Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/QUCvAXme2ZXJbvhzP50yT5W0KfM.asa
File:                     QUCvAXme2ZXJbvhzP50yT5W0KfM.asa (raw, json)
Hash identifier:          0LniheyqfGK5IqLBzlBmdzbpX7y8fW+DYFndQ1au4oE=
Subject key identifier:   41:40:AF:01:79:9E:D9:95:C9:6E:F8:73:3F:9D:32:4F:95:B4:29:F3
Certificate issuer:       /CN=e49dafa95adc19a6e454996818db566bcae408aa
Certificate serial:       01A13BF9DE884027E57DE514AEA2375E86BD
Authority key identifier: E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/QUCvAXme2ZXJbvhzP50yT5W0KfM.asa
Signing time:             Wed 14 Oct 2026 19:53:13 +0000
ASPA not before:          Wed 14 Oct 2026 19:53:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218402
Providers:                AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:f9:de:88:40:27:e5:7d:e5:14:ae:a2:37:5e:86:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49dafa95adc19a6e454996818db566bcae408aa
        Validity
            Not Before: Oct 14 19:53:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4140af01799ed995c96ef8733f9d324f95b429f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ea:ef:08:a7:17:9b:94:aa:bb:8b:39:55:e3:
                    0c:5f:fa:3b:41:78:35:d2:35:00:50:e4:1b:7d:fb:
                    0a:42:f4:54:71:5a:c8:44:be:8c:f2:3e:26:c6:5c:
                    2a:d2:b9:fc:7a:f4:1b:a9:28:96:cb:59:71:de:53:
                    dc:97:39:ff:29:20:ed:94:6d:21:6d:5d:f1:78:c4:
                    67:a4:b7:60:e6:73:8c:01:02:a6:66:16:cd:d7:6d:
                    45:56:81:ba:d7:d2:12:c1:f8:81:63:86:46:63:ed:
                    c4:86:51:8a:32:27:57:68:08:b6:26:8f:12:ea:41:
                    22:84:a4:ff:ca:f2:e5:63:b6:64:f5:6b:93:eb:02:
                    13:1c:d1:77:29:91:76:45:9b:ac:ca:a9:0d:94:cf:
                    00:35:1c:58:52:c5:b0:b3:f4:3c:ad:7d:ce:9a:b5:
                    47:ab:76:af:94:2f:ac:f2:0e:f3:d1:44:27:f8:7d:
                    1e:4a:50:89:a4:e6:e1:ea:f4:1d:77:c4:70:84:56:
                    83:ff:19:7c:8a:77:e3:c2:f3:b9:ed:44:df:ae:24:
                    79:10:93:50:1a:5a:4b:48:24:c0:d5:a6:bd:d5:49:
                    46:e2:8c:9f:79:3d:7d:20:50:dd:f8:d7:e6:8e:df:
                    4f:ed:ad:d4:9b:53:70:db:64:4c:55:ba:eb:99:12:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:AF:01:79:9E:D9:95:C9:6E:F8:73:3F:9D:32:4F:95:B4:29:F3
            X509v3 Authority Key Identifier:
                keyid:E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/QUCvAXme2ZXJbvhzP50yT5W0KfM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218402

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:07:d2:bc:dd:4f:34:77:cb:53:80:c8:1c:c6:f6:70:4a:
         eb:0c:ae:bb:d6:e4:e6:6f:69:df:26:d1:1d:0e:52:72:17:3e:
         fe:fe:9f:c9:0b:e1:1c:8d:e9:79:69:c6:a3:5d:ee:5f:4e:35:
         1c:31:f5:0a:98:d8:e9:81:0d:18:c9:c1:9b:a2:52:1a:58:33:
         30:a6:21:fb:7c:69:58:e3:74:8f:41:44:97:f1:13:16:d5:b5:
         22:3e:5b:82:37:be:3c:6e:68:b6:41:37:fa:cb:05:d1:24:b1:
         91:c1:c2:ad:e8:4d:39:10:25:31:b5:f3:d0:bb:5a:bc:86:62:
         99:5f:a3:9a:d1:b9:94:36:51:d7:a6:f9:89:ca:f2:4f:54:9f:
         f8:9d:d6:8b:17:9c:ae:16:79:79:31:88:e9:b1:ad:00:03:f6:
         fe:5e:2c:4c:23:3f:40:98:99:f0:00:c3:36:64:47:e8:30:3d:
         54:91:93:94:45:dc:41:a7:e8:0a:44:c7:94:47:cc:6a:18:21:
         50:44:38:be:01:06:28:d8:ed:f8:4d:d6:78:0d:b0:f4:80:38:
         f2:81:6d:24:1d:11:78:34:d1:e2:73:79:45:80:a5:c0:2f:57:
         7d:9c:11:cb:89:12:ea:32:b8:3e:1b:1f:f5:37:df:7f:04:e5:
         08:e4:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:44 2026 by rpki-client