Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KISMGvfigyXIh4YXo7sPXwQIHO0.asa
File:                     KISMGvfigyXIh4YXo7sPXwQIHO0.asa (raw, json)
Hash identifier:          cen5xYbD83N6WxoeHm7YVnvogV5B2+/8v4VEwr9kzTY=
Subject key identifier:   28:84:8C:1A:F7:E2:83:25:C8:87:86:17:A3:BB:0F:5F:04:08:1C:ED
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       01A1C2DECDA45E34F5653D5E1CF7B9247756
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KISMGvfigyXIh4YXo7sPXwQIHO0.asa
Signing time:             Tue 10 Nov 2026 00:32:23 +0000
ASPA not before:          Tue 10 Nov 2026 00:32:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212972
Providers:                AS: 47160
                          AS: 62000
                          AS: 62443
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:de:cd:a4:5e:34:f5:65:3d:5e:1c:f7:b9:24:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Nov 10 00:32:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28848c1af7e28325c8878617a3bb0f5f04081ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:67:ab:c3:79:19:c4:b2:2d:9e:9e:16:41:
                    6d:8f:71:be:26:09:fe:95:82:bc:b9:65:00:b2:b3:
                    8b:8a:2b:8c:cf:84:68:9d:ed:46:0c:d2:17:58:0c:
                    55:fb:c2:fb:14:a1:68:c8:1d:7d:e2:40:09:f1:6a:
                    65:d7:b2:21:df:d4:c4:9e:70:2d:04:ba:af:62:e6:
                    aa:62:7d:ef:16:42:8f:c0:7e:88:92:08:9e:2f:e2:
                    87:13:12:3c:f6:04:21:80:52:9b:75:b7:26:c2:57:
                    ad:b1:fa:de:5e:8b:ad:1a:b8:7a:79:25:84:6d:a1:
                    01:dd:1b:51:35:1f:4c:87:b7:74:98:f3:82:7d:20:
                    bb:18:44:36:b2:46:47:90:83:a9:f4:b3:34:44:7a:
                    4d:d0:1f:ff:f9:dc:a1:c5:1c:4c:ae:ed:d3:fa:44:
                    8f:8f:9a:13:f5:9a:e8:d9:6c:b2:04:87:0b:a2:7b:
                    4e:1e:a4:5f:28:6d:7d:59:f9:d5:cc:b2:47:4b:c4:
                    4d:36:54:1b:ac:b6:cd:3b:19:af:65:3a:e8:f3:db:
                    6e:4d:4a:7b:17:ae:2c:4a:c9:77:c0:1b:05:22:72:
                    95:b4:1e:fa:b5:c1:16:c1:13:c5:f3:19:53:8b:77:
                    7d:de:23:66:bb:d4:ff:26:c9:72:9c:ea:1c:77:05:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:8C:1A:F7:E2:83:25:C8:87:86:17:A3:BB:0F:5F:04:08:1C:ED
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KISMGvfigyXIh4YXo7sPXwQIHO0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212972

    Signature Algorithm: sha256WithRSAEncryption
         8c:fc:0b:06:ff:7f:1c:53:25:0c:ad:6b:c8:3d:03:3b:ca:f5:
         07:cb:47:f7:85:92:b0:b3:8b:c1:36:38:3f:73:24:2d:21:0a:
         b4:1c:f6:48:8b:42:6f:9d:48:97:a2:a7:ec:a1:3c:c7:5e:7c:
         9e:9d:57:6e:4f:84:79:b3:66:73:a8:46:91:eb:58:03:20:6e:
         56:c9:cc:c7:b5:b3:ed:e7:47:70:64:6a:68:33:9b:c1:43:24:
         77:f2:59:47:ea:bd:a1:2f:98:e6:d2:fa:0a:65:c2:3f:6d:31:
         91:1d:aa:dd:67:4e:36:3c:cf:12:05:67:24:26:63:57:7d:47:
         22:1b:e6:59:83:8c:ef:24:16:83:a9:af:42:5b:7f:00:30:1e:
         79:a3:40:bd:c9:77:31:93:63:33:5c:e2:b6:23:07:8f:71:f7:
         b8:ef:8c:69:d1:a8:b5:24:f0:3e:7e:90:10:a1:26:5e:f9:de:
         6b:08:4c:14:b1:bc:ca:ff:cb:ee:1e:26:0c:72:51:8c:e8:bb:
         ca:2a:e5:55:a8:8c:b6:1c:44:63:78:0c:db:72:f6:06:8d:21:
         e4:b7:d8:e4:79:0a:57:eb:e8:2e:11:7b:87:e8:e3:59:45:1f:
         bc:fb:a9:df:c0:a1:f3:0f:ff:f7:39:c0:1a:c1:e5:9b:bc:8e:
         02:dd:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:18:03 2026 by rpki-client