:09
Certificate issuer:       /CN=188029162ef194077977b0a608be9b0d009cbde5
Certificate serial:       01A13B0914A7BFA4E2254FDCC6EA3F1384BD
Authority key identifier: 18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/b9JFH5XkgEnT2ogR1x8Lnp2JaQk.asa
Signing time:             Wed 14 Oct 2026 15:30:13 +0000
ASPA not before:          Wed 14 Oct 2026 15:30:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218400
Providers:                AS: 20473
                          AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:09:14:a7:bf:a4:e2:25:4f:dc:c6:ea:3f:13:84:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188029162ef194077977b0a608be9b0d009cbde5
        Validity
            Not Before: Oct 14 15:30:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fd2451f95e48049d3da8811d71f0b9e9d896909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:86:fe:cf:41:fb:f6:82:e6:59:71:66:d2:
                    81:b9:a6:12:12:1f:54:01:c2:25:89:f3:11:d3:8e:
                    6e:f0:d0:b2:d3:81:ff:ac:aa:a6:99:45:07:c5:b2:
                    ad:3e:7b:fc:45:95:0a:b9:97:5c:8b:3a:23:1e:c4:
                    aa:e4:29:f0:55:8b:19:73:fa:bc:70:c1:7c:e2:92:
                    b1:eb:98:7b:82:64:4a:2b:22:3d:f7:ce:b9:d2:d7:
                    9c:31:2b:ef:b7:2a:0a:b5:77:6c:aa:fc:6e:98:04:
                    a7:79:3e:bc:30:94:20:54:7a:5c:9c:76:b2:81:a1:
                    3c:c3:69:79:58:d3:a2:84:0f:49:11:67:ed:11:8d:
                    4c:ae:d6:d0:4e:81:c7:e4:38:e0:68:80:14:d5:69:
                    8b:60:94:0c:a0:d7:04:a8:bd:93:18:6c:92:74:1a:
                    03:8d:b6:f4:24:fd:92:67:c3:7d:82:6b:ce:95:8e:
                    9c:e4:07:8e:6d:3a:6c:b0:4a:77:11:4a:57:a9:46:
                    69:96:d5:da:4d:59:e7:0a:46:59:42:17:9b:e1:1b:
                    5a:66:d8:fd:f2:15:16:ef:1f:2f:44:19:7f:51:c9:
                    0c:46:ef:1b:e6:e5:f3:ee:ca:e7:74:f1:04:4e:a2:
                    80:9c:d0:00:be:81:93:fd:b6:45:80:41:2b:53:40:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:45:1F:95:E4:80:49:D3:DA:88:11:D7:1F:0B:9E:9D:89:69:09
            X509v3 Authority Key Identifier:
                keyid:18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/b9JFH5XkgEnT2ogR1x8Lnp2JaQk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218400

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:ae:7a:dc:54:c5:69:96:24:6d:cd:52:cc:42:e4:2f:2b:
         4f:02:91:c0:75:ed:a8:9a:cf:f4:8a:43:6e:87:ca:17:b3:ad:
         14:a1:39:11:fc:58:d8:2c:cb:56:f4:67:0c:44:cd:1b:55:b9:
         7c:3c:3a:fc:e3:5f:66:f3:21:55:12:9c:61:b4:00:26:db:fe:
         d6:0c:00:a6:26:28:53:4b:3b:bd:23:55:5e:db:27:47:75:3f:
         91:24:05:bd:fa:3c:3c:29:5f:24:a0:2c:69:80:c4:02:33:79:
         ab:26:23:00:21:8b:e1:8a:56:7b:cc:d7:ff:68:be:92:51:52:
         00:ae:11:d9:f1:d5:88:17:41:1b:b4:f9:3c:be:26:84:7d:57:
         93:f0:02:34:33:cc:1a:58:94:3d:e8:c0:31:c2:57:92:b0:2b:
         12:cf:6e:8b:be:92:b9:6e:54:9b:96:c7:8c:35:ea:74:71:74:
         6e:c7:9b:14:7a:2e:34:35:12:dc:b1:b1:7a:73:c3:d1:ff:21:
         ef:e4:57:93:5e:a0:31:17:05:e6:ec:67:c9:33:5c:61:c1:52:
         37:07:0f:3d:71:0c:09:1c:01:9d:08:db:b5:eb:9d:2d:46:de:
         5b:22:01:74:32:8f:0d:9a:09:4a:7f:eb:bc:4e:24:aa:b4:03:
         48:48:bc:0e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaE7CRSnv6TiJU/cxuo/E4S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ODAyOTE2MmVmMTk0MDc3OTc3YjBhNjA4YmU5YjBkMDA5
Y2JkZTUwHhcNMjYxMDE0MTUzMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQyNDUxZjk1ZTQ4MDQ5ZDNkYTg4MTFkNzFmMGI5ZTlkODk2OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlSG/s9B+/aC5llxZtKBuaYSEh9U
AcIlifMR045u8NCy04H/rKqmmUUHxbKtPnv8RZUKuZdcizojHsSq5CnwVYsZc/q8
cMF84pKx65h7gmRKKyI998650tecMSvvtyoKtXdsqvxumASneT68MJQgVHpcnHay
gaE8w2l5WNOihA9JEWftEY1MrtbQToHH5DjgaIAU1WmLYJQMoNcEqL2TGGySdBoD
jbb0JP2SZ8N9gmvOlY6c5AeObTpssEp3EUpXqUZpltXaTVnnCkZZQheb4RtaZtj9
8hUW7x8vRBl/UckMRu8b5uXz7srndPEETqKAnNAAvoGT/bZFgEErU0D6iQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFG/SRR+V5IBJ09qIEdcfC56diWkJMB8GA1UdIwQY
MBaAFBiAKRYu8ZQHeXewpgi+mw0AnL3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0lBcEZpN3hsQWQ1ZDdDbUNMNmJEUUNjdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zMDA3ZTUtMGE3Ni00ZjI1LWJkYTkt
Yjg3YzZlMmY1NDFjLzEvYjlKRkg1WGtnRW5UMm9nUjF4OExucDJKYVFrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zMDA3ZTUtMGE3Ni00ZjI1LWJkYTktYjg3YzZlMmY1NDFj
LzEvR0lBcEZpN3hsQWQ1ZDdDbUNMNmJEUUNjdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNVIDANBgkqhkiG
9w0BAQsFAAOCAQEAh52uetxUxWmWJG3NUsxC5C8rTwKRwHXtqJrP9IpDbofKF7Ot
FKE5EfxY2CzLVvRnDETNG1W5fDw6/ONfZvMhVRKcYbQAJtv+1gwApiYoU0s7vSNV
XtsnR3U/kSQFvfo8PClfJKAsaYDEAjN5qyYjACGL4YpWe8zX/2i+klFSAK4R2fHV
iBdBG7T5PL4mhH1Xk/ACNDPMGliUPejAMcJXkrArEs9ui76SuW5Um5bHjDXqdHF0
bsebFHouNDUS3LGxenPD0f8h7+RXk16gMRcF5uxnyTNcYcFSNwcPPXEMCRwBnQjb
teudLUbeWyIBdDKPDZoJSn/rvE4kqrQDSEi8Dg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:13 2026 by rpki-client