Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/f_AXy6HM33yVMmyz9QDqbdLdW_8.asa
File:                     f_AXy6HM33yVMmyz9QDqbdLdW_8.asa (raw, json)
Hash identifier:          pyQ493ykYstu9NwGMdlppPfCnS0N9Z2WTZF6pCnIvCE=
Subject key identifier:   7F:F0:17:CB:A1:CC:DF:7C:95:32:6C:B3:F5:00:EA:6D:D2:DD:5B:FF
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       019FB7B2C9B85D5DE16D5263BFC40E47EB38
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/f_AXy6HM33yVMmyz9QDqbdLdW_8.asa
Signing time:             Fri 31 Jul 2026 10:22:55 +0000
ASPA not before:          Fri 31 Jul 2026 10:22:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200303
Providers:                AS: 6204
                          AS: 20473
                          AS: 24940
                          AS: 29691
                          AS: 30823
                          AS: 48314
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b7:b2:c9:b8:5d:5d:e1:6d:52:63:bf:c4:0e:47:eb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Jul 31 10:22:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ff017cba1ccdf7c95326cb3f500ea6dd2dd5bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:55:1d:46:d9:8e:e9:63:95:08:db:4e:58:52:
                    69:4b:9a:3b:ff:d6:e6:a3:2a:c1:3c:7e:ae:28:5e:
                    03:89:3a:cb:c4:2f:a4:69:64:f4:e3:79:3c:5a:c2:
                    cb:5c:5e:7c:d7:ef:74:76:a0:39:0e:ae:05:c0:c3:
                    9e:85:a4:b5:49:46:23:01:32:3f:14:87:92:eb:5b:
                    e8:87:d1:1a:fb:a8:a1:4b:da:66:76:1e:07:77:43:
                    e0:ee:e5:e2:d7:5d:45:25:89:b4:56:e2:32:be:38:
                    cd:e9:4f:17:d0:dd:d5:70:45:99:99:53:57:70:0e:
                    c3:30:33:57:29:5a:46:80:1c:e4:61:4e:ec:94:bc:
                    99:87:16:9e:9e:32:20:8c:1b:25:5e:3c:fc:12:1d:
                    a5:88:e8:5a:ea:15:ca:fb:91:ce:56:38:2a:8b:d5:
                    d0:3f:7d:70:48:49:df:95:86:fd:c2:ba:cc:4d:01:
                    d4:6e:8d:15:25:43:20:be:02:8d:42:38:1a:2b:1f:
                    09:c4:34:09:8a:60:03:71:ec:3f:96:d5:28:06:42:
                    9c:33:89:7e:82:9e:8e:ba:05:0c:63:c9:47:df:35:
                    e8:4e:fc:da:b9:11:34:ed:ab:b0:90:2f:bf:f1:68:
                    d2:cd:b1:40:b6:4f:07:2c:4f:0e:46:27:25:f3:fe:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:17:CB:A1:CC:DF:7C:95:32:6C:B3:F5:00:EA:6D:D2:DD:5B:FF
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/f_AXy6HM33yVMmyz9QDqbdLdW_8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200303

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:fa:7d:77:35:56:2f:b2:2d:28:cc:de:19:19:c7:1e:5e:
         84:26:03:2d:0c:31:2c:66:4a:20:7d:c4:3c:d2:92:cb:f7:8e:
         3b:8f:fa:0a:ab:15:b6:48:56:dd:48:c5:00:31:f3:b7:36:60:
         01:f6:2d:b5:2b:ea:e4:0f:05:55:ed:31:80:d9:1f:41:ae:66:
         15:84:d0:ce:e6:ce:c3:16:89:f3:7b:15:99:45:bc:d5:3e:c6:
         2d:74:4d:da:60:68:51:32:43:72:dd:ac:64:48:18:43:ec:b9:
         62:be:de:af:f1:bd:25:34:a9:bc:ab:80:e2:f0:99:e1:f6:af:
         b9:27:51:99:3f:d4:67:1e:2b:6c:68:54:37:90:fe:58:fb:cb:
         30:81:82:c4:6e:b0:c5:80:89:45:87:86:2c:d8:c9:bc:6c:fc:
         af:1a:5a:c7:6d:9c:79:94:df:66:16:ae:13:f0:6e:ca:5d:2a:
         2f:20:96:92:84:4e:3e:bd:26:0d:7a:b9:b0:c5:4e:7e:b1:c9:
         43:e8:cd:97:5c:94:b8:c1:41:b6:4a:b8:e4:9d:c5:6a:5c:65:
         fa:17:f9:b9:54:2e:67:54:65:1e:84:01:6c:8b:6e:27:78:1a:
         5a:02:1d:ef:96:11:ae:74:1f:8a:7c:7e:86:85:3e:e2:4f:10:
         fd:f1:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:49 2026 by rpki-client