Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/jjHQ0nyrVT4Tfp74mZuWTb8LWf8.asa
File:                     jjHQ0nyrVT4Tfp74mZuWTb8LWf8.asa (raw, json)
Hash identifier:          xO1FPVP3FTUwLPVrVcHgTvXxJ3+ZSTSRk2gqlbNkmJY=
Subject key identifier:   8E:31:D0:D2:7C:AB:55:3E:13:7E:9E:F8:99:9B:96:4D:BF:0B:59:FF
Certificate issuer:       /CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
Certificate serial:       01A13ACF66D0C7F836531386E3C8EA18AADF
Authority key identifier: 71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/jjHQ0nyrVT4Tfp74mZuWTb8LWf8.asa
Signing time:             Wed 14 Oct 2026 14:27:13 +0000
ASPA not before:          Wed 14 Oct 2026 14:27:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218796
Providers:                AS: 6939
                          AS: 20473
                          AS: 44324
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:cf:66:d0:c7:f8:36:53:13:86:e3:c8:ea:18:aa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
        Validity
            Not Before: Oct 14 14:27:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e31d0d27cab553e137e9ef8999b964dbf0b59ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:54:2b:27:39:19:99:9a:96:12:79:c6:ab:
                    15:7b:e1:20:d6:bd:1d:0a:33:2b:13:7f:f5:6d:80:
                    a6:e9:36:cc:fb:e5:cc:c6:9c:94:29:0b:e2:8b:75:
                    b7:56:e5:16:4d:03:0d:4c:7d:f5:2a:94:cb:29:2d:
                    38:d3:06:b2:19:9b:97:c8:a6:32:b1:d1:47:28:4f:
                    de:16:1f:81:be:52:f7:d9:89:f8:a5:8e:3f:9f:57:
                    36:40:f4:6b:db:e7:94:05:f7:75:3b:21:3f:89:94:
                    8c:b7:84:d0:1d:5c:e2:3c:b7:c4:cd:87:80:db:12:
                    44:14:b1:f5:bb:dc:81:58:d2:51:8d:d9:28:7c:f1:
                    8c:fd:5e:aa:21:08:8a:14:ac:04:95:be:76:64:a3:
                    b7:6c:ab:7e:6e:45:86:92:0b:fa:6f:d9:bb:d2:6b:
                    2a:91:1c:12:4d:f1:19:42:21:1d:fc:24:11:66:f4:
                    de:34:90:30:33:b0:89:0f:56:46:44:09:16:02:08:
                    65:ab:70:db:4a:cd:c7:07:45:7f:64:77:da:fb:3c:
                    23:c5:8e:67:8d:9c:24:99:b6:5e:b0:8b:41:7e:6b:
                    cc:3f:3d:cb:bf:56:f9:44:4a:33:26:fb:88:01:71:
                    b4:29:46:34:6f:df:b9:a8:d7:4d:64:3d:c4:4a:b7:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:D0:D2:7C:AB:55:3E:13:7E:9E:F8:99:9B:96:4D:BF:0B:59:FF
            X509v3 Authority Key Identifier:
                keyid:71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/jjHQ0nyrVT4Tfp74mZuWTb8LWf8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218796

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:52:c9:de:2f:22:c3:38:e5:0b:68:03:6e:ae:d4:36:9a:
         16:b3:2e:8e:ab:74:99:41:6e:d9:1f:0c:90:bd:40:06:6b:41:
         43:c8:95:ca:8b:f1:9b:a6:c9:68:f4:5d:39:b5:a8:ed:6d:ba:
         24:c0:db:01:80:4b:c8:4c:6a:88:90:58:28:74:3a:7c:51:ea:
         7c:a1:0c:b1:14:65:5e:98:dc:63:48:1d:52:55:00:81:30:ca:
         17:4d:71:d0:c1:a5:2e:1a:9f:b0:31:15:db:da:93:66:59:c4:
         89:24:45:c8:74:00:09:cf:56:d1:77:86:db:aa:4b:e4:9c:cf:
         96:97:bd:5c:6c:20:41:b3:81:79:08:de:aa:f2:48:8b:87:71:
         9e:0f:b8:ad:7b:a7:be:37:5f:ad:07:3d:5e:cd:03:6c:ec:e9:
         17:b2:14:0c:06:28:76:5e:b5:e4:80:64:c8:4f:67:27:e0:35:
         99:4d:f2:1f:43:4d:e6:0d:1d:ca:8b:30:40:e3:4c:03:98:c5:
         ac:0e:62:6d:d7:be:36:1b:21:ba:01:fb:0a:e6:09:06:4f:fe:
         8e:d7:1e:ca:42:12:ed:ee:c8:33:14:01:58:32:1e:f3:d1:17:
         25:c1:18:c2:6d:78:50:6d:b5:0d:05:59:ad:4b:7e:07:b7:3d:
         4d:e3:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:38:27 2026 by rpki-client