Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/Ptq95uhMbMRV3wAcH1JO0MsySQU.asa
File:                     Ptq95uhMbMRV3wAcH1JO0MsySQU.asa (raw, json)
Hash identifier:          X5wo7l/IsXDPTJJiO2prPaJNo3fg+PfsZU7kiiBt/b8=
Subject key identifier:   3E:DA:BD:E6:E8:4C:6C:C4:55:DF:00:1C:1F:52:4E:D0:CB:32:49:05
Certificate issuer:       /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial:       019FC70A673B36E025DD42632B96A35FAF08
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/Ptq95uhMbMRV3wAcH1JO0MsySQU.asa
Signing time:             Mon 03 Aug 2026 09:52:55 +0000
ASPA not before:          Mon 03 Aug 2026 09:52:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207411
Providers:                AS: 6939
                          AS: 20473
                          AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c7:0a:67:3b:36:e0:25:dd:42:63:2b:96:a3:5f:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
        Validity
            Not Before: Aug  3 09:52:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3edabde6e84c6cc455df001c1f524ed0cb324905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:e1:38:fb:7b:0c:8f:15:b5:84:e2:a4:7c:
                    0f:5e:2a:6d:ce:4e:77:22:e3:40:6c:4c:a3:9c:c4:
                    52:40:64:1d:45:55:6f:e1:ee:19:0e:4e:ac:8b:fa:
                    9a:4a:57:58:f7:29:82:65:5f:6f:68:67:24:16:63:
                    3c:e4:86:d6:dc:2f:3f:30:e3:f9:b2:41:a6:68:e4:
                    eb:d3:18:98:c5:01:11:75:b4:1c:f8:ba:96:10:f9:
                    9d:70:72:5d:46:86:4b:c0:1b:2f:95:bb:89:19:40:
                    49:d0:55:4f:57:89:2c:4f:ee:e6:bc:4c:6f:8c:f7:
                    84:4b:a1:1f:aa:2e:35:b0:4a:a1:b3:cf:e8:eb:d3:
                    34:03:aa:96:51:14:b9:8a:00:ce:f3:f3:62:c8:e3:
                    21:4f:ab:00:7f:70:61:76:8e:a2:54:d3:eb:d1:a2:
                    23:2d:5b:95:21:37:d9:40:39:86:3c:03:43:d1:3d:
                    77:cf:c0:28:e7:b1:0b:f5:0f:fd:b0:33:a5:29:05:
                    54:69:2d:9e:dc:87:36:4a:fe:1d:03:a1:6d:22:89:
                    c7:ea:65:c2:2a:2e:63:48:d3:f3:d5:fb:2f:a9:60:
                    e7:52:3a:82:1b:77:eb:5d:99:c0:02:ef:cc:80:d2:
                    f4:05:7e:98:30:fc:42:6e:10:79:be:89:2a:8c:ce:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:BD:E6:E8:4C:6C:C4:55:DF:00:1C:1F:52:4E:D0:CB:32:49:05
            X509v3 Authority Key Identifier:
                keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/Ptq95uhMbMRV3wAcH1JO0MsySQU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207411

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:a1:de:9c:5d:6c:1e:f2:d0:98:58:e9:2d:be:19:b5:ec:
         80:a9:13:4a:f2:21:56:84:e6:31:5e:cf:87:3a:e9:1d:85:f1:
         6f:ee:7c:cf:b0:a7:4c:d5:9b:4f:59:7f:db:32:ff:a1:72:f3:
         3a:2b:20:40:5e:6e:40:5c:73:a8:5b:a3:b9:90:8c:d8:7c:95:
         2e:b7:65:4d:dc:16:4b:0b:ff:e6:89:b7:97:e8:c6:da:dd:83:
         f6:45:69:17:86:48:04:c4:4e:df:87:ea:db:87:9b:ff:a4:7a:
         ac:09:ba:ba:0d:a3:d3:97:dc:07:e2:05:85:7c:bd:0d:20:ad:
         a1:4e:cf:69:0f:2e:cf:35:46:35:91:0e:3b:af:f2:7d:27:a2:
         6f:71:77:3a:66:6d:41:a1:0b:77:2d:5c:36:dd:72:1b:d9:2e:
         80:17:fe:12:60:44:29:27:eb:b5:ae:1b:dc:db:32:a2:ba:30:
         12:ff:b2:28:97:3d:48:07:47:18:8f:c6:69:7e:79:23:23:e5:
         fa:80:3d:eb:17:69:b7:98:d1:f3:4e:70:53:1e:72:b7:4f:c9:
         23:71:af:3c:bb:70:93:73:62:aa:67:92:a8:63:42:00:f7:5b:
         a0:63:60:db:02:d7:1c:7e:7b:58:25:0e:ea:00:52:66:c2:96:
         19:d1:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:17 2026 by rpki-client