Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/zeWDjXMa5d0w5AALex0oOqBNvc4.asa
File:                     zeWDjXMa5d0w5AALex0oOqBNvc4.asa (raw, json)
Hash identifier:          HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=
Subject key identifier:   CD:E5:83:8D:73:1A:E5:DD:30:E4:00:0B:7B:1D:28:3A:A0:4D:BD:CE
Certificate issuer:       /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial:       019CD67EF6CACA21D180BA0929E03FB39DFF
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/zeWDjXMa5d0w5AALex0oOqBNvc4.asa
Signing time:             Tue 10 Mar 2026 06:46:10 +0000
ASPA not before:          Tue 10 Mar 2026 06:46:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198437
Providers:                AS: 9002
                          AS: 49063
                          AS: 57304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d6:7e:f6:ca:ca:21:d1:80:ba:09:29:e0:3f:b3:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
        Validity
            Not Before: Mar 10 06:46:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cde5838d731ae5dd30e4000b7b1d283aa04dbdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:0a:dd:49:b3:8f:ee:a9:e7:e4:c0:28:40:
                    e9:f9:dd:2e:47:7a:62:69:32:5f:d9:04:59:77:fe:
                    aa:df:ea:3f:77:23:d8:c0:e3:3b:57:df:66:48:3e:
                    58:19:aa:ea:1b:d4:8c:d8:00:8f:bb:ed:c7:28:87:
                    5b:97:89:a3:6a:1a:ca:b7:39:a3:e0:c6:90:4a:e9:
                    9f:c3:19:80:fe:a9:d5:98:9b:bc:de:59:a7:9e:9b:
                    19:b5:cd:0f:fe:00:5f:4b:cf:97:46:6b:90:9f:2c:
                    3a:25:ac:de:1f:9f:91:02:89:9e:09:6b:33:78:b4:
                    cb:0a:2d:5b:d7:0d:31:a5:83:eb:ca:60:4b:6c:4d:
                    1e:1f:26:cd:1c:35:64:a9:93:fc:a4:76:47:c5:04:
                    f8:3e:38:c5:50:c3:78:c9:bb:f6:26:4e:bf:4e:b9:
                    53:a6:2d:19:99:38:2b:73:62:bd:ab:87:2f:4f:13:
                    e6:0c:dd:f2:75:f8:80:5c:88:01:95:20:62:0b:b9:
                    55:f6:b3:48:2b:46:13:75:d5:6b:10:39:eb:6a:fb:
                    80:6d:66:59:97:75:32:1f:4b:61:87:fa:e5:29:b2:
                    b5:6d:ec:33:9c:52:3f:05:aa:a1:1f:72:dd:48:45:
                    cd:b3:9b:b8:cd:a6:e2:67:44:61:c7:58:eb:0b:62:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E5:83:8D:73:1A:E5:DD:30:E4:00:0B:7B:1D:28:3A:A0:4D:BD:CE
            X509v3 Authority Key Identifier:
                keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/zeWDjXMa5d0w5AALex0oOqBNvc4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198437

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:7a:86:e6:27:64:6d:e1:50:01:dd:bf:7b:5a:8c:3f:51:
         29:4f:b8:44:ea:7b:a5:28:ec:e3:f3:d4:ea:78:f7:43:6f:7a:
         14:eb:09:5a:71:70:c7:46:be:bf:47:26:40:a8:5e:0b:53:92:
         a6:30:d0:79:30:dd:34:26:68:0b:5f:72:32:85:57:21:b3:76:
         f6:34:04:dc:5d:ce:10:e9:cd:8d:6f:b2:38:f7:92:de:4d:5c:
         a9:d1:0e:5c:bb:38:8b:8c:78:5f:9e:ce:33:31:02:4b:14:79:
         67:33:3f:b6:63:f1:6e:6b:01:6f:20:58:af:3e:cc:93:df:bc:
         58:01:78:3d:b6:8d:02:56:f1:d5:10:1d:f2:30:db:e0:d8:4e:
         1d:bb:e4:af:04:d7:c0:2e:c9:d6:d8:62:44:3f:11:4d:40:db:
         b2:97:42:b7:65:b0:2e:a4:96:59:1f:bb:14:a2:eb:0c:c5:7d:
         c9:ed:b2:5e:96:e8:7a:1f:25:99:15:40:38:73:17:8b:2b:c3:
         ff:43:42:62:d5:b8:21:10:57:52:54:83:0b:0b:f2:db:28:63:
         ff:70:c0:cc:a9:b8:85:ce:80:3f:4a:b5:ff:20:46:59:e8:15:
         fa:0c:fc:54:ad:a1:03:18:d5:fe:75:22:71:e2:72:1c:ed:6d:
         ad:23:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:03 2026 by rpki-client