Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/3b2s3p4oMea8LJB4yErrpoSUMas.asa
File:                     3b2s3p4oMea8LJB4yErrpoSUMas.asa (raw, json)
Hash identifier:          m3bshBr8tj8Wwq1Ja324OOM0o37SNVG1XxrRZZqFdC4=
Subject key identifier:   DD:BD:AC:DE:9E:28:31:E6:BC:2C:90:78:C8:4A:EB:A6:84:94:31:AB
Certificate issuer:       /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial:       019E3AAF22B582D3593C823932A0099D86C2
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/3b2s3p4oMea8LJB4yErrpoSUMas.asa
Signing time:             Mon 18 May 2026 10:43:36 +0000
ASPA not before:          Mon 18 May 2026 10:43:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204762
Providers:                AS: 20694
                          AS: 38927
                          AS: 51202
                          AS: 204197
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3a:af:22:b5:82:d3:59:3c:82:39:32:a0:09:9d:86:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
        Validity
            Not Before: May 18 10:43:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ddbdacde9e2831e6bc2c9078c84aeba6849431ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:08:d3:aa:1e:ee:a5:b1:0f:b2:ee:4d:43:
                    87:9d:e3:b2:aa:fd:07:10:92:04:a1:ce:35:19:53:
                    f7:e1:2c:92:57:1f:d8:b5:d2:d1:07:52:67:b5:96:
                    b0:13:4d:92:9f:79:0d:d1:11:30:86:c8:d3:8a:90:
                    f2:b9:b7:9c:88:a1:49:3a:44:e2:a3:a8:6b:c3:91:
                    95:69:ea:1b:37:b2:14:d0:7d:68:fd:2e:cc:fd:4f:
                    87:3d:2a:25:83:dd:4b:37:7c:74:8d:70:a5:ae:2f:
                    12:61:1c:3a:04:e8:d8:26:67:f6:ad:cf:9d:ae:43:
                    ca:71:fc:e0:0c:05:e0:29:80:4b:a2:f3:b4:fd:12:
                    04:08:86:d1:f8:30:25:ee:07:dc:05:19:6b:c7:89:
                    df:b6:6d:98:0c:4f:4e:4f:28:d2:fc:dc:4d:64:ec:
                    5e:8f:e3:c2:60:f5:a5:c2:d0:50:bc:38:94:9a:73:
                    d0:35:75:32:a1:98:da:a8:31:c0:7e:0d:32:9f:91:
                    5c:e6:db:30:09:d3:f9:1c:38:97:6b:e2:a9:4a:ef:
                    7f:71:0c:c8:d1:08:e9:e7:c3:73:19:05:f9:d3:08:
                    f0:95:f2:c8:1d:fd:2b:90:1e:ea:02:50:8c:3f:96:
                    57:a6:66:97:f6:92:42:01:57:b2:cc:f8:76:96:ae:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:AC:DE:9E:28:31:E6:BC:2C:90:78:C8:4A:EB:A6:84:94:31:AB
            X509v3 Authority Key Identifier:
                keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/3b2s3p4oMea8LJB4yErrpoSUMas.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204762

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:f0:0b:c5:af:c8:b7:33:86:ce:be:0f:8f:26:b9:b5:b9:
         5b:8b:41:b5:ed:85:0a:2f:57:e8:3f:33:54:a5:ff:71:54:c8:
         e0:9d:3e:8a:f2:9a:97:8e:7f:2b:c9:2e:f5:5c:12:91:2d:3e:
         09:57:f5:8e:fc:8e:e0:3f:90:e3:f1:4c:59:45:45:57:32:d7:
         d2:c3:6d:19:64:1c:4f:77:64:4a:56:26:33:fc:00:34:8b:61:
         7b:26:7d:8c:52:7a:07:6f:2a:4b:0b:ec:06:38:c2:fb:0e:46:
         15:d5:6e:c0:c6:73:b8:29:05:09:df:57:c9:96:5d:d4:17:bd:
         81:e8:c7:a9:a0:1f:42:f8:ff:5c:f5:18:d4:54:78:74:7a:27:
         1f:46:2f:91:ba:18:74:7c:d1:ce:59:43:10:73:64:56:44:df:
         2c:dc:50:d5:54:e8:0d:90:08:29:32:87:22:32:87:d2:f6:f1:
         c2:da:9f:1d:96:80:00:16:f9:a0:36:ae:9e:94:f0:86:12:05:
         c7:c7:6e:7a:38:2b:f2:37:be:6a:f0:c8:8d:f5:00:33:d0:63:
         a2:28:7d:c6:80:81:02:eb:2f:6e:0f:0a:01:78:06:0b:a9:66:
         d1:7c:be:7d:4d:2e:f4:2f:14:60:55:62:f1:49:73:b4:98:bc:
         6f:ca:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:00 2026 by rpki-client