Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/GPyEvupTAAk4EntAl2UXoifEv_U.asa
File:                     GPyEvupTAAk4EntAl2UXoifEv_U.asa (raw, json)
Hash identifier:          SlWK5YVXz1F+IWgsNiL1MM+DTuo1ddzaVb7i1ICEbYs=
Subject key identifier:   18:FC:84:BE:EA:53:00:09:38:12:7B:40:97:65:17:A2:27:C4:BF:F5
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       019E96B5FED505EBC62AD0D9A64639D01576
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/GPyEvupTAAk4EntAl2UXoifEv_U.asa
Signing time:             Fri 05 Jun 2026 07:36:10 +0000
ASPA not before:          Fri 05 Jun 2026 07:36:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203309
Providers:                AS: 11421
                          AS: 34927
                          AS: 44324
                          AS: 153376
                          AS: 204211
                          AS: 204539
                          AS: 206069
                          AS: 213605
                          AS: 215172
                          AS: 402298
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jun 2026 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:96:b5:fe:d5:05:eb:c6:2a:d0:d9:a6:46:39:d0:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Jun  5 07:36:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18fc84beea53000938127b40976517a227c4bff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:4d:ba:4a:98:e6:d3:bd:1e:73:98:6a:76:
                    30:7a:63:b4:a0:64:a6:1c:d2:90:56:a6:10:c7:74:
                    04:43:d4:52:4a:83:8e:5f:e4:7d:b2:35:79:a4:65:
                    15:c3:ef:cd:c7:0d:e2:86:f7:26:df:7f:7b:56:26:
                    f6:99:46:c0:31:d7:80:14:68:0d:6e:42:66:76:f4:
                    c1:38:06:15:0a:06:47:e8:a0:99:dd:3d:f2:c9:dc:
                    c2:e5:d9:12:77:c7:72:3d:a1:c0:cf:61:ac:a7:78:
                    ae:4c:a7:b7:10:01:32:e2:13:5c:7e:08:da:09:ad:
                    6f:31:02:f1:6e:c3:ce:e5:8c:70:c6:b3:00:24:b7:
                    15:bd:29:97:1b:b8:eb:5b:c1:57:c4:f5:60:3c:32:
                    7d:e2:fb:05:42:2d:21:67:09:87:41:c4:7a:29:09:
                    78:87:af:b8:ad:ec:6e:82:b4:76:0a:62:10:aa:8f:
                    c9:94:38:4a:e2:24:08:c7:80:ed:76:be:2e:36:1c:
                    f0:03:3c:c6:7f:97:de:0d:3e:72:6c:c8:14:44:47:
                    3e:d3:37:58:27:e8:2e:0b:3d:35:6c:84:ca:4c:cb:
                    a8:48:8f:e4:3b:fa:1b:7a:6f:56:b2:4b:06:47:b7:
                    3a:90:e1:0b:75:1a:6c:e4:f2:bb:43:1a:54:cd:10:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FC:84:BE:EA:53:00:09:38:12:7B:40:97:65:17:A2:27:C4:BF:F5
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/GPyEvupTAAk4EntAl2UXoifEv_U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203309

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:0f:01:9b:32:ed:1a:ba:42:ca:2f:3e:47:83:33:42:a5:
         2a:a9:ec:27:d1:45:1a:85:27:75:9f:80:bd:61:56:2f:bb:db:
         c6:a3:2c:4e:bb:3d:a4:a2:7a:48:ee:08:00:dd:78:58:40:b1:
         2e:7b:42:a7:11:98:5b:15:45:0a:b5:5e:a5:1b:2e:e9:31:2c:
         66:ae:61:11:ff:7c:e4:7c:4b:07:6c:11:d5:8e:8c:00:2c:cc:
         e1:49:41:d3:e9:bd:7e:50:bb:87:ab:fc:93:87:4e:04:1f:96:
         bd:5d:c9:6b:4f:5a:09:30:35:1c:fe:3d:ac:1f:c9:4f:1c:ac:
         70:51:4c:a0:0c:dd:a4:1f:c1:fb:c4:3a:b8:03:45:43:96:73:
         f4:87:24:e6:bf:b1:5f:64:a1:b9:5b:d7:87:1f:8d:1c:50:61:
         2b:ed:de:b2:d5:e5:42:8d:ee:5a:17:ce:e1:59:d0:5f:d1:db:
         de:9e:15:e2:f9:54:f7:8d:cc:8e:b0:e1:7a:d8:d9:0e:35:95:
         ec:33:cc:41:c4:17:3b:cf:0d:5a:09:87:8b:a9:81:99:b4:0b:
         88:e0:be:f5:16:69:9b:db:07:c2:25:0a:62:fc:d3:e6:65:8e:
         0b:2c:79:26:05:e7:a6:6a:51:9c:7a:6b:57:7d:62:4c:be:72:
         ef:80:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 09:11:23 2026 by rpki-client