Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/ks8KUn1OESHcMt4Bist2GHoU1DQ.asa
File:                     ks8KUn1OESHcMt4Bist2GHoU1DQ.asa (raw, json)
Hash identifier:          UxA32r1VBQRPqEBoVGCTgfsRarLxGLmwjf8LRsozccY=
Subject key identifier:   92:CF:0A:52:7D:4E:11:21:DC:32:DE:01:8A:CB:76:18:7A:14:D4:34
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       01A1225987DBEC1A1346152DD6F95C2B96F7
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/ks8KUn1OESHcMt4Bist2GHoU1DQ.asa
Signing time:             Fri 09 Oct 2026 20:27:35 +0000
ASPA not before:          Fri 09 Oct 2026 20:27:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211138
Providers:                AS: 30823
                          AS: 51396
                          AS: 52025
                          AS: 62403
                          AS: 198831
                          AS: 200051
                          AS: 200257
                          AS: 213905
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:59:87:db:ec:1a:13:46:15:2d:d6:f9:5c:2b:96:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: Oct  9 20:27:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=92cf0a527d4e1121dc32de018acb76187a14d434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:5a:96:e2:4e:22:e3:69:06:4e:5f:4b:94:
                    87:ad:52:d5:ff:4d:44:8f:84:6f:88:02:19:3b:d5:
                    ea:9d:3c:50:e7:54:a6:fe:c5:6b:8b:e8:12:1e:b0:
                    3f:fa:0e:87:3a:9b:fb:09:19:02:58:65:9d:5e:e0:
                    18:b1:53:7b:f4:61:bf:9d:9b:6c:e6:ef:df:83:2a:
                    9e:ee:08:30:7f:a0:a1:8a:05:0a:77:53:52:b3:12:
                    0a:5d:dd:48:0e:c8:6c:b0:08:e4:ae:51:ee:13:f8:
                    5a:cb:32:2c:3e:80:fa:0a:1f:57:a9:2d:92:dc:dc:
                    ff:79:2e:fb:b2:64:c4:40:34:5a:a8:41:a8:4a:12:
                    f7:bc:39:23:7f:16:96:8b:ac:f7:33:c1:2d:c4:c7:
                    82:37:ba:41:19:ea:f2:a2:93:0c:81:d7:56:66:22:
                    12:a1:99:99:01:64:95:14:11:d2:d0:5c:be:fc:06:
                    b1:ad:75:50:00:b7:7b:5b:9c:55:c7:5f:bd:d1:27:
                    34:f1:28:37:45:45:b2:9d:5c:73:ec:cd:ca:41:44:
                    1e:15:b5:f9:d0:c3:63:d1:09:82:01:3f:31:e6:02:
                    5d:bc:8b:61:d6:2c:c8:8a:a1:d7:3b:e1:5e:0b:dd:
                    77:82:16:67:93:1f:6c:ab:b4:e1:ea:c3:4a:c7:89:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:0A:52:7D:4E:11:21:DC:32:DE:01:8A:CB:76:18:7A:14:D4:34
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/ks8KUn1OESHcMt4Bist2GHoU1DQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211138

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:b7:4b:7b:11:f4:80:43:12:79:69:87:ae:c0:6d:4f:fd:
         66:7d:82:2a:23:f5:78:d5:64:cb:dc:1d:9d:22:be:11:66:fc:
         63:e8:5d:43:97:2c:b1:57:b1:b9:42:12:e1:6d:0e:aa:2f:34:
         0a:63:fe:29:ab:8c:9e:16:a6:d3:2f:7e:af:9e:33:c0:97:ae:
         f1:87:47:f7:d4:43:13:4b:3d:39:9f:e1:0a:09:54:5e:58:ea:
         b9:18:86:d3:4f:ca:2d:c7:a5:64:8a:9a:50:e2:d4:e7:55:11:
         0a:87:58:4c:a9:63:e4:06:4c:9c:37:99:ed:92:25:2b:5c:e2:
         8f:4e:eb:61:f6:e5:86:4b:e1:3c:44:ff:d7:00:09:f2:e3:a0:
         47:d1:e3:d6:52:97:89:b5:9a:d3:4d:67:91:45:01:22:13:ca:
         7f:19:88:5c:ae:e4:86:e6:d2:74:bb:b7:6b:f1:88:10:16:9d:
         71:1c:69:47:dc:1e:13:13:fe:93:1e:fd:d6:80:f6:6a:f7:2d:
         8c:fa:55:88:39:40:6a:3d:a4:b4:5f:8a:9a:14:11:0b:2e:0c:
         29:71:a4:5c:f7:ac:1b:7b:13:1f:6e:b5:64:4a:dc:eb:8c:0b:
         dc:20:b4:80:63:54:59:35:9e:b4:4d:bf:3c:a2:79:5a:c1:c5:
         79:0e:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:31:42 2026 by rpki-client