Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ptuVcsUchNL5vsee9rEvAAVKBQk.asa
File:                     ptuVcsUchNL5vsee9rEvAAVKBQk.asa (raw, json)
Hash identifier:          stAJ4bfwP/Li7IXjxcMCOi/duId8T3XCuDiDd30XDm8=
Subject key identifier:   A6:DB:95:72:C5:1C:84:D2:F9:BE:C7:9E:F6:B1:2F:00:05:4A:05:09
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E4134267DC9C39D076BF8E2490D16D8AD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ptuVcsUchNL5vsee9rEvAAVKBQk.asa
Signing time:             Tue 19 May 2026 17:06:37 +0000
ASPA not before:          Tue 19 May 2026 17:06:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203025
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:26:7d:c9:c3:9d:07:6b:f8:e2:49:0d:16:d8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6db9572c51c84d2f9bec79ef6b12f00054a0509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:c3:f5:c3:02:99:b3:2c:a5:3e:f9:82:34:
                    02:38:e4:2c:43:8e:9f:66:a2:86:d1:79:e6:68:b6:
                    3e:c9:d4:84:f8:84:96:e0:93:f1:19:06:9b:9c:fb:
                    ee:06:6a:fa:14:d2:6d:f1:df:a6:7e:a8:14:20:1b:
                    cf:bc:ce:04:f5:62:2a:1c:2b:e7:32:55:f6:72:d6:
                    1b:84:d2:b4:c5:84:01:71:62:e1:0b:a2:27:f8:3c:
                    98:3e:a6:1a:fc:9d:f9:92:00:11:ed:ed:55:60:1b:
                    be:9b:d2:50:4d:9c:8b:1d:25:37:67:14:87:18:3e:
                    36:91:aa:57:5f:48:9c:c1:e2:ff:b2:7e:73:c4:70:
                    f4:b7:17:21:70:de:f1:fd:91:d3:aa:fc:3b:1d:5d:
                    4b:bc:ff:8a:9b:3a:38:44:91:f5:b5:e8:c5:ea:c7:
                    c4:39:4c:fb:53:94:c9:2c:7b:cc:60:4f:bf:21:2e:
                    2a:44:00:1a:c6:be:c6:87:fc:b3:f6:60:37:ee:54:
                    f9:f8:39:8a:dd:56:56:66:fb:6b:c4:c7:5a:78:11:
                    fc:b1:eb:ef:1b:a1:e1:93:5e:6d:8c:aa:95:ac:ca:
                    a6:da:ed:22:2f:a0:13:1b:3b:3e:3b:36:fb:24:96:
                    5e:3d:2e:ff:51:cd:1e:87:de:3c:2e:f8:f6:ba:7a:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:95:72:C5:1C:84:D2:F9:BE:C7:9E:F6:B1:2F:00:05:4A:05:09
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ptuVcsUchNL5vsee9rEvAAVKBQk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203025

    Signature Algorithm: sha256WithRSAEncryption
         58:a2:d5:d0:e2:3d:a5:6c:ea:df:f6:a2:5d:44:10:cc:48:02:
         89:4f:5f:e7:62:fd:8c:7f:aa:02:17:c6:dc:4b:14:39:7b:1b:
         c8:37:a3:1e:b2:32:2e:86:47:c8:11:fc:7b:0f:b8:b9:51:06:
         cc:14:59:98:b7:2b:f7:54:d1:61:3e:34:d2:c8:b2:19:55:45:
         f2:73:af:05:c0:81:c0:5e:cd:99:62:96:6f:a8:74:8e:87:0a:
         5f:bf:52:8b:ed:1f:cb:bc:45:6e:93:16:3c:72:fc:32:c1:f9:
         a5:f2:31:25:d3:9a:a9:16:f2:4b:eb:d2:0d:e8:a3:cf:84:ea:
         34:ca:6d:e6:21:99:31:7b:76:d1:78:3e:19:49:84:a1:1d:46:
         98:ab:d8:f6:d7:1e:fa:b1:9b:f5:d5:3d:b0:a0:7e:c4:66:79:
         87:46:a9:f6:4c:a0:2c:c1:0f:22:09:86:46:7d:0e:cf:b7:12:
         44:d0:96:03:60:ec:c9:e8:36:b4:1a:f2:63:30:92:ec:a9:4d:
         99:74:64:1b:28:10:86:91:c5:ef:02:6d:65:91:89:20:c6:24:
         58:4d:a8:9e:67:07:47:08:72:6d:db:93:7b:9e:a9:eb:5c:c2:
         14:f6:95:58:72:e3:38:f3:8b:f6:8c:73:45:1f:40:b7:cc:8e:
         01:9f:86:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client