Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa
File:                     qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa (raw, json)
Hash identifier:          aHzU+u1zOjJwE23C3Y/zhbfbtLovXRgW0Lo6a/gy4nk=
Subject key identifier:   A8:40:28:F0:C7:3D:58:37:EB:AC:00:B3:FD:62:06:35:8E:A3:10:AC
Certificate issuer:       /CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
Certificate serial:       01A06002EFAE28F379593297A2090AEA5B68
Authority key identifier: DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa
Signing time:             Wed 02 Sep 2026 02:46:40 +0000
ASPA not before:          Wed 02 Sep 2026 02:46:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218822
Providers:                AS: 14618
                          AS: 16509
                          AS: 20473
                          AS: 24381
                          AS: 31898
                          AS: 41051
                          AS: 47272
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:60:02:ef:ae:28:f3:79:59:32:97:a2:09:0a:ea:5b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
        Validity
            Not Before: Sep  2 02:46:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a84028f0c73d5837ebac00b3fd6206358ea310ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:8f:bb:0a:41:98:88:92:8a:23:dc:9b:c4:
                    00:84:7d:f1:42:da:2a:60:55:4f:76:c1:97:5b:5c:
                    ad:3e:90:1a:c0:56:f1:80:a7:52:75:ef:5d:52:8d:
                    d9:a4:7a:3d:c2:0f:6f:a6:38:08:08:14:d5:44:93:
                    31:e4:a2:fa:a7:8f:9c:eb:a1:ab:10:cc:69:a6:40:
                    bc:ea:05:09:05:5d:40:7c:32:24:98:38:88:9a:be:
                    1d:60:eb:60:67:b6:24:f5:d1:71:ac:d9:f8:f2:15:
                    26:04:0c:6d:43:19:99:9f:7a:15:b7:19:82:d1:da:
                    f1:49:73:9a:dd:62:db:61:25:79:72:9d:73:ac:c5:
                    c3:e0:5e:3b:74:dd:94:23:e9:4d:15:0d:26:8a:c5:
                    c0:96:bb:bf:af:81:e8:bd:d5:34:0d:2c:cf:2b:e2:
                    b2:7b:b8:00:96:ef:de:45:59:29:de:d9:17:96:21:
                    52:40:be:35:42:42:18:65:51:df:29:17:1d:fa:94:
                    ca:51:a4:88:db:6a:17:39:5b:a6:a0:1c:cb:fa:32:
                    d3:71:fb:b4:a0:76:90:70:ac:be:ae:91:9b:b2:e2:
                    00:d2:5a:84:a2:95:cb:4a:98:be:51:ef:23:48:3f:
                    ff:df:f8:64:8d:c1:03:b8:af:c3:11:a7:b0:15:24:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:28:F0:C7:3D:58:37:EB:AC:00:B3:FD:62:06:35:8E:A3:10:AC
            X509v3 Authority Key Identifier:
                keyid:DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218822

    Signature Algorithm: sha256WithRSAEncryption
         9a:90:66:3e:d3:8e:78:78:19:79:21:b3:fb:e3:69:4f:1e:fb:
         02:97:1e:14:86:91:a3:af:98:cd:39:ac:0b:3c:93:f9:f0:04:
         a3:63:87:be:6b:07:af:cf:5e:c0:7f:ba:18:d6:36:f9:f3:88:
         d0:ac:c3:9f:da:a2:1d:f2:04:b9:4f:77:ee:05:24:cb:6b:75:
         ca:54:38:59:2e:ee:5e:a0:e9:72:e4:d5:53:fb:a5:ab:8c:e4:
         ac:6e:f9:0e:d6:e0:07:52:59:be:02:b4:2b:31:42:75:17:70:
         c7:fa:69:f2:3c:20:07:54:5d:cd:26:4a:06:ec:25:16:ed:bd:
         09:b2:06:09:56:8d:9d:b5:03:1b:81:7a:c0:ce:f1:7b:0d:c1:
         a6:2f:64:00:c6:a2:9d:57:11:de:89:3e:33:3b:63:96:1f:0f:
         5e:1e:a8:40:ce:fe:89:7f:a7:ff:1e:9c:e3:fe:9a:4c:29:50:
         65:33:c0:c2:0d:db:a0:b5:2d:8d:d7:5f:28:03:cc:ad:c4:cc:
         1b:4a:e8:9c:4c:8e:f0:6d:c7:af:bf:97:5e:0e:c5:83:01:1d:
         86:c3:7b:ba:59:d7:4d:2a:53:34:0a:65:9a:a8:55:0a:7f:4e:
         4b:5e:74:b8:e0:6d:85:2a:ca:e4:a6:d8:b0:b7:47:fd:bf:1c:
         77:2e:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:10:18 2026 by rpki-client