Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/DKOFsgb7qfiMFr6u1pXtWkG08Mo.asa
File:                     DKOFsgb7qfiMFr6u1pXtWkG08Mo.asa (raw, json)
Hash identifier:          MYuauknUj8ILkdpPYSvz2pmzvLoBzkJyYwifgZnzKlU=
Subject key identifier:   0C:A3:85:B2:06:FB:A9:F8:8C:16:BE:AE:D6:95:ED:5A:41:B4:F0:CA
Certificate issuer:       /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial:       01A0C48812BEFB0D42CF771E0A1C3DE13A45
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/DKOFsgb7qfiMFr6u1pXtWkG08Mo.asa
Signing time:             Mon 21 Sep 2026 15:14:07 +0000
ASPA not before:          Mon 21 Sep 2026 15:14:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219378
Providers:                AS: 6939
                          AS: 14618
                          AS: 16509
                          AS: 40792
                          AS: 44324
                          AS: 47272
                          AS: 204211
                          AS: 216211
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:88:12:be:fb:0d:42:cf:77:1e:0a:1c:3d:e1:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
        Validity
            Not Before: Sep 21 15:14:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ca385b206fba9f88c16beaed695ed5a41b4f0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:d9:15:6c:39:74:41:3c:43:25:cf:89:a6:
                    f2:59:20:80:c3:37:2f:6d:36:4c:d3:c8:d8:c3:52:
                    7f:57:fc:19:00:24:25:be:f7:18:59:29:71:4b:f5:
                    f1:3d:af:dd:09:20:c8:4e:d1:68:d4:83:dc:bc:c7:
                    8e:f5:e7:81:ab:03:e3:42:58:8c:15:61:2b:20:53:
                    e9:c8:a0:d5:8d:28:f1:16:d7:b7:fc:af:6f:5a:63:
                    be:bf:e7:a2:26:40:c4:73:14:e0:6e:31:7e:8b:c9:
                    2f:ef:41:81:06:72:9e:72:54:80:ad:d7:b8:6f:db:
                    0d:f5:62:59:48:54:9a:65:89:b1:43:38:8c:16:1f:
                    73:94:bd:8e:a5:e2:22:1b:f5:98:9d:bf:ad:08:19:
                    5e:46:a6:c0:96:e4:d7:72:3a:10:98:c7:4e:3e:81:
                    ff:ac:36:38:33:76:6f:20:d7:72:6d:c7:04:48:29:
                    6d:1a:be:e8:05:08:a3:ca:fb:9d:4c:3f:d0:ee:47:
                    7d:5b:a7:82:c9:b1:65:ac:9b:5d:18:25:fd:1c:e4:
                    70:4d:0a:84:2c:2a:8e:2b:55:6d:94:9a:1d:b7:d5:
                    2c:ab:a3:aa:cb:5e:81:fc:e4:63:63:a2:88:03:a2:
                    f7:f6:e0:f5:03:76:da:27:3f:2f:fb:09:c2:ee:aa:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:85:B2:06:FB:A9:F8:8C:16:BE:AE:D6:95:ED:5A:41:B4:F0:CA
            X509v3 Authority Key Identifier:
                keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/DKOFsgb7qfiMFr6u1pXtWkG08Mo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219378

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:28:3d:8a:6d:97:34:36:08:77:ff:00:d9:41:b5:e2:2e:
         c1:f8:9d:6d:00:38:6a:2a:18:29:e4:6f:39:b5:6c:21:b8:b8:
         38:cc:78:d9:fb:f9:28:6b:4c:54:3f:50:3d:fe:93:2d:11:9d:
         e9:88:55:82:54:60:43:88:13:bb:b2:ae:fa:23:04:ad:7a:8b:
         84:e2:71:c5:15:ec:77:ee:8b:3b:d7:91:b3:9b:05:ab:a7:31:
         5e:e6:45:2a:03:87:9f:cf:27:53:dd:a7:2f:38:a4:ba:53:28:
         3b:91:ac:b7:b4:67:43:cb:05:8e:8e:e3:ad:f2:71:cd:2b:42:
         f5:69:43:60:cc:94:58:1f:4d:8d:30:17:40:ad:c0:da:e8:d7:
         03:42:bf:b9:97:ab:aa:5e:bf:c6:90:dd:2d:78:0d:14:cc:c2:
         44:28:eb:1c:35:99:3d:42:49:49:b6:4c:e8:61:21:00:84:84:
         0b:bc:68:8a:ae:61:33:75:d0:7b:9e:0c:41:c0:0a:6b:af:36:
         99:ef:9f:d4:3c:53:ee:e6:4c:2f:a6:62:12:d7:b7:24:51:2e:
         13:8c:66:1d:db:d7:6d:5e:64:0f:80:80:60:e7:7c:39:4e:72:
         6a:af:eb:65:37:48:17:d0:ff:b3:6f:81:87:ab:b9:78:c6:c7:
         48:fc:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:47:04 2026 by rpki-client