Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa
File:                     TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa (raw, json)
Hash identifier:          +3830vvKwcHUa2vT9pDGLDHYnV9hdJPoJoELEDn5XPg=
Subject key identifier:   4D:A3:D3:71:A4:07:B6:94:E2:2A:4E:8B:DC:B5:69:E4:11:4E:91:77
Certificate issuer:       /CN=626cda882f8a2d3a9466e7c004f54410ef83adab
Certificate serial:       019FD75B03E0BE65179D8000825031E712F4
Authority key identifier: 62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa
Signing time:             Thu 06 Aug 2026 13:54:54 +0000
ASPA not before:          Thu 06 Aug 2026 13:54:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207884
Providers:                AS: 34872
                          AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d7:5b:03:e0:be:65:17:9d:80:00:82:50:31:e7:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626cda882f8a2d3a9466e7c004f54410ef83adab
        Validity
            Not Before: Aug  6 13:54:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4da3d371a407b694e22a4e8bdcb569e4114e9177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:a5:f4:5a:22:d3:36:73:42:3d:b5:ac:80:
                    c9:8b:99:35:da:12:ac:a1:3e:6f:84:91:e8:fe:39:
                    da:a9:cd:bb:1e:ad:79:ec:1a:7f:b9:b0:c8:22:ad:
                    61:26:22:9f:c0:86:95:f8:4a:28:bc:3b:cc:03:70:
                    42:88:f5:7b:ca:51:14:22:5e:ea:7b:ab:d7:ca:94:
                    94:17:2e:06:93:ab:9e:3d:0a:c3:f6:41:78:ff:88:
                    db:5d:4f:84:4c:40:dc:1c:00:8f:61:03:89:a8:a7:
                    e5:fc:6b:46:a3:59:4d:37:15:9b:eb:8f:f4:7a:fc:
                    f8:7e:ab:da:6c:b6:54:39:bb:a7:e2:7f:c8:eb:77:
                    ed:05:91:9d:5d:6c:38:5c:7b:4c:e6:59:b5:69:e7:
                    45:79:52:75:4b:58:69:de:42:2c:1a:5e:c7:62:22:
                    88:4d:df:bf:63:19:89:8c:61:32:d0:00:24:e8:94:
                    01:ed:c0:82:d2:98:b0:0f:2f:c5:05:c3:ac:22:08:
                    55:2e:f9:06:ec:ee:81:7f:a1:44:28:92:82:27:44:
                    77:b9:12:68:f5:d7:7e:9d:a2:ca:ac:ea:20:61:15:
                    25:56:93:47:5b:d4:9b:de:8a:a7:f4:61:8a:18:1e:
                    43:7a:b4:be:53:52:d0:d3:1c:d4:75:f5:62:fc:f7:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:D3:71:A4:07:B6:94:E2:2A:4E:8B:DC:B5:69:E4:11:4E:91:77
            X509v3 Authority Key Identifier:
                keyid:62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207884

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:ec:af:04:f7:b0:77:bf:cd:74:c4:6e:26:4c:06:6c:4b:
         4e:65:ea:cc:7f:c4:30:bb:eb:f8:55:37:a8:13:e8:3c:a9:04:
         c3:54:fe:19:92:be:26:9a:0d:af:3f:1d:bc:88:6b:82:12:61:
         87:15:93:61:c0:52:02:01:9c:4b:cd:40:ab:7a:37:40:e8:76:
         a7:d2:cb:4c:ca:ba:48:92:cd:3d:7b:79:ef:8e:5e:84:d8:81:
         ca:fd:70:0f:64:10:ad:dd:47:5b:95:41:dc:ee:a2:f3:b4:e5:
         58:c7:b3:50:c8:b8:31:ed:09:26:db:9d:97:90:a7:f6:bd:8d:
         d2:b8:b9:e4:03:64:46:53:ce:ed:2f:ba:c2:6f:b4:93:95:ef:
         6d:51:ae:3a:ef:eb:5a:c3:3b:6d:fa:52:4f:a5:8d:b7:bb:48:
         29:73:86:78:c1:5f:17:22:9a:10:ac:01:8d:26:ef:c4:fc:75:
         16:a5:96:16:75:91:95:c4:ed:7a:26:26:e0:2d:e5:95:82:fd:
         e7:ed:77:a9:cf:b2:a8:18:c3:f4:e5:46:2b:e2:c0:07:d3:b8:
         c0:24:94:0f:e7:36:00:6e:4d:57:f6:b8:bd:8d:59:53:fb:33:
         6f:e2:1f:2e:1d:f9:27:e1:75:50:e1:cf:1e:97:d8:b9:3f:8d:
         53:8e:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:45 2026 by rpki-client