Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/IPwYbvOTgoroOnniZoWHqRWH1iM.asa
File:                     IPwYbvOTgoroOnniZoWHqRWH1iM.asa (raw, json)
Hash identifier:          rXi2zhCnM8yGSXi4cShVP8m8rzQdqSA1LoHID9h8Pxo=
Subject key identifier:   20:FC:18:6E:F3:93:82:8A:E8:3A:79:E2:66:85:87:A9:15:87:D6:23
Certificate issuer:       /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial:       019FD372598D8808936790AA9DC2C5DAAA2B
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/IPwYbvOTgoroOnniZoWHqRWH1iM.asa
Signing time:             Wed 05 Aug 2026 19:41:54 +0000
ASPA not before:          Wed 05 Aug 2026 19:41:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212488
Providers:                AS: 34872
                          AS: 41051
                          AS: 59645
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:72:59:8d:88:08:93:67:90:aa:9d:c2:c5:da:aa:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
        Validity
            Not Before: Aug  5 19:41:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20fc186ef393828ae83a79e2668587a91587d623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:98:20:de:e9:3e:54:bf:03:4c:ee:33:f6:
                    b1:09:51:f3:a2:11:b4:dc:90:93:aa:13:d6:11:cf:
                    10:8a:94:e2:af:01:08:d3:21:9d:b0:3c:b5:06:67:
                    6b:c2:aa:c4:3b:c7:70:09:87:37:54:97:45:9b:8f:
                    02:a9:e4:31:8b:1b:05:79:63:b8:2c:f5:87:33:c1:
                    97:be:fa:c7:53:df:f4:53:c8:8b:f7:d0:af:9e:3c:
                    66:f3:78:1e:e2:27:55:55:71:83:4f:d7:ab:dd:74:
                    4f:f9:45:1e:2f:5d:5f:e5:77:e5:9e:d1:7a:7c:be:
                    af:56:09:e5:b8:88:3e:4a:d9:36:e7:2d:9e:ec:eb:
                    65:a2:31:37:de:1c:f4:11:24:30:2e:f7:e6:b6:77:
                    6c:2d:d8:bc:b2:95:25:6b:53:6b:b4:57:7e:45:2f:
                    fa:b3:50:f5:f4:20:66:f2:54:59:ae:5d:60:e5:63:
                    c6:1d:59:49:b6:f3:36:5c:9c:e3:63:ee:1a:0f:b6:
                    5a:14:10:1e:73:ce:f2:a3:0d:93:06:f0:3d:a9:50:
                    d9:d0:05:b1:25:86:e7:0c:25:dc:16:8c:86:56:bd:
                    7e:54:fe:a0:52:4e:78:0a:93:af:1e:4c:3f:6b:e9:
                    62:65:c7:82:41:a9:a2:fa:70:a8:b0:2c:0d:36:fc:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:18:6E:F3:93:82:8A:E8:3A:79:E2:66:85:87:A9:15:87:D6:23
            X509v3 Authority Key Identifier:
                keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/IPwYbvOTgoroOnniZoWHqRWH1iM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212488

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:da:ce:9d:92:86:48:77:fe:c8:1c:1d:2c:5c:3a:f8:d1:
         2c:74:52:f0:58:c0:a6:7b:6a:16:79:ec:2d:d3:4e:bc:be:f3:
         86:92:6d:84:01:b0:44:92:19:eb:4b:a9:a7:a8:92:07:61:7c:
         62:2d:cc:2e:fa:db:fd:2b:72:91:2d:0f:5e:59:c7:3b:1c:18:
         9e:f0:eb:70:ca:a8:27:de:3f:e6:e8:2e:8e:af:e0:7e:40:57:
         1d:0b:0a:1f:00:33:97:34:4b:30:07:21:9b:b0:81:30:89:a6:
         53:2a:1c:8a:c7:8c:5d:1b:c7:67:2b:b4:e4:cc:fe:22:6d:7d:
         a8:9c:00:a6:2a:68:35:9a:9e:43:0e:56:8f:03:0f:ab:c3:39:
         b6:bf:14:82:b1:4a:c9:80:03:3c:af:2a:05:ae:ec:e1:7f:e0:
         42:c5:1f:18:83:87:f3:e6:b0:e5:f0:3b:f8:f0:98:05:39:9a:
         7e:11:23:d9:71:5a:96:dc:20:8c:58:2c:88:1f:c5:49:56:8a:
         c1:1e:30:c1:ed:6c:f0:b9:2e:42:54:86:14:d3:0d:98:9d:a8:
         da:ef:c7:6b:ba:25:ac:6e:86:f6:93:72:79:8d:2f:e1:9e:21:
         3e:3c:b2:a0:5e:f8:f0:a1:ee:0f:69:21:8e:0d:87:c3:91:c3:
         11:1a:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:42 2026 by rpki-client