Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/XKrY_x0GDKPcMIjZ1n3esR_mAvQ.asa
File:                     XKrY_x0GDKPcMIjZ1n3esR_mAvQ.asa (raw, json)
Hash identifier:          uZVEPzWO4WFR167D1Ln75XvHbpwu6UwQ90LgwHSk95Y=
Subject key identifier:   5C:AA:D8:FF:1D:06:0C:A3:DC:30:88:D9:D6:7D:DE:B1:1F:E6:02:F4
Certificate issuer:       /CN=c24137dfead25d1a3ee69df7726e1b00ef8e3f38
Certificate serial:       01A1CB63882F7A4A539ACF1F88B132AE231B
Authority key identifier: C2:41:37:DF:EA:D2:5D:1A:3E:E6:9D:F7:72:6E:1B:00:EF:8E:3F:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/XKrY_x0GDKPcMIjZ1n3esR_mAvQ.asa
Signing time:             Wed 11 Nov 2026 16:14:20 +0000
ASPA not before:          Wed 11 Nov 2026 16:14:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218373
Providers:                AS: 34927
                          AS: 47272
                          AS: 47498
                          AS: 208226
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cb:63:88:2f:7a:4a:53:9a:cf:1f:88:b1:32:ae:23:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24137dfead25d1a3ee69df7726e1b00ef8e3f38
        Validity
            Not Before: Nov 11 16:14:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5caad8ff1d060ca3dc3088d9d67ddeb11fe602f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:7a:4f:e4:b4:f6:cf:8e:5a:e5:15:77:56:
                    1e:e6:70:e7:fe:28:01:36:39:0d:2e:77:db:56:01:
                    f0:62:b9:22:af:b7:bb:94:33:14:08:1d:34:3a:69:
                    c9:65:da:7e:95:16:7a:77:3d:20:f7:30:04:fc:1c:
                    2a:a3:1a:fc:51:94:61:9c:de:b9:62:d8:83:ce:81:
                    df:fc:49:6b:4c:34:95:c7:ff:5b:50:30:33:70:08:
                    f7:8e:8b:cc:f2:19:1f:11:34:f9:1e:7e:eb:a4:79:
                    7b:6a:1c:45:4f:8e:2e:94:aa:f1:04:f1:60:c2:a3:
                    41:01:70:12:88:ef:4d:0c:1f:20:f1:48:36:a4:b1:
                    8a:c8:e3:a5:9a:43:2f:1c:b6:23:33:87:ee:fe:57:
                    16:30:df:f5:d7:03:3a:b4:f0:0b:69:10:a0:63:e8:
                    a3:35:fa:55:56:6c:04:9c:35:f9:03:76:ee:ac:40:
                    85:63:73:c5:fc:ed:11:38:12:9c:e0:a7:9f:b6:18:
                    0c:8e:e5:b9:ed:d1:b9:a3:cd:97:9d:70:64:77:e0:
                    b9:09:f3:80:d6:4b:f7:26:78:4d:94:b5:86:91:80:
                    5c:04:5f:5f:e6:35:60:9b:d8:89:ab:8a:23:9f:0c:
                    be:ac:da:86:c3:3e:06:39:c4:c3:af:16:57:54:d5:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AA:D8:FF:1D:06:0C:A3:DC:30:88:D9:D6:7D:DE:B1:1F:E6:02:F4
            X509v3 Authority Key Identifier:
                keyid:C2:41:37:DF:EA:D2:5D:1A:3E:E6:9D:F7:72:6E:1B:00:EF:8E:3F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkE33-rSXRo-5p33cm4bAO-OPzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/XKrY_x0GDKPcMIjZ1n3esR_mAvQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/20b2f6-3752-41e7-90ff-fb57f5d9b012/1/wkE33-rSXRo-5p33cm4bAO-OPzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218373

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:84:08:9f:19:07:01:bf:51:99:67:95:94:3a:29:41:6c:
         86:1c:ab:8c:64:4a:a2:e7:74:e1:6f:5b:60:63:25:f0:44:8d:
         21:fd:15:f9:e2:80:10:35:86:4f:65:2c:26:b7:82:a6:d2:0b:
         53:37:a4:54:82:e9:82:c5:a7:81:dc:f8:c8:4f:4c:04:8a:d8:
         34:3c:82:80:87:4a:b1:40:c4:33:a3:d9:76:76:52:01:70:1f:
         7f:25:89:3e:9a:a8:2e:18:32:66:67:dc:78:8c:e4:a1:a2:5c:
         85:e9:49:d3:05:ec:5a:8a:21:5a:94:54:80:19:80:7d:49:4a:
         5a:76:de:f4:9e:a8:51:3a:6d:a8:db:ce:38:04:55:0e:c4:0c:
         a5:ee:dc:ff:cd:a8:66:8f:6d:66:0d:1c:ce:6c:8a:23:0b:c9:
         d6:b1:39:01:d7:22:01:55:45:88:5e:20:96:65:43:d4:28:25:
         77:58:cd:dc:11:95:3a:b0:a6:ad:70:db:fe:53:61:64:d3:05:
         f6:a7:ca:8e:59:e9:e6:5f:0d:0b:43:01:5f:ba:f9:03:5b:93:
         5a:75:86:91:3d:91:41:a9:81:68:ce:d3:c1:4d:b8:7c:80:95:
         e1:8c:a3:75:5c:7d:81:29:4d:a1:9f:26:41:4d:76:2e:b9:1d:
         2d:e5:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:39 2026 by rpki-client