Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/yLl9hut5-79pC7adyuGSTuX_5sU.asa
File:                     yLl9hut5-79pC7adyuGSTuX_5sU.asa (raw, json)
Hash identifier:          61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=
Subject key identifier:   C8:B9:7D:86:EB:79:FB:BF:69:0B:B6:9D:CA:E1:92:4E:E5:FF:E6:C5
Certificate issuer:       /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial:       019EFF84D8FAE4F4A0B4ACA38B800153613E
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/yLl9hut5-79pC7adyuGSTuX_5sU.asa
Signing time:             Thu 25 Jun 2026 16:02:36 +0000
ASPA not before:          Thu 25 Jun 2026 16:02:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219361
Providers:                AS: 24961
                          AS: 34927
                          AS: 205058
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ff:84:d8:fa:e4:f4:a0:b4:ac:a3:8b:80:01:53:61:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
        Validity
            Not Before: Jun 25 16:02:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8b97d86eb79fbbf690bb69dcae1924ee5ffe6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:b2:9b:7f:1f:1f:18:dd:f8:14:d5:9e:26:
                    21:31:f0:79:4e:1b:23:cd:12:52:9d:7d:54:84:c4:
                    51:cd:92:bf:98:45:2c:5f:4d:ef:f0:b9:e3:c2:e2:
                    f3:8d:dd:91:cb:91:d2:1c:d7:50:d8:6f:da:47:d2:
                    93:6f:43:2f:37:eb:f4:d8:d1:e3:6f:d0:af:d5:56:
                    a1:83:53:b2:82:d5:8d:54:c9:45:79:fa:9d:35:81:
                    15:54:b0:12:28:fe:94:57:ca:54:ae:32:4e:c8:6c:
                    ec:dd:0a:cb:f9:0c:38:b9:ce:3f:34:4a:28:5f:ef:
                    87:2b:b6:37:ed:82:89:58:c3:ba:0e:b0:d1:18:4b:
                    4d:31:30:1b:b4:eb:33:e6:25:63:3b:3d:c5:af:b1:
                    c1:67:9e:73:9a:cf:12:8d:93:60:df:eb:ac:d5:b0:
                    64:99:61:83:b4:90:8a:57:f0:69:2a:3a:06:f3:da:
                    4e:83:f2:ca:fc:01:72:73:e6:27:2c:c5:2a:85:33:
                    c6:24:7e:4e:ad:aa:35:40:58:04:73:19:0a:fe:ea:
                    81:5a:d0:a9:32:6e:cd:c3:bc:8d:eb:4c:90:25:5f:
                    d8:9a:be:bf:3c:27:ff:84:6f:bf:ee:f4:fb:dd:e7:
                    1f:8c:48:24:ac:bc:cd:9a:0b:cf:04:9f:ab:20:7c:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:7D:86:EB:79:FB:BF:69:0B:B6:9D:CA:E1:92:4E:E5:FF:E6:C5
            X509v3 Authority Key Identifier:
                keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/yLl9hut5-79pC7adyuGSTuX_5sU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219361

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:5b:78:ed:94:c7:00:5b:1f:0f:71:f6:66:34:36:66:d1:
         75:27:9d:1d:26:e1:5e:d6:37:a9:0e:e3:3c:4a:28:bb:0a:af:
         46:aa:3b:5f:fc:e1:58:35:39:2f:a0:d7:ac:88:53:26:39:97:
         4c:de:a0:86:a6:40:3a:d4:51:92:88:57:08:c5:64:a8:7d:87:
         d7:a4:42:e3:1f:9c:47:42:fe:89:91:5d:dc:99:b5:5d:11:94:
         69:71:b6:be:7c:49:1a:50:1a:30:d4:3c:e3:d0:56:87:6f:e0:
         f2:53:2c:5f:fd:ae:42:ab:ce:ba:43:46:29:44:e0:f5:01:22:
         c7:74:82:8a:59:4a:64:a5:31:92:60:d4:6c:b8:29:94:e0:9d:
         9a:5c:5b:a7:d8:07:4a:79:a4:11:9c:a4:d7:1b:b4:47:89:d0:
         d4:a5:4b:3f:d6:77:e6:8a:71:e0:ed:3f:3e:c5:4b:40:57:7e:
         b5:93:ba:a8:18:54:f7:ef:ec:ed:c3:91:c8:d0:92:f2:5f:3a:
         0d:1b:af:52:0a:84:11:32:9a:34:35:1e:00:fb:d8:1a:c4:af:
         7a:d4:70:80:0b:7f:a1:d2:ea:ee:37:01:ae:3d:0f:fb:97:15:
         35:fe:64:fb:f2:b6:30:f4:14:e1:7f:cb:fa:ba:c4:ca:e9:22:
         f7:bd:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:52 2026 by rpki-client