Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/GNHsD5ptA4ZO1monJLnCsTa_sts.asa
File:                     GNHsD5ptA4ZO1monJLnCsTa_sts.asa (raw, json)
Hash identifier:          IJrE3vEGeQi3Ft1aIglxvMy/zRpzhEAQxUcicklpGas=
Subject key identifier:   18:D1:EC:0F:9A:6D:03:86:4E:D6:6A:27:24:B9:C2:B1:36:BF:B2:DB
Certificate issuer:       /CN=8c6a7264830c70267a28545609dcca306ca9d874
Certificate serial:       01A12B8F038DD896EEED81BA0F76908A5187
Authority key identifier: 8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/GNHsD5ptA4ZO1monJLnCsTa_sts.asa
Signing time:             Sun 11 Oct 2026 15:22:35 +0000
ASPA not before:          Sun 11 Oct 2026 15:22:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218634
Providers:                AS: 8283
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:8f:03:8d:d8:96:ee:ed:81:ba:0f:76:90:8a:51:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6a7264830c70267a28545609dcca306ca9d874
        Validity
            Not Before: Oct 11 15:22:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18d1ec0f9a6d03864ed66a2724b9c2b136bfb2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:e2:e2:80:b8:d3:f8:1f:5b:b7:5e:f6:57:
                    06:14:6c:dd:c3:bd:5b:68:25:7b:0d:0a:95:96:c5:
                    00:15:13:99:dd:96:5a:69:55:c3:76:a6:08:27:57:
                    71:47:18:84:f2:67:a6:2b:c3:8f:65:0f:bf:2e:8c:
                    f2:d1:e5:82:b9:96:0d:82:56:64:ab:2e:22:8a:32:
                    7c:72:df:e3:a7:88:c3:8c:bc:4a:b1:0d:de:e1:67:
                    7a:43:84:d4:97:a1:59:4a:0c:3e:41:9f:90:af:49:
                    7c:5c:c4:bb:32:08:71:fb:41:7e:39:5d:bb:0c:0e:
                    59:94:10:68:17:7f:d0:25:82:7c:97:36:31:99:72:
                    f8:9f:5b:63:ba:e5:dc:9b:1d:53:3f:32:8f:ff:ba:
                    a2:35:ce:b1:2a:79:cb:a9:2d:2f:df:77:71:38:3f:
                    03:29:92:55:2d:85:3e:ef:d2:6e:88:a8:05:8e:4b:
                    83:9b:73:c5:8c:62:0b:74:b7:f8:27:d1:e5:73:bf:
                    b5:2e:78:89:47:08:e0:d6:87:c0:5c:43:a4:d7:2e:
                    0c:5c:20:a0:34:5a:28:fe:9a:09:0e:62:80:2a:37:
                    67:a0:2e:fd:b9:16:69:c1:69:9f:d3:65:35:f5:9c:
                    1e:0f:60:67:40:1c:ba:4a:63:57:ef:05:81:a8:78:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:EC:0F:9A:6D:03:86:4E:D6:6A:27:24:B9:C2:B1:36:BF:B2:DB
            X509v3 Authority Key Identifier:
                keyid:8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/GNHsD5ptA4ZO1monJLnCsTa_sts.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218634

    Signature Algorithm: sha256WithRSAEncryption
         66:65:60:20:86:bf:d1:d7:8e:1b:a0:52:81:dc:06:74:10:27:
         80:ea:a4:34:c4:6e:f5:14:aa:4a:12:fc:dd:3c:59:4d:6f:11:
         b6:bd:0f:dc:87:70:bd:a7:0a:5a:02:49:92:f4:1e:45:d7:d4:
         89:bb:f9:18:2e:0d:30:2b:cb:dd:4d:da:b3:be:29:7f:98:82:
         c1:2f:7f:10:48:06:7d:17:86:11:1e:82:69:09:25:b5:e3:85:
         8f:2e:23:5e:e9:f0:06:03:7a:76:5d:22:c7:39:6a:35:10:3e:
         84:12:03:8f:69:a3:8d:36:f2:3b:9e:7e:fb:9e:72:4b:3c:e2:
         2d:0f:36:07:5f:fe:f0:f8:82:7c:c3:cf:c8:38:a6:a9:22:82:
         cc:bb:d3:0d:77:1b:46:2e:ad:88:38:d9:8b:7c:15:92:bf:bb:
         7e:40:1e:a6:2d:78:09:e3:eb:8e:e8:15:b0:df:b3:67:50:b5:
         90:b8:cc:6d:da:18:51:3a:45:21:90:1b:d6:2c:9d:8f:0b:fa:
         cb:3e:7b:d9:34:b1:4d:77:ed:71:bd:c4:fe:9d:f9:97:b5:20:
         1a:4a:53:c1:e4:f8:82:bc:4b:ed:cf:11:13:ac:b5:8f:e3:05:
         95:07:0e:ef:fe:c4:b1:cc:7f:bd:99:e4:fb:7b:18:2c:f8:48:
         d1:67:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:04 2026 by rpki-client