Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/yJaiu3jP-3AJcSc0P5L3DrDi5Fo.asa
File:                     yJaiu3jP-3AJcSc0P5L3DrDi5Fo.asa (raw, json)
Hash identifier:          W2QxxGH2ilVjGMeO0BsnYRQB6258UDxFPPNHiV1kEsY=
Subject key identifier:   C8:96:A2:BB:78:CF:FB:70:09:71:27:34:3F:92:F7:0E:B0:E2:E4:5A
Certificate issuer:       /CN=6aed7092329439aa8bb48eb76ccc0b5b9fd618b5
Certificate serial:       01A1113A2617A714BD1554EFECF34F16E00C
Authority key identifier: 6A:ED:70:92:32:94:39:AA:8B:B4:8E:B7:6C:CC:0B:5B:9F:D6:18:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au1wkjKUOaqLtI63bMwLW5_WGLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/yJaiu3jP-3AJcSc0P5L3DrDi5Fo.asa
Signing time:             Tue 06 Oct 2026 12:39:45 +0000
ASPA not before:          Tue 06 Oct 2026 12:39:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197658
Providers:                AS: 6939
                          AS: 11967
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/au1wkjKUOaqLtI63bMwLW5_WGLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/au1wkjKUOaqLtI63bMwLW5_WGLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au1wkjKUOaqLtI63bMwLW5_WGLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:3a:26:17:a7:14:bd:15:54:ef:ec:f3:4f:16:e0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aed7092329439aa8bb48eb76ccc0b5b9fd618b5
        Validity
            Not Before: Oct  6 12:39:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c896a2bb78cffb70097127343f92f70eb0e2e45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:c6:6d:42:8a:6a:4d:6e:d6:a3:8e:a3:0e:
                    96:8a:80:08:35:53:47:65:88:29:bb:38:a8:fe:38:
                    a9:78:89:6c:da:c3:58:35:32:b4:bc:50:37:17:c2:
                    96:c2:aa:20:ee:54:7f:03:b6:3b:ff:a3:9c:73:16:
                    3f:a3:ea:7d:6f:d3:93:0f:22:a0:8a:18:1f:0b:a0:
                    e7:42:96:24:95:e1:f9:3a:47:2e:3d:1c:fe:d4:38:
                    43:8f:fa:4d:e4:69:51:57:84:c5:f9:ef:f2:95:6b:
                    c7:4c:b7:17:32:d2:c8:6f:90:41:aa:ac:32:d3:0d:
                    e5:b0:0e:36:88:eb:c5:14:1a:8d:b8:dd:98:c5:8b:
                    5b:38:36:a5:76:b5:76:05:42:58:ea:df:32:7c:d4:
                    4a:20:f6:c3:d3:bb:99:c5:fa:53:85:a1:2a:45:b0:
                    27:11:82:1e:0b:30:70:26:23:1f:1e:75:2d:ca:f2:
                    5a:78:61:8b:10:65:51:a5:c8:16:39:37:4c:18:18:
                    ff:76:cb:fa:4b:08:15:0c:a6:73:9a:10:0f:67:58:
                    d3:b8:fa:77:5b:2b:74:ae:32:85:6a:a5:cf:95:4b:
                    43:46:c3:77:90:3b:65:66:27:ba:9c:12:8c:f2:95:
                    3f:5c:74:e1:e5:c3:68:d8:7c:1b:e3:9f:41:77:16:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:A2:BB:78:CF:FB:70:09:71:27:34:3F:92:F7:0E:B0:E2:E4:5A
            X509v3 Authority Key Identifier:
                keyid:6A:ED:70:92:32:94:39:AA:8B:B4:8E:B7:6C:CC:0B:5B:9F:D6:18:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au1wkjKUOaqLtI63bMwLW5_WGLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/yJaiu3jP-3AJcSc0P5L3DrDi5Fo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5821ff-7c82-4f3b-a606-723da2df5f08/1/au1wkjKUOaqLtI63bMwLW5_WGLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197658

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:8d:c4:61:ca:e7:b0:84:30:8d:57:9e:8e:b6:fb:62:4d:
         8d:f1:18:c0:48:0f:08:3e:16:3f:0c:8a:f7:43:b4:d9:dd:0e:
         e8:e6:f8:29:dd:5e:0e:ef:cd:d5:16:d1:57:7d:1c:d4:27:59:
         6c:01:2e:36:2c:93:ae:51:13:7f:14:8d:8e:6d:c1:30:46:2c:
         05:4f:96:63:e0:6d:b0:41:74:57:d8:45:e1:f9:33:a5:11:68:
         8f:30:65:e9:01:f9:1b:e0:53:c1:7e:cc:5d:43:2b:de:4a:f6:
         01:86:b2:cb:d2:90:56:e6:3b:03:d8:c0:b5:3b:5c:9a:2d:26:
         5f:09:91:a4:36:ee:8c:7f:c4:08:fb:ac:2a:db:6d:c1:2d:ef:
         4e:b6:82:05:9f:09:13:04:d5:49:b7:8d:3c:8a:8f:e3:71:3d:
         55:e3:1c:ea:4f:d2:9e:db:49:ec:c3:82:9c:23:40:21:18:c8:
         04:a9:97:40:4f:a6:87:d6:87:ed:eb:ee:07:21:f5:85:11:e6:
         21:69:05:1b:ac:04:84:b6:79:7c:21:e9:fd:ca:53:d5:47:b9:
         17:ae:a9:09:a9:5b:36:4f:d8:06:1c:f0:e4:57:99:12:04:d8:
         48:11:0e:22:71:6d:7f:ba:99:6e:8e:79:b7:40:9b:1e:2a:db:
         e9:0e:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:26 2026 by rpki-client