Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/Kt8bEFaFENkzAX4iCvjFzVXkfnM.asa
File:                     Kt8bEFaFENkzAX4iCvjFzVXkfnM.asa (raw, json)
Hash identifier:          iuccna73P4m1/WMCdiIUX3dr8PmdiCcQ6n8ODuaqJoM=
Subject key identifier:   2A:DF:1B:10:56:85:10:D9:33:01:7E:22:0A:F8:C5:CD:55:E4:7E:73
Certificate issuer:       /CN=da172842f9621d7aa52fa3238b464a06f289c019
Certificate serial:       01A159C67A4E3AF2B14E720FC13F3775A96D
Authority key identifier: DA:17:28:42:F9:62:1D:7A:A5:2F:A3:23:8B:46:4A:06:F2:89:C0:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/Kt8bEFaFENkzAX4iCvjFzVXkfnM.asa
Signing time:             Tue 20 Oct 2026 14:45:42 +0000
ASPA not before:          Tue 20 Oct 2026 14:45:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218758
Providers:                AS: 8772
                          AS: 29632
                          AS: 47272
                          AS: 219412
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:59:c6:7a:4e:3a:f2:b1:4e:72:0f:c1:3f:37:75:a9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da172842f9621d7aa52fa3238b464a06f289c019
        Validity
            Not Before: Oct 20 14:45:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2adf1b10568510d933017e220af8c5cd55e47e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:50:47:02:72:64:94:78:d1:8f:a5:65:61:
                    de:33:f3:5a:85:0f:b2:a4:03:8d:51:65:56:c9:86:
                    15:33:4f:58:4b:5d:be:9d:0e:69:2a:0e:fe:5a:0b:
                    b9:53:07:8e:fc:d3:02:d8:c6:9b:a3:cd:4b:0b:a8:
                    5a:19:b5:94:56:91:12:35:ab:06:00:40:2b:87:76:
                    d0:fa:50:fc:10:9d:34:da:2e:d5:d4:38:e7:0c:f4:
                    43:b5:11:7e:7d:fb:55:ee:44:fc:a9:6d:c2:01:db:
                    2e:c3:e2:84:d5:98:62:ae:f2:8a:7c:02:00:48:bc:
                    e7:7b:bd:ab:d9:5e:a4:b2:bd:12:75:66:54:9e:88:
                    94:c7:23:72:2c:54:88:68:d0:c5:8c:f0:8f:35:fb:
                    e5:ae:0c:65:0a:14:f5:ac:98:bc:7b:66:a9:ff:d2:
                    87:3d:84:61:77:8e:85:79:74:2c:e2:01:6e:5d:bb:
                    89:16:ab:b1:b6:74:55:44:19:26:d9:94:8a:13:1b:
                    36:29:74:b9:e9:18:0f:55:b9:5d:95:4e:f5:31:fd:
                    43:00:a4:ad:49:ba:46:e0:9c:a8:f2:75:fb:f7:43:
                    63:e3:97:10:04:ab:c8:3f:6a:74:3a:16:47:1f:9f:
                    15:fe:2d:75:a4:65:de:d4:58:aa:3c:e3:c2:0f:9b:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:1B:10:56:85:10:D9:33:01:7E:22:0A:F8:C5:CD:55:E4:7E:73
            X509v3 Authority Key Identifier:
                keyid:DA:17:28:42:F9:62:1D:7A:A5:2F:A3:23:8B:46:4A:06:F2:89:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hcoQvliHXqlL6Mji0ZKBvKJwBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/Kt8bEFaFENkzAX4iCvjFzVXkfnM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f47029-9c65-471c-a5f9-4b54fec95230/1/2hcoQvliHXqlL6Mji0ZKBvKJwBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218758

    Signature Algorithm: sha256WithRSAEncryption
         64:35:f8:f7:c2:9c:92:69:62:79:45:8c:4c:53:3c:dc:e8:72:
         68:0d:67:26:bd:41:74:20:7d:d0:c1:69:e3:c8:79:0b:83:8b:
         52:9f:82:39:5b:b6:3c:9a:fd:85:bb:49:cb:44:46:5c:45:74:
         2b:90:8d:73:90:18:4c:21:0c:8e:7a:25:b0:e6:14:56:2d:ad:
         c8:3a:80:35:a7:35:fb:52:35:01:84:7c:71:58:34:b3:eb:51:
         71:03:3c:70:41:d2:8d:fb:5b:2e:96:f0:30:47:d4:70:e1:d2:
         8b:9b:b7:f3:5d:b4:57:c0:61:5b:76:f6:6e:1a:a7:0b:fc:b1:
         c0:94:e8:46:ba:88:89:7b:d8:c0:9d:2c:ea:f0:eb:3b:f8:09:
         59:a5:64:b1:10:62:6c:37:60:cf:d0:c4:83:fe:0f:1f:d4:ab:
         b0:29:32:f6:bf:c5:91:31:1b:a7:e7:65:91:7c:6f:ab:7f:42:
         ce:91:95:dc:ec:84:6f:28:71:f2:03:c2:a6:92:3c:d9:39:69:
         62:59:81:cc:4c:62:69:ff:93:bc:42:21:a6:da:81:5e:8f:da:
         9d:5d:ce:ee:91:1c:43:04:ac:43:44:44:da:5f:46:fd:b7:5c:
         83:29:d2:b7:dc:14:44:46:a3:29:a2:2a:96:69:d4:4e:d1:94:
         27:6d:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:53 2026 by rpki-client