Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/GedWB_Uil3va8GUyNwizKD56T1Q.asa
File:                     GedWB_Uil3va8GUyNwizKD56T1Q.asa (raw, json)
Hash identifier:          mwof1jQYHBPRQ0wIav50LFv+eFSM7q3DXm2GNFD4CFs=
Subject key identifier:   19:E7:56:07:F5:22:97:7B:DA:F0:65:32:37:08:B3:28:3E:7A:4F:54
Certificate issuer:       /CN=7c51ec872486cd1167854b9f4e6535431a1af93e
Certificate serial:       01A15537AB3D1446B597A9D8F9FE72C19AC6
Authority key identifier: 7C:51:EC:87:24:86:CD:11:67:85:4B:9F:4E:65:35:43:1A:1A:F9:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/GedWB_Uil3va8GUyNwizKD56T1Q.asa
Signing time:             Mon 19 Oct 2026 17:31:13 +0000
ASPA not before:          Mon 19 Oct 2026 17:31:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219158
Providers:                AS: 209533
                          AS: 209735
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:37:ab:3d:14:46:b5:97:a9:d8:f9:fe:72:c1:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c51ec872486cd1167854b9f4e6535431a1af93e
        Validity
            Not Before: Oct 19 17:31:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19e75607f522977bdaf065323708b3283e7a4f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:80:6c:5f:0b:db:ac:28:c7:fb:f0:a7:1a:
                    af:a7:ed:bf:cc:77:45:d2:d0:d8:57:df:e4:93:4f:
                    3c:85:a0:94:ec:f2:a6:7b:cf:9c:06:93:8b:95:d1:
                    fc:63:82:7a:59:ec:e8:da:ea:d6:bb:31:24:13:62:
                    b6:52:f1:0e:a4:f9:2a:fd:82:0b:e3:e7:58:c6:0e:
                    ab:1e:bb:dc:8c:8a:80:b2:58:0d:81:9f:e5:2d:81:
                    1c:3b:cb:24:64:0e:8f:87:81:27:85:4d:ea:3c:e4:
                    1e:ef:4e:4c:da:39:aa:ff:66:6e:2f:f3:9d:2a:54:
                    12:2c:c0:d5:ca:d4:ba:de:ac:d3:b7:15:a7:81:a3:
                    eb:51:19:b1:40:e6:e1:66:b7:8f:83:21:6e:6b:d1:
                    e4:1a:50:27:67:43:ac:f4:db:56:d2:d8:12:3a:c7:
                    c7:b1:17:aa:dc:d8:15:97:78:d8:94:9c:f5:b4:c5:
                    1d:5a:c1:29:f5:e7:83:69:ce:22:8e:20:f0:89:93:
                    b6:4d:4a:eb:b1:8f:ef:c0:65:b4:59:47:b3:3d:e0:
                    bf:c7:56:1f:eb:a7:3c:3d:49:64:c4:db:f2:ca:c9:
                    53:6f:d2:dc:ba:4d:c2:11:5d:69:97:b7:22:28:8e:
                    ed:ea:66:9f:f8:9b:da:c5:20:8d:4a:d5:ae:64:98:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:56:07:F5:22:97:7B:DA:F0:65:32:37:08:B3:28:3E:7A:4F:54
            X509v3 Authority Key Identifier:
                keyid:7C:51:EC:87:24:86:CD:11:67:85:4B:9F:4E:65:35:43:1A:1A:F9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/GedWB_Uil3va8GUyNwizKD56T1Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219158

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:90:8a:a4:38:3d:f0:c2:88:6f:d6:da:20:fb:d3:90:17:
         9b:d4:cb:5a:d4:be:dd:98:69:12:f3:ec:d3:d6:a3:1b:ff:a1:
         06:af:16:5f:8a:ba:2e:7a:82:00:f6:91:0f:29:51:15:79:b0:
         e9:7c:26:e2:ac:df:37:bc:02:70:b3:cd:a2:6d:d4:70:45:df:
         ca:5c:62:97:af:ca:3d:b8:2d:a2:fd:4b:c3:d8:93:07:f5:96:
         1d:96:00:36:f8:3b:b3:10:bd:cb:e0:46:01:ce:12:f5:b3:d0:
         5e:03:8b:67:d9:d7:d8:82:66:04:0b:8e:d4:75:c7:d8:13:8c:
         28:b6:91:cc:b3:5f:d7:f9:b5:28:29:cc:c5:19:f0:b6:55:8f:
         3c:ed:e2:13:a2:de:6a:77:2c:b6:71:f2:39:38:7b:a9:76:9a:
         1b:3a:24:74:ee:33:be:c9:09:c1:d2:16:8d:97:8e:8d:07:df:
         29:88:9d:fd:9c:1d:cc:d3:22:e7:3e:86:db:18:40:58:7d:4f:
         39:b5:75:74:09:d2:92:47:65:14:39:4c:a8:9a:4c:1b:0b:28:
         86:cf:5a:a5:92:01:59:87:d3:d9:71:86:58:65:c6:48:e6:43:
         9d:13:1e:26:17:b9:52:d7:3c:c8:cc:99:9a:34:b3:66:72:12:
         e4:fe:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:57:56 2026 by rpki-client