Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/GNtJnUYKkvUG0vQvp0s38o620-k.asa
File:                     GNtJnUYKkvUG0vQvp0s38o620-k.asa (raw, json)
Hash identifier:          xY+2n0Vs5E7zC3FkgRzrAntWns61U0pP0bTVQzH5z6c=
Subject key identifier:   18:DB:49:9D:46:0A:92:F5:06:D2:F4:2F:A7:4B:37:F2:8E:B6:D3:E9
Certificate issuer:       /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial:       019E1F6C11CD22066EAE1DCD39A2710F5B23
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/GNtJnUYKkvUG0vQvp0s38o620-k.asa
Signing time:             Wed 13 May 2026 03:40:36 +0000
ASPA not before:          Wed 13 May 2026 03:40:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213653
Providers:                AS: 6762
                          AS: 31263
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:6c:11:cd:22:06:6e:ae:1d:cd:39:a2:71:0f:5b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
        Validity
            Not Before: May 13 03:40:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18db499d460a92f506d2f42fa74b37f28eb6d3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:1d:80:a8:8b:0f:d7:68:6e:4c:b9:42:20:
                    47:cb:55:4b:ed:7a:b4:66:47:c2:6c:00:a5:ed:c2:
                    f4:11:86:51:4d:19:dc:e2:f3:8f:df:05:38:02:b2:
                    7f:21:9f:18:59:9c:fc:27:6d:5c:9f:46:4f:be:33:
                    45:f3:d0:fc:46:62:53:c8:cd:ee:3c:76:b3:09:54:
                    2b:4e:e2:77:2f:9a:ed:bb:30:8c:4f:bc:aa:13:bf:
                    8a:39:6b:dc:64:5c:f1:10:9c:5a:71:60:c1:b6:12:
                    3c:17:78:10:c1:29:52:99:e0:50:a5:e9:27:78:9c:
                    b5:44:c4:e8:39:ca:38:7a:7a:98:27:d0:ef:7e:0d:
                    3a:64:19:15:1d:00:d5:7d:4c:fc:c3:ef:33:1e:27:
                    cf:84:47:a5:e2:78:b4:fa:ec:be:8f:57:f4:54:1a:
                    1b:e3:b2:f4:53:16:03:f9:c1:fa:cd:0d:82:76:91:
                    bd:70:dc:ca:f2:ee:41:73:60:8f:ea:a6:0d:48:93:
                    d6:f1:8f:51:9c:52:6a:1e:1b:b3:1c:6e:bb:40:1a:
                    4b:15:71:7d:3b:fa:2d:79:31:80:b2:af:43:12:1e:
                    94:8f:02:d6:07:f0:18:58:e0:e2:5a:50:3e:69:ea:
                    49:2e:e1:1d:fd:49:78:d8:b8:d3:4a:98:af:82:ac:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:49:9D:46:0A:92:F5:06:D2:F4:2F:A7:4B:37:F2:8E:B6:D3:E9
            X509v3 Authority Key Identifier:
                keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/GNtJnUYKkvUG0vQvp0s38o620-k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213653

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:79:b8:98:62:76:2e:24:7b:90:18:11:e2:92:9c:a1:f5:
         fd:e2:8b:24:a2:22:80:e7:cb:76:6a:f8:78:65:4b:25:8e:1e:
         f1:21:32:48:6c:82:a1:84:0c:03:97:63:51:2a:41:76:45:35:
         dc:15:4b:89:a5:15:fa:5c:a0:1d:cd:ef:48:b2:41:f9:ca:65:
         bf:cf:5f:67:29:70:1d:cf:a3:29:e4:d4:4b:71:08:8d:92:7f:
         dd:09:34:be:43:47:0e:91:5d:f2:a9:20:ca:0c:b6:83:f0:4b:
         88:91:61:13:b6:0b:76:de:ff:8b:c4:a2:fb:f3:ed:ed:23:72:
         e4:a9:25:40:10:44:0e:76:c6:e1:7e:55:14:97:02:1f:6d:cd:
         e4:6c:f9:4b:10:59:b1:c7:32:86:fd:9a:41:92:f1:ad:8e:31:
         7e:f0:9f:8d:8d:14:a4:0b:14:21:37:26:d4:b9:89:ad:d3:23:
         e4:b7:68:a3:aa:98:73:2b:52:97:a5:ee:62:17:7e:02:04:13:
         dd:3d:01:0a:6c:b7:8e:a9:a2:0c:af:6c:52:67:4d:8f:ec:20:
         fd:b1:60:a7:58:49:cd:de:5d:5b:da:a0:91:38:c3:01:05:91:
         71:4b:24:0c:26:8e:2f:f3:86:31:0c:9e:e1:97:d1:a5:f9:27:
         2b:fd:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:47 2026 by rpki-client