Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/hqhEDfvGTPpC4vc1dRLuOoc_JgY.asa
File:                     hqhEDfvGTPpC4vc1dRLuOoc_JgY.asa (raw, json)
Hash identifier:          U0Kcr68WbCAsviH0TrGgLTqQV5LWsiFmpyvNjazcjqY=
Subject key identifier:   86:A8:44:0D:FB:C6:4C:FA:42:E2:F7:35:75:12:EE:3A:87:3F:26:06
Certificate issuer:       /CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Certificate serial:       01A17CA0591F8E926D90AB8B24319C7EEDDB
Authority key identifier: 8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/hqhEDfvGTPpC4vc1dRLuOoc_JgY.asa
Signing time:             Tue 27 Oct 2026 09:10:45 +0000
ASPA not before:          Tue 27 Oct 2026 09:10:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218479
Providers:                AS: 6939
                          AS: 61049
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:a0:59:1f:8e:92:6d:90:ab:8b:24:31:9c:7e:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
        Validity
            Not Before: Oct 27 09:10:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=86a8440dfbc64cfa42e2f7357512ee3a873f2606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f0:74:8b:df:47:72:d9:84:34:9c:96:69:51:
                    e5:78:a5:e3:75:7f:16:c7:dc:bd:6d:78:bf:9a:3f:
                    3c:c0:1f:a1:bf:90:5d:a7:78:40:7c:5c:49:98:e0:
                    59:09:11:23:25:06:1a:e5:72:45:14:54:55:b0:f4:
                    ed:71:e3:35:f4:89:dc:3e:d4:df:84:77:29:23:6a:
                    34:89:64:36:dd:02:ae:8c:19:b6:9f:ff:55:88:1f:
                    33:98:60:0f:4b:1e:aa:d1:eb:59:f9:83:1e:be:32:
                    d8:f2:42:26:80:6c:77:2e:da:eb:fb:4b:d1:89:8f:
                    64:3e:19:fe:d1:32:a5:f1:50:5e:dd:f8:66:a0:c6:
                    5f:34:6f:99:fd:0b:cc:d8:20:b9:dd:46:15:3f:15:
                    8f:90:56:d5:53:58:42:f6:b0:26:2b:bd:6b:40:8c:
                    34:aa:50:9d:db:8d:8c:04:1e:3f:ed:6e:95:27:39:
                    4f:6f:d6:c0:8d:8c:5e:ce:8d:db:62:2f:e1:83:ec:
                    8b:31:5c:bd:1c:af:6e:63:8d:d0:1d:32:fe:24:72:
                    fa:90:b4:3f:c1:88:61:31:b9:5b:f6:3d:65:fb:41:
                    a6:7a:ca:50:ce:38:5e:d1:e6:8c:fc:10:8a:eb:b9:
                    95:03:ec:8a:1f:6b:9c:e5:a1:19:4f:27:81:46:94:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:44:0D:FB:C6:4C:FA:42:E2:F7:35:75:12:EE:3A:87:3F:26:06
            X509v3 Authority Key Identifier:
                keyid:8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/hqhEDfvGTPpC4vc1dRLuOoc_JgY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218479

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:11:4c:26:7c:e1:eb:e4:50:46:ed:87:30:55:84:1b:c5:
         e8:a8:40:ee:39:86:58:6b:41:a1:69:a9:2d:41:de:7b:40:97:
         22:09:eb:06:ac:83:c6:7b:1a:52:56:20:fa:d1:52:ca:8f:b2:
         26:2f:c7:e9:a0:78:4c:81:9b:b4:c0:62:95:f6:98:aa:26:a4:
         eb:24:a6:7c:3a:fc:dd:83:25:cf:81:63:f4:cd:df:7c:c8:43:
         d0:27:e2:86:d5:a4:b8:ba:f7:af:02:f4:ee:5a:47:c0:da:3e:
         7b:30:28:9e:f0:24:58:02:55:70:e3:ae:e1:3c:ec:00:7e:e2:
         2e:a2:4d:53:22:50:32:10:30:ef:73:c2:0b:6a:fa:fb:64:5a:
         fe:bd:78:ed:2d:59:ef:df:fe:ac:7e:45:8e:a3:34:e5:53:9c:
         b3:43:3c:d9:0a:34:9c:2c:1a:e2:7f:18:72:09:e6:44:20:83:
         3e:9d:88:ac:27:01:cf:c9:4a:c1:09:bb:92:55:14:aa:2f:28:
         37:29:81:4e:d7:46:51:ad:1b:42:9e:97:0e:6e:3c:c0:7b:ae:
         b9:6c:ab:cc:bc:7e:2e:75:ab:35:71:b5:01:63:7a:d8:4d:38:
         6d:63:22:e3:d3:4e:97:09:bd:61:d1:33:57:dc:98:6d:be:56:
         fb:6d:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:59 2026 by rpki-client