Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/kKm0mnUFelU-2OyxbW57SNYtYDQ.asa
File:                     kKm0mnUFelU-2OyxbW57SNYtYDQ.asa (raw, json)
Hash identifier:          DgPImx2JyAO0szK/hewu7q8n8Wqz07Y4HOrSKWbWGkQ=
Subject key identifier:   90:A9:B4:9A:75:05:7A:55:3E:D8:EC:B1:6D:6E:7B:48:D6:2D:60:34
Certificate issuer:       /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial:       01A0F610EE92221E2593682836F848562B59
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/kKm0mnUFelU-2OyxbW57SNYtYDQ.asa
Signing time:             Thu 01 Oct 2026 06:04:59 +0000
ASPA not before:          Thu 01 Oct 2026 06:04:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205570
Providers:                AS: 204457
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:10:ee:92:22:1e:25:93:68:28:36:f8:48:56:2b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
        Validity
            Not Before: Oct  1 06:04:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=90a9b49a75057a553ed8ecb16d6e7b48d62d6034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:09:d0:4a:fd:e5:ae:ec:eb:66:85:23:4d:
                    3c:a1:fe:97:8b:7e:6a:40:3d:05:99:53:7b:28:1a:
                    54:ac:ab:7a:d3:05:22:a1:a5:0c:67:ba:9c:d0:c5:
                    92:6e:93:23:be:08:1e:f8:8f:13:fc:61:f9:2b:81:
                    80:e3:81:12:a5:76:d4:c2:af:c7:34:16:00:6a:d0:
                    11:32:e4:07:e6:bf:e5:12:21:d0:d1:26:97:1d:e9:
                    4d:64:5c:72:4b:7a:53:14:71:ae:87:4b:ee:af:f7:
                    d6:cd:1f:41:77:82:02:f1:1a:8e:01:92:1d:c4:de:
                    36:59:e1:cf:d6:d3:fa:e1:9a:fe:1f:36:88:9d:37:
                    5a:dd:01:ea:4c:63:a8:e3:e7:91:91:c7:ce:63:7e:
                    56:19:6d:db:13:22:b7:d7:75:65:87:5a:0e:82:e3:
                    82:07:b2:ce:21:45:fd:7a:e1:8b:d6:f2:37:b5:51:
                    3e:63:e6:d2:d4:c6:d8:cc:5f:f2:c1:99:71:97:b4:
                    19:c5:bf:5a:c7:f6:80:cb:f5:0b:49:bc:10:ae:c6:
                    fe:b8:46:38:8f:61:c6:88:9a:ea:ce:b7:70:5a:77:
                    50:af:48:b3:8f:5e:6c:50:ec:e2:63:0f:1c:79:b4:
                    11:ea:a8:16:01:64:cf:e8:cb:c7:e8:4f:01:05:66:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:B4:9A:75:05:7A:55:3E:D8:EC:B1:6D:6E:7B:48:D6:2D:60:34
            X509v3 Authority Key Identifier:
                keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/kKm0mnUFelU-2OyxbW57SNYtYDQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205570

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:46:69:63:8a:79:f6:99:04:7d:66:dc:85:38:54:df:15:
         9d:ba:13:c1:c9:13:a4:14:3a:7b:e8:ec:28:2e:7c:cf:2f:7b:
         0d:4e:03:4d:85:30:1a:3b:f7:49:2f:13:f6:7b:8d:0f:fc:c5:
         55:f5:da:54:dd:ae:ee:55:f4:de:12:a4:68:3f:3c:47:04:d2:
         9a:b2:22:54:bf:62:09:69:07:26:c0:39:b8:3f:85:85:dd:96:
         7b:e5:b8:f0:f4:bf:7a:14:b7:d8:59:32:58:18:46:13:ea:d1:
         f2:25:04:d7:51:23:04:e0:fb:15:37:d1:6c:28:80:2d:8d:27:
         53:17:b7:b8:ba:f1:93:d7:59:fd:a6:f6:64:b2:47:4f:8b:84:
         63:01:2a:92:47:00:44:4b:0f:1b:b9:38:02:ce:4e:02:c8:b1:
         0b:e7:fb:e9:ef:80:90:ea:10:1b:23:96:2d:6e:5d:52:f4:23:
         c2:fb:87:6f:1f:e5:0a:c4:a1:26:33:23:61:ac:30:6d:4a:a7:
         77:8f:92:1a:da:75:7e:82:c7:58:af:60:20:ed:55:13:0c:57:
         d2:19:1f:74:55:64:e2:5b:1e:58:61:92:88:69:81:9b:b5:39:
         ba:55:7c:32:1c:b8:04:65:61:0a:d4:78:eb:0a:90:16:d1:f8:
         58:00:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:24:07 2026 by rpki-client