Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/IepspGCwPLMLBPzsExkQzO4QbNY.asa
File:                     IepspGCwPLMLBPzsExkQzO4QbNY.asa (raw, json)
Hash identifier:          8W3LBKMDCnMT8UFQAj2NhlyNWtdNB7dBnh/RCWdde2M=
Subject key identifier:   21:EA:6C:A4:60:B0:3C:B3:0B:04:FC:EC:13:19:10:CC:EE:10:6C:D6
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019CBD2F1D311599D6B0F45EEC66E294F13F
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/IepspGCwPLMLBPzsExkQzO4QbNY.asa
Signing time:             Thu 05 Mar 2026 08:48:27 +0000
ASPA not before:          Thu 05 Mar 2026 08:48:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205369
Providers:                AS: 6939
                          AS: 34927
                          AS: 41051
                          AS: 52025
                          AS: 207529
                          AS: 210440
                          AS: 212895
                          AS: 216873
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:2f:1d:31:15:99:d6:b0:f4:5e:ec:66:e2:94:f1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Mar  5 08:48:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21ea6ca460b03cb30b04fcec131910ccee106cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:fd:95:e5:b3:ca:5f:5c:64:fa:f6:fa:cd:
                    5d:75:40:bc:b9:42:43:a2:41:ff:c4:c2:39:f1:b2:
                    48:cd:b8:83:ae:33:cc:1a:e0:a9:07:90:ad:86:4a:
                    6a:7c:a6:b5:a9:a7:ed:35:a2:7e:b8:ff:6e:01:4b:
                    8d:1a:7e:d8:b8:52:2e:24:46:0c:68:76:93:85:8c:
                    24:ba:31:3a:2c:a9:a6:2a:67:c1:d4:a8:7a:18:13:
                    55:08:cf:f3:af:2a:a1:7e:d0:6a:5a:26:28:72:c1:
                    b7:8a:0e:ad:05:33:5c:8b:e3:fd:16:c8:a5:bf:d2:
                    47:18:0c:1a:3c:b0:2c:dd:40:b3:43:87:99:e0:5a:
                    12:9d:08:c6:5d:0a:69:34:a0:f3:fa:06:de:e4:39:
                    59:b5:5f:61:16:38:f7:4c:33:d7:c8:f6:af:42:ad:
                    46:84:fc:2f:3b:25:0b:4b:53:01:90:30:d6:73:4d:
                    2e:3f:8c:06:69:df:4d:61:5f:95:69:d1:30:07:33:
                    a6:34:24:fb:a9:c6:82:4c:fc:30:8e:e0:3d:4d:6e:
                    8d:47:f4:aa:8f:d0:ba:92:a9:2a:1e:f2:a5:a4:82:
                    b8:88:54:0a:b3:52:d2:6f:f5:0b:5b:7c:da:34:5b:
                    37:34:57:1b:71:75:c5:43:64:94:26:fd:2c:6a:1b:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EA:6C:A4:60:B0:3C:B3:0B:04:FC:EC:13:19:10:CC:EE:10:6C:D6
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/IepspGCwPLMLBPzsExkQzO4QbNY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205369

    Signature Algorithm: sha256WithRSAEncryption
         43:67:77:72:c5:85:96:a8:94:b1:d6:45:92:35:aa:bd:54:7e:
         92:7e:5d:7e:79:8b:ba:03:b0:d7:53:bf:03:b3:dc:a7:44:88:
         de:33:41:72:5c:0b:8f:55:2c:bc:a8:2a:33:f2:7a:64:df:3d:
         98:31:86:00:07:75:45:09:a0:28:ff:39:17:c0:4e:c3:8e:e4:
         6c:65:11:d7:fa:0c:d5:03:af:51:65:b4:6c:f1:2f:00:79:21:
         f5:e9:96:33:2b:8e:a1:a2:ef:0c:2b:36:e6:8c:70:c2:c7:f4:
         56:7e:94:17:d5:36:bb:8e:ef:60:74:03:cf:84:36:55:0a:58:
         1d:49:ab:02:ee:b8:f8:0c:63:2a:e1:7a:d7:26:71:c7:3f:25:
         fe:69:11:88:3d:21:f4:95:b3:0c:01:de:20:13:87:95:36:a5:
         a4:9f:ba:de:b5:98:2d:5f:40:aa:17:c3:f0:e1:ec:59:de:78:
         97:9e:50:c5:48:36:2a:67:d3:87:3c:ae:8a:0f:58:1a:22:43:
         d8:77:fc:71:91:ad:c7:39:d1:d0:ac:1e:90:a1:66:70:48:9c:
         38:c8:ec:ab:d0:7f:76:de:c9:2e:bf:a8:be:ea:88:9b:88:69:
         09:9c:77:1d:d3:bb:11:2a:9d:ec:aa:0b:72:59:2b:28:f1:0d:
         3c:bc:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:06:50 2026 by rpki-client