Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/vPf_ElL8ohmR0xMBaLObZGci_Bg.asa
File:                     vPf_ElL8ohmR0xMBaLObZGci_Bg.asa (raw, json)
Hash identifier:          SsAZ1Qj5jI+KhOalWEM9ONy+AoZa/Oe+pjPuWYu5oNs=
Subject key identifier:   BC:F7:FF:12:52:FC:A2:19:91:D3:13:01:68:B3:9B:64:67:22:FC:18
Certificate issuer:       /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial:       019D7331CEE8C1E49AD2C88295CA76CF8132
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/vPf_ElL8ohmR0xMBaLObZGci_Bg.asa
Signing time:             Thu 09 Apr 2026 17:02:17 +0000
ASPA not before:          Thu 09 Apr 2026 17:02:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204150
Providers:                AS: 47272
                          AS: 199829
                          AS: 212895
                          AS: 214693
                          AS: 215353
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:73:31:ce:e8:c1:e4:9a:d2:c8:82:95:ca:76:cf:81:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
        Validity
            Not Before: Apr  9 17:02:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcf7ff1252fca21991d3130168b39b646722fc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:b6:55:c6:2d:c2:1c:a4:db:6d:61:02:aa:
                    b0:0c:e4:d6:dd:d8:ce:e6:b3:a2:d2:22:12:d8:26:
                    3c:f5:6d:65:2f:8f:54:10:3e:3a:d3:5d:dc:b6:4a:
                    60:83:ff:a2:ee:7f:f8:b4:bb:eb:fa:e6:bb:c7:60:
                    5a:ac:fc:30:ab:51:c1:70:9e:99:6c:dd:87:16:70:
                    63:c7:7c:1e:e9:2e:30:92:3a:97:13:62:c9:76:05:
                    d5:ae:73:8f:56:a1:b4:63:41:6a:97:d9:c3:ef:e9:
                    70:30:5d:2d:bb:22:cf:6e:a9:bc:99:5d:44:72:b7:
                    90:a7:88:37:11:27:69:d8:5a:89:3b:43:01:dd:dc:
                    84:ba:86:8a:b9:9e:39:b9:af:04:8e:a9:70:3e:f7:
                    05:b4:5a:9c:13:4c:f6:c0:cd:a0:3a:ea:28:a6:15:
                    a9:9a:05:73:52:88:cb:14:eb:b6:91:ae:e9:0c:87:
                    08:d1:2b:2e:9a:89:25:41:9e:c5:29:24:44:ad:e5:
                    3b:46:ed:fe:fc:ad:23:c5:a6:e0:e6:77:6e:b9:60:
                    b8:4b:93:6d:6e:02:ac:af:39:6a:d0:c6:60:82:c9:
                    6c:94:8b:1d:85:28:7c:e2:ab:fd:87:2d:11:ed:1c:
                    01:0c:9c:a9:86:a2:c7:ac:f9:f6:99:b2:89:12:53:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:FF:12:52:FC:A2:19:91:D3:13:01:68:B3:9B:64:67:22:FC:18
            X509v3 Authority Key Identifier:
                keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/vPf_ElL8ohmR0xMBaLObZGci_Bg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204150

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:5a:d3:e3:e9:b8:41:70:57:73:52:79:de:f9:0f:bd:b0:
         3a:5f:d0:82:66:92:bc:ca:2b:0e:66:9a:ca:d8:ea:83:23:de:
         ab:95:c9:67:86:b0:7b:0d:73:30:24:41:7d:07:63:5d:5d:e2:
         1f:d8:04:f9:73:c3:aa:3a:69:16:d1:cf:2c:c4:34:f8:9e:1c:
         e5:c7:11:51:d8:55:97:69:b0:07:49:92:2c:0a:6d:ee:98:0d:
         b3:3d:f0:13:54:f3:fa:4e:e9:ae:3e:6c:e3:f5:28:44:aa:7a:
         32:a7:a6:1d:7b:eb:46:11:97:05:0f:b1:2c:ec:8f:e3:c3:dd:
         7f:02:de:18:f8:c1:02:8d:a4:31:c8:28:0b:9e:04:22:c6:b5:
         a2:a1:65:64:69:56:c1:88:70:49:fe:16:b5:a4:c8:52:47:4e:
         50:2b:82:92:39:56:b4:55:5f:86:09:cc:e1:6e:80:4b:29:0e:
         ac:53:54:68:7d:8c:2d:20:b9:b5:fd:d4:de:ad:61:c0:b3:9f:
         2d:b8:4f:2c:53:03:78:86:ec:6b:b5:18:76:36:7c:ee:88:92:
         57:2c:42:2d:2f:08:2a:d5:d5:32:f4:e9:7a:c6:7b:f4:68:56:
         0c:26:6c:1d:c6:48:40:14:f2:ec:3b:7f:b1:53:0e:51:ce:d7:
         95:c4:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:20:30 2026 by rpki-client