Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/Qrnbtg1ABIRqYEEbSpq4u-PwtAo.asa
File:                     Qrnbtg1ABIRqYEEbSpq4u-PwtAo.asa (raw, json)
Hash identifier:          4hMIFS3L1XCWD3JKP9t7vK5pQjHsvDgvvQ/XNCbuhMQ=
Subject key identifier:   42:B9:DB:B6:0D:40:04:84:6A:60:41:1B:4A:9A:B8:BB:E3:F0:B4:0A
Certificate issuer:       /CN=e4c927f191856f8c338a08274180eb2c233014fe
Certificate serial:       01A0D541CCA2ACD0E51852B3C9EE3C4234A9
Authority key identifier: E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/Qrnbtg1ABIRqYEEbSpq4u-PwtAo.asa
Signing time:             Thu 24 Sep 2026 21:10:54 +0000
ASPA not before:          Thu 24 Sep 2026 21:10:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210349
Providers:                AS: 34872
                          AS: 205684
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:41:cc:a2:ac:d0:e5:18:52:b3:c9:ee:3c:42:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c927f191856f8c338a08274180eb2c233014fe
        Validity
            Not Before: Sep 24 21:10:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42b9dbb60d4004846a60411b4a9ab8bbe3f0b40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:8b:1a:c2:1a:47:f5:84:a1:5c:23:62:ef:
                    b2:5b:c4:c1:72:35:17:95:32:ca:55:92:8d:a7:18:
                    87:a1:7e:87:03:b7:08:75:ca:ae:84:67:e8:4d:67:
                    08:e3:64:18:14:75:92:ee:65:0d:c4:05:d7:e7:79:
                    2b:28:af:25:36:61:61:b5:fe:78:d9:7a:13:68:a4:
                    33:9e:16:cc:d5:9f:9d:d4:0f:42:10:b0:f6:db:c2:
                    d6:00:23:2b:7e:5b:79:a4:0f:36:69:5b:07:37:5a:
                    3c:5e:75:c3:d2:a8:c6:42:2a:6e:54:63:af:c9:39:
                    ea:6c:6e:58:96:c5:f4:43:b4:40:77:ad:14:96:a0:
                    31:cd:d6:03:b7:a2:43:23:6b:73:2f:f5:41:01:7e:
                    32:99:6f:8b:c0:66:aa:23:d5:f9:3b:f6:fa:11:84:
                    fb:4a:df:8e:df:10:61:50:be:df:c2:0c:6c:19:14:
                    72:6e:07:52:eb:be:6c:1e:d7:55:70:9c:13:6e:23:
                    9b:b4:18:32:69:aa:44:ee:d3:c8:16:a2:f9:50:8c:
                    b0:aa:1d:f9:e4:c6:39:fb:41:3b:29:c5:d9:d6:f6:
                    25:ec:fb:9b:14:c1:43:a2:38:35:ce:a7:f8:65:92:
                    0a:4b:f7:d4:ca:82:26:ab:72:78:b2:5d:d5:56:31:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:DB:B6:0D:40:04:84:6A:60:41:1B:4A:9A:B8:BB:E3:F0:B4:0A
            X509v3 Authority Key Identifier:
                keyid:E4:C9:27:F1:91:85:6F:8C:33:8A:08:27:41:80:EB:2C:23:30:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mkn8ZGFb4wziggnQYDrLCMwFP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/Qrnbtg1ABIRqYEEbSpq4u-PwtAo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f00f6f-9581-43fb-ac57-026ca26f5f4d/1/5Mkn8ZGFb4wziggnQYDrLCMwFP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210349

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:26:8e:1d:a5:64:7b:ce:19:7d:c2:ff:c2:4b:f8:86:0b:
         75:31:75:13:bf:cc:f3:92:2a:d5:78:bf:f7:e2:eb:39:51:a3:
         a1:70:7c:a3:55:1c:cd:dd:7f:1b:06:82:9a:ca:b1:cb:4a:29:
         78:71:3f:03:27:2c:63:00:b4:1b:aa:e4:6b:fe:83:ec:f1:37:
         37:f2:7f:a1:e9:aa:0d:22:68:75:30:91:e4:72:a3:f2:62:56:
         9b:f8:ba:7a:40:31:42:af:c2:65:94:0e:01:90:3e:60:fb:b7:
         2a:5b:cf:96:49:3a:96:6f:25:e3:25:c0:58:c4:48:b3:ea:69:
         2a:9a:0d:41:a2:4f:13:36:82:e5:53:8c:eb:88:ce:97:2b:af:
         b5:5b:54:7c:38:c1:0d:4f:27:19:21:bf:d5:2e:02:85:c3:e5:
         76:f1:c5:b7:77:75:c0:a4:d3:51:12:fc:f3:f2:e3:28:70:7b:
         59:34:6d:4a:b4:62:5a:7b:05:b6:29:6e:e9:48:3f:7b:72:4a:
         06:64:05:c4:4d:c2:f5:f5:a9:f6:32:ea:57:97:a0:f8:67:b9:
         57:25:7e:a4:25:e5:98:2c:b0:8f:dd:c2:67:da:46:89:f9:19:
         c6:ef:f7:61:12:d6:9e:70:17:2a:07:78:fa:2e:16:19:89:81:
         13:b2:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:16:25 2026 by rpki-client