Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/RymzVkl2GTuXhui1J5W_XhqHq48.asa
File:                     RymzVkl2GTuXhui1J5W_XhqHq48.asa (raw, json)
Hash identifier:          5HfIyKLmoKxLTbuxq/HgwaF++9Q0QoNQiFLFyXUCLUE=
Subject key identifier:   47:29:B3:56:49:76:19:3B:97:86:E8:B5:27:95:BF:5E:1A:87:AB:8F
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       019F1901082323828A5E9B20448AED1BE4D3
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/RymzVkl2GTuXhui1J5W_XhqHq48.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211024
Providers:                AS: 6939
                          AS: 8283
                          AS: 20473
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:08:23:23:82:8a:5e:9b:20:44:8a:ed:1b:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4729b3564976193b9786e8b52795bf5e1a87ab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:c7:07:e3:e8:56:5a:7d:f3:0f:13:6d:68:
                    25:fc:ba:e1:b3:32:a1:4b:30:77:fd:01:3f:76:06:
                    e7:75:04:f9:d2:76:24:56:c6:71:fa:08:f1:19:05:
                    0a:18:bf:9d:11:9a:4e:3e:60:b1:8b:32:75:f1:d3:
                    9a:cc:db:d8:b9:61:42:20:d1:29:01:17:f2:45:01:
                    20:37:a6:4d:fa:c7:87:12:c9:e0:58:1b:aa:71:34:
                    8d:3d:fa:fb:ad:78:c2:39:08:70:cc:58:ca:59:c8:
                    3f:2c:cf:c4:cf:00:6e:c6:27:8d:53:63:38:4c:d4:
                    c9:32:57:b0:ad:f3:ef:a3:30:56:60:64:2c:09:c3:
                    a0:d2:1e:d0:62:06:71:9d:a9:7a:71:10:86:0d:40:
                    dc:1f:5a:4c:31:09:c9:6c:4a:a5:d3:07:23:98:b1:
                    b8:ef:4c:9d:13:ae:fd:5e:0c:d4:03:2f:2d:18:13:
                    35:c0:50:91:80:ab:d0:a0:78:39:0b:dc:f6:01:3f:
                    5f:2a:bc:bc:79:2b:b9:3a:19:67:a3:63:48:16:f3:
                    4e:d8:ec:00:db:fb:e8:44:25:dd:42:70:54:dc:0f:
                    dc:41:30:54:66:5a:ab:d7:ea:21:57:29:c6:52:f9:
                    0f:2b:48:0b:3e:9e:51:a6:fb:80:b4:83:ba:f9:92:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:B3:56:49:76:19:3B:97:86:E8:B5:27:95:BF:5E:1A:87:AB:8F
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/RymzVkl2GTuXhui1J5W_XhqHq48.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211024

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:0c:08:ac:62:34:6c:0b:e4:52:91:e0:5b:24:6e:96:ef:
         ac:e0:15:2e:61:39:74:5c:51:cf:f1:83:9c:da:06:22:aa:f6:
         8f:cc:25:49:f0:fc:f5:be:38:3b:e1:60:39:ee:27:40:01:4b:
         62:9e:89:43:7b:5c:0f:81:82:4a:f9:fa:bf:91:b9:e5:ac:2c:
         cd:61:4a:03:7b:63:ab:d8:0b:94:08:d6:4a:f7:af:4e:8a:fe:
         59:a4:b9:7a:01:94:25:90:41:35:11:c7:5d:ad:eb:a4:fd:fd:
         81:73:13:27:5d:6f:f3:a2:ee:f5:0b:1b:9c:62:aa:77:c2:2b:
         dd:6a:18:0e:74:77:1f:2f:12:0e:74:7e:3d:d0:e1:74:6c:1c:
         01:2e:b5:2f:0c:cd:f7:49:6e:c7:31:6a:fa:82:93:c5:75:31:
         8d:7e:d6:73:42:1f:f1:2d:d1:78:95:17:0d:1a:83:cf:6f:23:
         b6:98:22:8c:e8:b1:59:08:1b:4a:5d:0c:d6:50:ec:11:da:eb:
         29:5e:07:f1:d3:18:02:6b:a6:bc:58:a4:24:db:97:ac:bb:fe:
         94:f4:d2:ec:7c:d2:a9:b6:84:84:3f:cd:c8:f1:70:d8:24:19:
         fc:25:d4:d8:d5:3d:2b:ae:0e:06:bb:02:07:19:20:cd:61:8f:
         19:8b:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:50:05 2026 by rpki-client