Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/TfZxrs2wY-4-7vyUsFRAexD6Ue0.asa
File:                     TfZxrs2wY-4-7vyUsFRAexD6Ue0.asa (raw, json)
Hash identifier:          HPv+8LAjq2rc2rS1ARzBvfwsNeFCoGt8XANFBJiM+r4=
Subject key identifier:   4D:F6:71:AE:CD:B0:63:EE:3E:EE:FC:94:B0:54:40:7B:10:FA:51:ED
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019EE143A87FD0C3ED4B2533B3CFD189C606
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/TfZxrs2wY-4-7vyUsFRAexD6Ue0.asa
Signing time:             Fri 19 Jun 2026 19:02:48 +0000
ASPA not before:          Fri 19 Jun 2026 19:02:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200819
Providers:                AS: 917
                          AS: 21700
                          AS: 34872
                          AS: 52025
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:43:a8:7f:d0:c3:ed:4b:25:33:b3:cf:d1:89:c6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Jun 19 19:02:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4df671aecdb063ee3eeefc94b054407b10fa51ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:30:88:32:a7:29:7e:ec:4f:1d:2d:3e:32:
                    17:28:10:da:3c:e7:54:e2:ce:6f:4a:3a:4b:cd:e8:
                    34:ff:03:f3:95:0b:58:cc:e0:8f:1b:16:12:30:c6:
                    36:c0:dd:b3:42:dd:da:29:c4:e7:80:db:90:0d:7d:
                    e3:42:f9:5a:af:ce:b9:8b:f2:93:25:b4:9b:7f:ee:
                    07:b5:8f:5a:64:09:ff:f1:4c:06:32:32:60:3a:c9:
                    12:9a:22:18:cf:13:79:37:7e:e3:1a:ae:72:91:64:
                    95:3d:ac:0d:39:c0:7f:4d:eb:25:4e:71:d5:c3:83:
                    04:cb:ae:6a:5d:5c:85:d3:e7:a9:e2:7d:79:12:f3:
                    0d:b8:3b:c9:ff:aa:6c:86:50:e9:f6:8f:45:97:50:
                    a1:fa:59:2d:25:a5:fa:01:50:2d:99:8b:8d:98:c3:
                    a2:13:70:23:df:ea:07:5c:2a:66:1c:50:ee:c1:ec:
                    bc:df:ed:8e:c9:03:45:cd:8a:1d:88:f4:05:c4:ac:
                    74:ac:ff:45:de:c9:33:af:a9:5e:dc:9d:97:e2:99:
                    c3:ff:67:40:3f:52:de:d7:49:96:58:9d:41:0c:1e:
                    e9:6a:45:c6:73:56:69:4e:9a:3c:de:82:33:3e:02:
                    83:51:fb:80:16:f4:e7:dc:2c:2a:8a:9a:00:82:5a:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:71:AE:CD:B0:63:EE:3E:EE:FC:94:B0:54:40:7B:10:FA:51:ED
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/TfZxrs2wY-4-7vyUsFRAexD6Ue0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200819

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:c1:d6:3d:4a:02:4d:d2:44:9b:8b:3a:90:50:f3:71:1e:
         84:03:48:a8:d9:9a:53:dc:b4:f8:81:d2:fe:21:c8:e6:f8:97:
         84:95:50:4b:40:b2:c1:92:42:4e:4e:cc:fa:86:70:89:ab:ac:
         44:d9:85:dd:f3:36:c6:25:28:92:13:4e:33:5f:7e:c5:c5:e9:
         70:e7:48:4a:92:ed:1d:eb:9d:cf:41:fd:94:5d:61:3e:4c:56:
         a8:a6:8f:f2:25:e2:38:13:89:cc:5b:f2:dc:1f:35:d4:6d:aa:
         f7:d5:7a:18:13:92:80:78:74:bc:a3:42:e9:5f:49:bb:8f:cf:
         63:68:68:f0:73:f5:cd:6f:49:06:f7:72:eb:fb:6b:ed:ce:f9:
         ea:af:7d:07:f1:25:08:d0:14:c2:b5:42:8c:46:93:e4:cb:25:
         55:95:6a:af:7d:44:62:03:a2:0c:c7:34:6e:75:9a:61:0d:ff:
         49:80:9c:84:91:3b:be:a0:d7:7d:50:d3:65:18:5b:3d:21:64:
         13:32:98:47:3c:8f:05:a4:95:65:53:ad:da:85:28:a9:54:4d:
         b3:db:9d:01:61:e8:64:dd:b2:02:30:8a:f3:88:df:dd:5b:a5:
         9b:53:2b:7f:bb:24:f2:23:8e:6f:10:ff:f6:6e:8d:27:22:0a:
         d6:e3:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 10:43:39 2026 by rpki-client