Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/vjtYP20Yqev1tStVjTHVRJZH-E0.asa
File:                     vjtYP20Yqev1tStVjTHVRJZH-E0.asa (raw, json)
Hash identifier:          LEjWTEYIRnlre3EmIIZkUAvJ2uAAjJSCyy9cZG7c508=
Subject key identifier:   BE:3B:58:3F:6D:18:A9:EB:F5:B5:2B:55:8D:31:D5:44:96:47:F8:4D
Certificate issuer:       /CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
Certificate serial:       01A0BB9397F3DD92F895A005F24BFB2E1273
Authority key identifier: D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/vjtYP20Yqev1tStVjTHVRJZH-E0.asa
Signing time:             Sat 19 Sep 2026 21:30:07 +0000
ASPA not before:          Sat 19 Sep 2026 21:30:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218646
Providers:                AS: 201640
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bb:93:97:f3:dd:92:f8:95:a0:05:f2:4b:fb:2e:12:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94c6a0e216de1ba60b6e051ba1702678f6769a2
        Validity
            Not Before: Sep 19 21:30:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be3b583f6d18a9ebf5b52b558d31d5449647f84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:bc:5f:29:db:29:fb:1c:a9:7b:38:3d:38:
                    24:77:cb:22:3d:6d:2d:e5:79:08:ee:e4:8c:f6:76:
                    41:3e:b6:b1:16:da:e4:b4:55:b4:2a:ab:2b:2e:04:
                    79:d2:9b:62:20:a5:60:4d:c8:68:b0:cf:ae:50:a6:
                    0a:40:a1:d5:eb:57:0a:5c:d3:46:87:6f:78:ac:d5:
                    39:9b:d4:2d:fd:0f:d5:8a:b8:c5:0b:b4:e1:98:a9:
                    51:34:79:23:e6:ae:f1:de:21:f0:fd:4c:61:1d:7c:
                    aa:ef:8f:3c:6d:71:d5:06:79:fa:17:99:c6:06:67:
                    50:e7:bd:8d:06:b0:60:58:d6:d4:33:8a:3b:76:b8:
                    2e:17:5c:37:c2:3b:1d:81:1f:33:db:42:e7:3c:cf:
                    fd:5a:bf:b0:3d:94:87:9f:58:eb:a2:2e:ca:69:fc:
                    aa:4b:f0:f1:33:80:41:bb:11:bc:8e:5e:42:86:15:
                    61:15:0b:99:ab:0e:6b:29:f2:ee:12:7e:f3:53:f5:
                    90:c4:d9:a5:91:3a:de:84:d8:6b:87:9f:06:19:5a:
                    47:fa:dc:69:62:2c:2a:33:4e:f4:0f:bd:07:05:01:
                    57:95:7b:18:9d:23:87:b6:9d:ca:d6:a4:20:a4:49:
                    08:6c:b7:72:fe:50:b4:5a:86:d4:12:5d:a9:cf:1c:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:58:3F:6D:18:A9:EB:F5:B5:2B:55:8D:31:D5:44:96:47:F8:4D
            X509v3 Authority Key Identifier:
                keyid:D9:4C:6A:0E:21:6D:E1:BA:60:B6:E0:51:BA:17:02:67:8F:67:69:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UxqDiFt4bpgtuBRuhcCZ49naaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/vjtYP20Yqev1tStVjTHVRJZH-E0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5b6335-faac-4293-a27c-97a4b28dca8b/1/2UxqDiFt4bpgtuBRuhcCZ49naaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218646

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:69:87:c4:0d:3b:47:64:bf:6c:9d:96:a6:3f:50:8e:f8:
         11:6b:f2:45:23:e5:72:a9:87:57:df:ee:40:4f:13:b7:39:29:
         09:39:c9:58:13:f0:d9:c1:9b:91:d1:9a:3c:a5:38:e8:74:49:
         7e:57:fe:12:ce:6e:ab:06:db:0c:70:aa:00:26:cc:5f:71:d3:
         8a:0e:84:f0:69:80:53:53:09:3b:7f:91:ca:6b:b5:6a:5f:36:
         45:63:b3:19:4a:58:f9:4c:bb:49:7d:6e:92:23:3b:e5:b5:31:
         21:7c:65:da:3c:6b:40:bb:27:04:8a:2f:ad:3b:a0:c9:8c:d0:
         e2:a8:fe:21:5f:ce:a9:6d:08:ab:18:bc:b5:41:dd:df:46:b4:
         57:bd:2a:a3:86:aa:ef:f8:eb:22:27:49:fa:28:d5:3b:61:d3:
         a3:ae:fa:70:63:38:e5:ea:db:9f:7f:9a:2c:4b:05:81:46:46:
         50:50:e8:aa:f2:31:9d:bd:ea:d6:bc:33:e0:e1:95:41:7a:c4:
         17:15:9f:fd:a4:aa:7b:a4:84:d7:f0:47:93:aa:34:a3:31:40:
         31:f5:03:8a:41:18:3a:45:e9:82:ce:e9:8b:11:07:e1:bd:20:
         b7:70:ed:b3:01:1e:fc:59:a4:45:d1:40:b1:61:41:83:c4:a8:
         af:57:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:03:49 2026 by rpki-client