Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa
File:                     ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa (raw, json)
Hash identifier:          sLCKF9FnIe6mVq71g7Z1KhrNB/Y5bi6HgjGXEqBr/Ec=
Subject key identifier:   7A:19:F3:EE:68:3F:A1:0D:AF:CB:CB:96:EF:E1:18:E8:A8:CC:7E:FF
Certificate issuer:       /CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Certificate serial:       01A051D10521B29592ED9B8C71DDAD54A747
Authority key identifier: 2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa
Signing time:             Sun 30 Aug 2026 08:37:27 +0000
ASPA not before:          Sun 30 Aug 2026 08:37:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205421
Providers:                AS: 35598
                          AS: 56694
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:51:d1:05:21:b2:95:92:ed:9b:8c:71:dd:ad:54:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
        Validity
            Not Before: Aug 30 08:37:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a19f3ee683fa10dafcbcb96efe118e8a8cc7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:de:6b:ba:eb:7a:20:e6:74:9a:9f:7c:da:ae:
                    83:81:a1:6a:44:c8:07:83:ee:43:01:92:14:16:16:
                    d6:96:bf:f9:39:21:3a:c2:c9:43:da:9a:a2:7b:83:
                    56:c6:08:f2:ae:78:0a:57:26:6f:1b:64:d8:9e:12:
                    c6:cd:3f:5d:6a:5d:ee:86:31:a8:b0:88:2b:e8:b7:
                    52:e6:79:b8:e3:b5:e7:e2:61:5d:99:a6:ec:75:08:
                    d5:a4:6b:8f:8b:90:c8:84:fa:b0:a8:47:0a:4f:00:
                    9c:9b:e6:6e:a7:22:7b:66:68:ec:be:5d:a8:3e:74:
                    8e:76:bd:9e:3d:5b:ed:29:34:69:89:e8:57:35:e9:
                    76:21:fe:4e:a0:67:58:24:8b:26:e7:28:0f:3f:10:
                    61:f8:ac:e5:64:4a:71:18:91:0e:04:6e:89:db:41:
                    03:2d:59:8f:8f:03:23:e8:ff:cd:fe:f6:96:e9:26:
                    91:36:51:fb:78:60:a6:d7:09:f3:6e:3c:c4:a6:b0:
                    da:c0:e1:45:96:d6:85:07:e1:93:af:e1:d2:d4:91:
                    57:34:c4:1a:e0:44:79:0d:8c:97:da:85:7b:87:27:
                    2c:70:29:b4:c8:5f:84:61:fe:82:a0:88:ae:fd:82:
                    b7:59:05:53:00:a8:17:ed:cc:f2:81:15:e9:5b:d0:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:F3:EE:68:3F:A1:0D:AF:CB:CB:96:EF:E1:18:E8:A8:CC:7E:FF
            X509v3 Authority Key Identifier:
                keyid:2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205421

    Signature Algorithm: sha256WithRSAEncryption
         21:34:d6:45:e5:9d:b1:2c:fd:97:7c:78:ed:eb:c8:dd:26:f4:
         e5:ef:ab:bc:fc:2a:5c:2a:38:94:f8:b3:c3:f4:9f:d8:6d:1c:
         fb:0b:78:95:34:e7:1e:d6:7d:3c:27:94:35:8f:bd:ef:6b:a0:
         49:a9:dc:3c:e9:4e:43:01:98:eb:c7:e4:9c:6a:66:c3:f2:d5:
         bb:ca:1a:33:9b:ac:e2:fb:4e:52:34:a9:49:1b:96:bd:83:28:
         01:dc:b9:ff:33:ab:8d:5d:d7:4e:58:b2:3b:a2:c2:51:f4:d1:
         38:50:5e:3c:fb:6d:21:fb:19:be:0d:41:d4:43:07:b2:a8:26:
         ea:7c:ff:24:bf:f2:38:dd:19:ab:05:fb:03:e7:8c:0b:b1:92:
         8a:42:f9:9b:7e:78:4d:17:89:7c:e2:96:34:c4:4d:50:b7:77:
         6f:8d:a9:eb:ac:16:75:5b:bf:38:db:2f:c2:47:87:85:da:85:
         93:21:62:ca:f2:5e:f6:87:5e:5b:7f:27:57:ec:ac:49:fb:ad:
         88:f8:6b:77:2f:59:36:0d:4e:b3:36:64:14:64:b5:9b:3e:6d:
         21:45:69:f1:5a:a1:8d:e2:02:c8:a8:39:4c:54:3b:bb:50:ba:
         d5:d5:ad:c5:91:cd:22:00:b2:1e:21:b1:82:78:59:bc:e7:ba:
         3a:c2:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:58 2026 by rpki-client