Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/iw9WZDWgFCTAdcM0Ceacps_7PUo.asa
File:                     iw9WZDWgFCTAdcM0Ceacps_7PUo.asa (raw, json)
Hash identifier:          WOvb0BEHytQ6Z6U2Fu/r6GcfBJg5QddQkcnGi51kSVI=
Subject key identifier:   8B:0F:56:64:35:A0:14:24:C0:75:C3:34:09:E6:9C:A6:CF:FB:3D:4A
Certificate issuer:       /CN=472617c340b77750d13b8787930e477dab5aa584
Certificate serial:       01A1128850BFA225E05EDFDF91158C8D344C
Authority key identifier: 47:26:17:C3:40:B7:77:50:D1:3B:87:87:93:0E:47:7D:AB:5A:A5:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/iw9WZDWgFCTAdcM0Ceacps_7PUo.asa
Signing time:             Tue 06 Oct 2026 18:44:45 +0000
ASPA not before:          Tue 06 Oct 2026 18:44:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213367
Providers:                AS: 47272
                          AS: 199829
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:88:50:bf:a2:25:e0:5e:df:df:91:15:8c:8d:34:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472617c340b77750d13b8787930e477dab5aa584
        Validity
            Not Before: Oct  6 18:44:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b0f566435a01424c075c33409e69ca6cffb3d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:04:c7:a7:a0:c8:10:34:7c:42:35:da:c9:
                    24:0a:df:42:a8:5f:a6:8b:b8:77:87:3d:f2:4c:34:
                    7d:52:f8:0e:4d:7f:60:0d:4e:b8:32:2f:5a:d6:84:
                    55:00:b3:f2:3b:bd:6c:5d:fd:07:a7:0a:b0:30:6c:
                    f3:da:6c:3b:87:a3:7e:58:d9:cd:dd:a0:4b:f3:31:
                    d1:17:f9:8c:6f:34:18:00:3c:42:3e:be:f5:4d:0e:
                    a5:03:49:fa:b7:a6:4a:7f:05:d9:b2:10:2f:7c:48:
                    4b:1f:f3:88:dc:4e:98:b3:26:bf:9e:75:a5:98:b9:
                    7e:44:3a:2b:bb:c0:c8:3f:d1:d5:43:77:a5:fd:b1:
                    30:b3:ce:b0:a7:6d:17:41:ed:20:83:1b:df:57:23:
                    fe:1e:1f:7a:d1:99:4d:5d:9a:9c:fc:ef:33:27:d8:
                    f1:6e:42:c4:9f:fc:80:b1:30:2f:ae:10:d9:21:df:
                    84:5b:34:0f:31:19:9a:af:07:db:7d:92:ce:5c:63:
                    36:67:52:ff:a4:59:ca:0a:fb:bb:03:85:5a:65:6f:
                    f4:a1:36:f2:79:46:f8:4b:00:7f:82:51:db:23:01:
                    be:a9:c6:b6:ad:0b:b6:79:60:e7:7c:39:bf:22:42:
                    df:62:aa:73:20:dc:5c:5d:62:f6:ce:88:a8:c5:aa:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:56:64:35:A0:14:24:C0:75:C3:34:09:E6:9C:A6:CF:FB:3D:4A
            X509v3 Authority Key Identifier:
                keyid:47:26:17:C3:40:B7:77:50:D1:3B:87:87:93:0E:47:7D:AB:5A:A5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/iw9WZDWgFCTAdcM0Ceacps_7PUo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213367

    Signature Algorithm: sha256WithRSAEncryption
         57:31:40:2b:62:bd:06:43:74:d7:e1:04:13:bd:b7:a1:ec:f6:
         3d:52:5d:cd:cc:f6:fc:7e:c4:2e:95:3d:de:24:22:66:4e:ab:
         33:e0:6f:9c:ad:e8:18:07:69:eb:50:af:80:dc:b4:bc:cb:c6:
         ad:74:d7:78:78:6b:5b:7e:2c:4f:36:b2:1a:3e:8d:ae:45:a5:
         d6:4e:cc:0b:3e:44:9e:2f:ac:95:02:d2:55:c6:df:08:87:b5:
         cc:45:50:e5:4e:43:70:a8:a1:e4:57:2b:95:05:a9:a2:4b:48:
         42:9d:ac:6d:7b:7f:9e:0d:08:01:79:e3:4b:91:24:c3:54:c5:
         ca:23:d5:15:ff:06:58:5e:38:ce:f9:8c:25:f3:cb:23:46:c4:
         29:45:0a:c7:0f:7b:6d:d7:84:88:e0:9b:13:fd:1c:26:89:d6:
         6a:b4:a3:cb:a3:0a:07:1a:f9:22:df:2f:3a:c3:90:84:07:0b:
         e9:33:1e:d5:a0:1b:3d:1c:c1:43:a0:4c:ed:00:fd:9f:3c:92:
         ba:ce:ef:72:2e:7f:52:00:52:d0:1f:4c:a9:11:2b:36:a9:b7:
         9a:8c:5e:42:2a:72:4a:4a:19:76:a0:ea:70:3b:15:b9:f2:97:
         fa:1b:65:5c:b8:c8:29:6a:de:8d:19:66:28:47:ec:5b:42:c8:
         e2:fe:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:31 2026 by rpki-client