Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/DdYO6EDbuF7yR9RfMqyedlbBQxc.asa
File:                     DdYO6EDbuF7yR9RfMqyedlbBQxc.asa (raw, json)
Hash identifier:          hjp0IFDf+5qRTfcTPb3MLWP9dI2krI8ag1FOvrQ6wJE=
Subject key identifier:   0D:D6:0E:E8:40:DB:B8:5E:F2:47:D4:5F:32:AC:9E:76:56:C1:43:17
Certificate issuer:       /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial:       019FAFAF6278D4EB82A452F9308A1FF1F6A5
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/DdYO6EDbuF7yR9RfMqyedlbBQxc.asa
Signing time:             Wed 29 Jul 2026 21:02:14 +0000
ASPA not before:          Wed 29 Jul 2026 21:02:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209870
Providers:                AS: 174
                          AS: 43861
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:af:62:78:d4:eb:82:a4:52:f9:30:8a:1f:f1:f6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
        Validity
            Not Before: Jul 29 21:02:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0dd60ee840dbb85ef247d45f32ac9e7656c14317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:bf:82:46:6a:90:aa:03:29:64:1e:08:30:
                    16:ea:90:7b:d2:53:a9:65:43:2a:a2:a8:74:d1:71:
                    41:98:c2:3d:93:29:ec:bf:ff:3c:4c:33:10:10:99:
                    de:5f:c5:c3:9c:c6:1a:33:d3:73:25:35:5a:52:8d:
                    df:4e:eb:c7:f2:bb:be:d4:9b:f6:42:97:f2:e4:06:
                    9a:7e:53:63:9a:03:3a:92:a5:1d:79:d2:e7:19:49:
                    e0:9b:df:09:0d:0b:08:15:46:a0:f8:de:de:b1:07:
                    d7:91:5c:84:f2:47:e8:24:48:b5:c1:59:3f:8f:65:
                    9f:2f:cf:3b:32:d4:99:49:6a:02:1f:e6:2e:bb:ce:
                    c8:dd:f8:69:c0:b8:d6:a9:11:cb:ef:e7:fc:82:4a:
                    8d:1d:1e:f8:41:91:d7:d7:0a:3d:40:b6:c3:58:66:
                    97:4d:fc:13:ad:57:1b:f5:61:80:9b:81:1e:6c:a6:
                    69:d3:d0:7d:d1:0d:3b:c6:9c:d5:04:02:72:7e:1e:
                    df:f6:90:b0:ed:55:3e:3e:ae:db:01:91:66:d3:b3:
                    f5:c1:b8:59:b1:7e:3e:3f:d6:5d:7a:9e:31:39:6e:
                    57:8f:fb:f8:e1:bf:7b:6b:85:df:28:14:aa:81:fc:
                    22:94:b9:1e:aa:07:c1:ef:bf:85:90:82:f3:f0:cf:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:0E:E8:40:DB:B8:5E:F2:47:D4:5F:32:AC:9E:76:56:C1:43:17
            X509v3 Authority Key Identifier:
                keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/DdYO6EDbuF7yR9RfMqyedlbBQxc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209870

    Signature Algorithm: sha256WithRSAEncryption
         41:47:6f:e4:fb:89:a8:ba:bf:7a:9c:ab:ba:4c:74:7e:39:fa:
         b1:48:be:9f:40:18:8b:ff:16:c0:64:a1:35:03:47:bb:3f:fb:
         2a:f8:3f:e6:07:79:4e:40:75:10:3e:70:0b:8a:4f:9a:59:fa:
         2b:98:7f:0b:f0:ea:2a:f0:2c:dd:5b:60:90:2a:75:0b:dc:33:
         34:0c:f8:9e:22:14:90:d1:ac:6b:12:e1:c6:64:b5:93:fa:fc:
         96:1f:ba:8b:a1:d2:a8:30:db:df:54:7b:c0:60:2f:11:ac:52:
         f3:61:0d:83:22:07:7e:a6:b4:1d:e8:d5:54:c5:41:09:5d:81:
         f1:c0:99:81:1e:3a:af:08:b5:84:f0:82:d9:36:a8:eb:3a:01:
         99:e0:41:99:74:b8:da:9c:72:84:1d:a6:0a:90:b3:c5:23:14:
         9a:a8:d5:7b:ff:2f:9b:9c:da:86:e3:66:b9:ee:60:ce:93:51:
         d3:46:95:b8:b9:ca:b4:a7:3f:23:53:58:f8:cb:a3:84:81:98:
         a4:3c:57:08:64:c3:7e:f2:11:21:1c:73:81:e4:c5:cd:51:9a:
         be:6c:57:a0:ed:4a:66:20:86:cb:1e:09:a9:ac:e1:1b:65:6d:
         ab:12:7b:47:d4:54:62:2b:f0:59:36:20:35:f2:8e:a5:85:3f:
         b3:34:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:00 2026 by rpki-client