Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/iSiwchUi8gKr7M56GXwrKaNbTog.asa
File:                     iSiwchUi8gKr7M56GXwrKaNbTog.asa (raw, json)
Hash identifier:          UEN1Rx3I919P+Gy3MDzVsXDmstctr/QM6tK8cvZQa3U=
Subject key identifier:   89:28:B0:72:15:22:F2:02:AB:EC:CE:7A:19:7C:2B:29:A3:5B:4E:88
Certificate issuer:       /CN=64cda2e473b9e67df7b497d1949222a2724c1b63
Certificate serial:       01A0E93671B351C4B5A845F18D065393C723
Authority key identifier: 64:CD:A2:E4:73:B9:E6:7D:F7:B4:97:D1:94:92:22:A2:72:4C:1B:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM2i5HO55n33tJfRlJIionJMG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/iSiwchUi8gKr7M56GXwrKaNbTog.asa
Signing time:             Mon 28 Sep 2026 18:10:54 +0000
ASPA not before:          Mon 28 Sep 2026 18:10:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218672
Providers:                AS: 8075
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/ZM2i5HO55n33tJfRlJIionJMG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/ZM2i5HO55n33tJfRlJIionJMG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZM2i5HO55n33tJfRlJIionJMG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:36:71:b3:51:c4:b5:a8:45:f1:8d:06:53:93:c7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cda2e473b9e67df7b497d1949222a2724c1b63
        Validity
            Not Before: Sep 28 18:10:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8928b0721522f202abecce7a197c2b29a35b4e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:16:08:d1:07:c4:02:c8:a6:05:db:4e:e7:
                    6d:ec:ec:7b:08:1e:67:f0:de:17:23:63:04:98:4f:
                    3b:bf:34:32:e6:c4:ed:3c:e4:6f:1a:60:09:f1:9a:
                    b0:a2:75:f0:32:fe:27:99:33:d2:30:41:cd:93:45:
                    45:de:fe:12:ce:ba:4b:95:5c:31:d6:b3:89:ee:92:
                    ee:17:ca:05:34:80:0a:08:e1:4b:7b:19:4e:f8:b9:
                    02:96:76:c5:3e:c0:e3:5f:7f:18:52:f0:66:30:1a:
                    7a:74:ca:66:51:74:4d:bc:6f:f0:ca:6e:fa:0d:15:
                    c4:4a:14:7b:49:d2:3d:59:64:91:1d:be:5f:6c:ee:
                    8f:f3:9f:e7:0f:94:87:7c:9e:5b:b1:9f:e5:b7:df:
                    22:30:95:2f:f9:0c:ba:84:ba:9e:26:d9:e0:4d:a9:
                    e1:36:95:95:db:24:87:ef:6d:23:13:cf:4d:47:3e:
                    09:83:f4:57:1f:e7:c6:87:77:59:41:55:a9:eb:35:
                    d2:19:af:1f:7d:f1:a4:e9:1a:b5:84:7f:01:c6:43:
                    d3:72:8d:ae:be:31:38:ba:ae:94:f5:36:19:af:26:
                    b9:67:87:3b:db:5f:3c:7b:7a:ec:7c:6f:b7:44:a2:
                    b9:7b:5f:53:cc:92:68:60:6f:02:a1:d5:30:c3:c9:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:B0:72:15:22:F2:02:AB:EC:CE:7A:19:7C:2B:29:A3:5B:4E:88
            X509v3 Authority Key Identifier:
                keyid:64:CD:A2:E4:73:B9:E6:7D:F7:B4:97:D1:94:92:22:A2:72:4C:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM2i5HO55n33tJfRlJIionJMG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/iSiwchUi8gKr7M56GXwrKaNbTog.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/df6bee-c5e8-43a4-98c4-3d18ffc76d28/1/ZM2i5HO55n33tJfRlJIionJMG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218672

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:c5:71:c6:6a:02:d6:55:e7:02:a5:4b:b2:00:36:ae:e6:
         e7:65:22:08:2f:1d:b8:e4:1d:89:2a:79:ec:8c:08:f7:4e:82:
         2f:4d:c3:36:58:98:63:ad:28:6b:d4:22:bd:ec:0d:2a:62:a0:
         71:c2:36:c7:71:a3:bd:e5:1e:2c:85:36:ea:7f:39:39:bb:8d:
         a1:a1:39:24:f2:30:ec:4d:6d:68:ca:71:b0:7c:b6:c2:00:80:
         c3:2d:d8:48:0a:0c:c9:d1:8a:ef:83:ab:d9:39:11:6a:e0:59:
         51:5f:70:4d:a8:be:21:d3:98:51:67:23:ee:64:0b:2c:53:fc:
         41:88:db:bb:22:89:65:da:7a:d2:b0:78:c0:12:0e:6d:69:cf:
         b7:19:94:7c:c9:b9:97:ab:ad:c4:0f:7d:7b:98:70:d7:7d:10:
         49:01:7f:16:57:7c:dd:24:1b:71:52:2f:52:bb:39:a5:39:e6:
         ed:58:b3:8d:ce:5a:fb:79:a7:14:7a:4e:fa:06:f6:e0:3c:bf:
         5e:c3:f8:24:7a:9a:51:1e:fc:db:0e:15:51:7b:04:cc:dc:06:
         6e:28:ec:e6:66:d5:79:bb:a0:79:88:1d:a3:79:86:ff:ed:aa:
         b9:08:41:41:02:95:c3:30:64:6f:39:fb:83:2f:e2:52:fa:a1:
         83:54:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:45 2026 by rpki-client