Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/KuLE546EHD7PgiaYsiWkLHmdlyc.asa
File:                     KuLE546EHD7PgiaYsiWkLHmdlyc.asa (raw, json)
Hash identifier:          WITnxtnW1GlvtR/rla3hjjQGQLujRpWiY1F2SqjbzCQ=
Subject key identifier:   2A:E2:C4:E7:8E:84:1C:3E:CF:82:26:98:B2:25:A4:2C:79:9D:97:27
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019EF50C28C8522A4C68763C12A50F4B0F17
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/KuLE546EHD7PgiaYsiWkLHmdlyc.asa
Signing time:             Tue 23 Jun 2026 15:14:35 +0000
ASPA not before:          Tue 23 Jun 2026 15:14:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            9094
Providers:                AS: 8903
                          AS: 12541
                          AS: 202766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f5:0c:28:c8:52:2a:4c:68:76:3c:12:a5:0f:4b:0f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jun 23 15:14:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ae2c4e78e841c3ecf822698b225a42c799d9727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:84:f3:04:6e:77:c3:fa:e6:64:99:86:91:
                    35:cd:35:77:45:cb:c7:e6:05:ad:06:3e:06:c8:92:
                    a4:c4:88:d2:4d:d5:e9:b2:5d:60:77:e5:fb:f0:16:
                    97:4e:d5:1a:e0:3b:bb:4c:fa:6e:ec:0b:cd:9c:9e:
                    f3:aa:d2:b3:69:cf:95:77:b8:81:1f:fa:8e:5d:cd:
                    bb:7a:7c:c6:1d:b3:48:a0:50:22:d5:84:bd:9c:b2:
                    59:d4:39:f5:a9:ff:fe:d5:60:51:c0:93:2d:7f:dc:
                    fd:4c:a3:dc:68:9a:21:f1:45:1d:a4:db:be:b0:22:
                    02:3e:64:82:c3:43:25:54:7b:11:ad:94:7d:4e:9a:
                    c6:1c:bb:d8:37:f6:f0:8d:91:d9:16:dd:7e:5c:2e:
                    c3:57:07:04:a3:4b:67:ab:36:1f:af:e3:9f:9d:5f:
                    4e:4c:9b:20:04:63:96:43:87:5d:1e:5a:81:ba:a5:
                    25:73:ba:a4:11:ab:b8:9c:b5:b4:7f:fd:9f:c0:ca:
                    e1:03:9d:3e:77:2b:66:f9:98:03:b4:fc:45:df:cf:
                    90:75:4d:7b:59:81:3b:03:24:3e:b2:0d:36:35:20:
                    d8:1b:91:9a:13:a9:46:83:43:8b:86:8d:a8:85:3a:
                    72:eb:03:c7:7a:8d:dd:9c:fe:16:56:f0:c3:e4:27:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E2:C4:E7:8E:84:1C:3E:CF:82:26:98:B2:25:A4:2C:79:9D:97:27
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/KuLE546EHD7PgiaYsiWkLHmdlyc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9094

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:b6:3c:f0:f4:fe:65:03:82:38:99:3a:cc:cc:8e:04:f7:
         ec:c2:84:6b:a3:97:0a:5e:1f:2f:0c:44:72:c6:cd:f3:34:69:
         89:3c:dc:c5:db:8f:22:be:34:04:fe:2a:04:d0:db:66:7d:37:
         36:42:20:c8:c1:fe:45:24:e1:fd:88:71:11:f5:b8:3e:6a:45:
         60:53:12:cd:57:6a:90:cc:f4:c5:d3:37:82:17:b7:73:5e:4b:
         09:0a:19:96:58:7b:fc:f4:c6:74:3f:20:b4:44:c6:f3:f7:05:
         3e:e7:4e:2d:64:b3:72:26:7c:b4:5b:e8:c3:aa:0d:ad:98:69:
         97:0e:67:3c:46:fe:7d:24:d2:d0:7c:d2:8f:9f:cb:62:ce:f0:
         59:6a:d4:d1:65:27:eb:4d:c5:03:51:36:4f:b1:9a:d0:d0:57:
         54:f5:29:ba:4d:9d:de:61:8e:ce:9d:45:61:03:3c:ee:57:31:
         38:98:95:1b:db:20:7b:f4:78:c7:44:d1:a6:19:ca:82:4c:36:
         cb:e6:29:d8:bb:02:d2:65:63:e0:18:f7:40:1c:e3:68:ad:2f:
         e8:32:b1:d5:45:d2:e9:ed:73:db:69:d2:20:4e:5b:97:08:51:
         7c:bb:52:22:86:38:fe:c6:d7:1d:6b:16:03:85:d9:e2:ae:8a:
         97:4e:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:12 2026 by rpki-client