Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/93kiNNYoQc853Cz6ue8qioc2i3U.asa
File:                     93kiNNYoQc853Cz6ue8qioc2i3U.asa (raw, json)
Hash identifier:          WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=
Subject key identifier:   F7:79:22:34:D6:28:41:CF:39:DC:2C:FA:B9:EF:2A:8A:87:36:8B:75
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       019DB19E7AC9357FF1C724155C53C722E9E6
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/93kiNNYoQc853Cz6ue8qioc2i3U.asa
Signing time:             Tue 21 Apr 2026 19:57:26 +0000
ASPA not before:          Tue 21 Apr 2026 19:57:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216369
Providers:                AS: 1764
                          AS: 6939
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:9e:7a:c9:35:7f:f1:c7:24:15:5c:53:c7:22:e9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Apr 21 19:57:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7792234d62841cf39dc2cfab9ef2a8a87368b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:db:98:27:52:9d:81:88:b3:f7:1d:78:5c:
                    76:48:89:72:0b:d7:2a:a4:d7:55:23:0e:d6:9f:50:
                    e3:5d:62:d8:a2:be:73:26:e7:06:d6:6f:5e:6b:50:
                    26:4e:b9:15:6f:81:67:24:bf:07:0d:97:3e:a7:96:
                    f5:54:a6:37:f2:a7:63:0f:e6:05:70:0e:47:52:74:
                    69:21:77:4d:72:d8:93:0e:b7:94:02:28:52:ad:b5:
                    43:a5:b9:79:eb:93:9c:97:71:87:32:02:fa:a4:7e:
                    fe:3b:fd:ec:b0:73:9f:4d:0f:38:31:53:86:5a:a2:
                    bf:a6:4d:85:55:48:f6:5c:45:0a:b9:6f:97:38:f8:
                    d6:87:32:68:be:52:e2:f6:4a:73:e3:63:3b:9b:88:
                    df:f2:69:38:8d:97:c0:56:85:58:e1:8c:97:4d:e2:
                    96:60:98:f6:93:a6:06:fa:73:2e:5c:d6:73:40:a3:
                    7f:cd:28:65:dc:09:4f:9e:6e:9c:7a:f8:81:3b:4f:
                    f1:c6:30:50:0c:c5:61:82:45:bb:03:74:d2:71:dd:
                    15:7e:9f:9d:55:7a:ad:83:b3:83:4d:07:7b:98:0e:
                    84:0b:9e:1e:0e:dc:15:18:a3:dd:15:3a:24:10:19:
                    d9:c9:b9:21:7a:c4:e6:a6:b9:d2:f7:b9:e9:1b:89:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:22:34:D6:28:41:CF:39:DC:2C:FA:B9:EF:2A:8A:87:36:8B:75
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/93kiNNYoQc853Cz6ue8qioc2i3U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216369

    Signature Algorithm: sha256WithRSAEncryption
         d2:2e:5d:ba:a2:f6:8a:75:ef:09:18:49:79:fb:91:7d:56:22:
         49:89:2c:f4:03:0e:b2:bc:fc:d3:50:09:83:9a:20:50:7c:b9:
         ec:f3:1d:e9:3f:29:98:76:23:89:8d:4d:95:13:18:a9:ab:39:
         48:06:cd:92:d0:b4:f6:cd:c2:b6:1a:31:1b:8d:fd:78:32:dd:
         0d:94:3e:78:5e:7b:7c:1f:f2:06:db:8f:b4:bf:81:f8:d9:ce:
         9c:f1:3d:81:44:08:87:19:03:ad:3a:a6:ed:60:bc:98:29:0b:
         6e:02:2d:4f:24:bf:41:c6:e8:4c:db:a5:c5:0a:ec:b0:25:4a:
         28:8e:c4:ea:42:b1:ea:b4:fb:5a:ae:ab:99:b0:5b:62:c9:16:
         b8:ec:fb:b2:b4:f9:60:ba:d0:e2:a2:38:19:92:78:17:bb:7d:
         fa:3b:5b:9d:c7:96:6c:a0:c8:3a:db:6e:13:2e:aa:bc:2e:e9:
         59:48:96:3e:89:a6:be:a1:fb:38:b5:63:39:ca:96:fc:1d:92:
         dd:8f:d8:77:bf:1c:8c:ab:6c:b7:82:7e:85:3a:70:fa:34:bd:
         76:21:d9:97:74:4c:61:83:bc:e3:05:31:91:8c:1b:a5:62:81:
         26:44:fc:df:2b:63:c9:bf:c1:f7:7d:46:fc:db:12:e3:ee:53:
         69:20:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:33 2026 by rpki-client