Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/BED9GISLCJhk0pThitFKhHhPnWQ.asa
File:                     BED9GISLCJhk0pThitFKhHhPnWQ.asa (raw, json)
Hash identifier:          6cUNoJrVBhHEyPZpndIyjIlnjwedGAHfcHstbr3UCqM=
Subject key identifier:   04:40:FD:18:84:8B:08:98:64:D2:94:E1:8A:D1:4A:84:78:4F:9D:64
Certificate issuer:       /CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
Certificate serial:       019FAD732D0CEDD3FAD8534B190B14DC0AA0
Authority key identifier: 63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/BED9GISLCJhk0pThitFKhHhPnWQ.asa
Signing time:             Wed 29 Jul 2026 10:37:14 +0000
ASPA not before:          Wed 29 Jul 2026 10:37:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219251
Providers:                AS: 41051
                          AS: 209533
                          AS: 209735
                          AS: 212895
                          AS: 214762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:73:2d:0c:ed:d3:fa:d8:53:4b:19:0b:14:dc:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
        Validity
            Not Before: Jul 29 10:37:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0440fd18848b089864d294e18ad14a84784f9d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:9d:1c:fe:53:96:ee:88:5f:62:50:dc:0a:
                    27:ea:ad:2c:04:c1:00:fb:e8:27:c1:f7:f2:08:3a:
                    63:33:35:d3:12:1b:56:15:f6:8e:57:97:5e:13:1c:
                    a4:c5:fb:03:8e:9f:af:6b:a2:a3:58:5c:bd:1e:3f:
                    84:24:e4:21:75:67:f0:0c:ba:23:45:11:3a:aa:f7:
                    22:ca:4d:33:4d:9e:fb:bc:45:7e:ad:c8:6c:73:fa:
                    5a:f6:bf:24:81:19:5a:45:71:c8:28:41:79:d9:8f:
                    b1:28:4c:b1:99:f5:91:97:f6:41:b9:c1:66:ce:b1:
                    6f:35:ed:ee:05:e4:18:d1:29:79:ac:e4:59:38:b9:
                    0b:2d:5d:0d:6e:74:ce:62:65:bf:f8:94:a9:64:26:
                    25:2d:5e:d3:c9:6b:07:19:42:98:2f:66:dc:1c:50:
                    77:94:d4:54:97:2a:85:47:dd:db:f0:ba:69:ce:a5:
                    bc:71:87:4f:4b:85:d4:4a:64:b9:3d:55:52:b9:eb:
                    97:cb:92:c7:b7:30:cf:fe:59:69:ef:c3:c3:72:7d:
                    5b:9d:66:d1:db:07:e3:39:75:12:ba:ca:3d:ac:33:
                    06:b8:48:70:94:3a:89:d4:71:f2:35:50:78:c8:ee:
                    95:e5:bb:fc:09:f6:4c:5e:04:4e:c5:a0:9e:52:3f:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:40:FD:18:84:8B:08:98:64:D2:94:E1:8A:D1:4A:84:78:4F:9D:64
            X509v3 Authority Key Identifier:
                keyid:63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/BED9GISLCJhk0pThitFKhHhPnWQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219251

    Signature Algorithm: sha256WithRSAEncryption
         61:83:f3:f0:52:79:c1:e7:82:9f:97:16:52:8a:f1:b3:1f:b2:
         2f:df:b5:7b:76:0d:75:9e:38:97:35:03:5e:df:d6:f8:03:fb:
         19:3e:f7:db:6f:f8:63:07:12:b4:11:d0:2c:55:fb:1b:7d:88:
         35:89:98:37:a8:4a:b3:af:41:e0:f5:24:c0:49:81:a1:ea:22:
         24:3d:15:c4:8d:1b:51:13:67:e3:34:01:9d:28:d7:f5:05:c2:
         c5:8c:84:4a:68:6c:8f:f4:71:83:cd:20:2b:6c:7a:11:5b:4a:
         5c:a0:28:9a:b8:6c:8e:1b:71:b3:6b:fd:ff:9b:4c:7a:d6:1e:
         18:21:33:de:a0:14:97:eb:eb:f0:81:df:68:19:21:60:4d:46:
         36:7e:09:3f:cf:22:19:2f:9d:53:2e:a2:ca:8c:c3:61:8d:58:
         5b:3b:53:ff:35:4f:cd:4a:51:34:5a:7c:15:4e:be:bb:bd:6e:
         b4:ae:39:9f:b6:06:6b:40:79:e0:ad:05:09:00:d2:13:3e:10:
         73:bc:92:44:53:65:f4:50:fe:7e:c6:12:db:01:6c:34:90:a4:
         a9:31:2a:70:ff:99:55:33:d9:da:b5:07:92:b5:94:51:a6:7c:
         5c:03:b2:ac:1e:f2:fe:1f:cd:0a:7f:4c:dc:8c:c1:d8:20:09:
         3b:e8:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:43 2026 by rpki-client