Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa
File:                     IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (raw, json)
Hash identifier:          MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=
Subject key identifier:   20:83:F5:CB:46:20:9E:79:3E:9B:D9:E3:94:B9:05:46:01:CE:88:94
Certificate issuer:       /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial:       019F7512CCFEC428316F5467A0DAFE82AC3B
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa
Signing time:             Sat 18 Jul 2026 11:53:14 +0000
ASPA not before:          Sat 18 Jul 2026 11:53:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214968
Providers:                AS: 10977
                          AS: 44324
                          AS: 53808
                          AS: 150369
                          AS: 204539
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:75:12:cc:fe:c4:28:31:6f:54:67:a0:da:fe:82:ac:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
        Validity
            Not Before: Jul 18 11:53:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2083f5cb46209e793e9bd9e394b9054601ce8894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:6a:e2:e3:ba:4b:15:7a:1e:0a:78:83:00:
                    be:0e:c5:70:33:3b:bd:c8:43:de:70:e4:01:75:9b:
                    9f:9c:c1:c7:66:c8:5f:61:62:3a:99:f7:17:b9:1c:
                    b7:2a:0d:8f:74:aa:32:c5:b1:25:cb:c2:2c:47:6e:
                    83:f4:c0:ea:dd:4f:5b:26:59:3c:68:39:59:3a:94:
                    53:1c:78:1e:04:c1:80:87:44:fc:e1:5c:54:a1:f0:
                    c2:9c:24:8b:ce:b6:8f:27:ac:b0:ca:e3:09:b1:bf:
                    be:6f:1d:55:86:95:56:9e:d0:0b:e1:41:52:da:f5:
                    be:32:54:2f:c6:13:28:f4:c6:b2:44:d0:9b:9d:20:
                    58:bd:65:01:7b:88:f7:30:5c:3c:2c:50:79:ad:49:
                    39:a5:54:6e:82:c0:16:d5:d5:9e:c4:90:3b:32:5c:
                    56:6d:ac:34:82:b8:be:12:79:16:8b:ef:ec:4a:d6:
                    8d:c0:38:4b:cf:6f:57:ab:04:d4:51:b4:a1:01:df:
                    99:69:ba:ea:84:cb:f8:14:db:82:04:a6:27:23:b8:
                    c4:6d:55:ec:53:b2:99:fd:84:1c:ea:19:0e:f4:db:
                    dc:34:c8:25:4e:e2:91:f2:50:6d:54:ad:93:8f:d6:
                    70:5e:d4:88:85:cd:b7:6a:03:6b:22:de:10:48:98:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:F5:CB:46:20:9E:79:3E:9B:D9:E3:94:B9:05:46:01:CE:88:94
            X509v3 Authority Key Identifier:
                keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214968

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:f2:ab:0b:96:72:dc:60:e1:34:66:73:85:18:ba:d7:b7:
         d7:d5:c3:f0:68:a9:63:d2:f4:bb:bd:3f:15:46:88:1d:b8:c1:
         e1:d7:3f:29:5d:cb:a2:46:ed:21:e4:df:be:9f:6a:f9:e7:e7:
         f7:b6:31:25:63:bf:1e:b1:3e:ff:b2:4e:b5:31:88:a3:c1:c8:
         d1:26:78:68:00:3c:5b:8a:0e:6d:49:a4:aa:47:f2:e5:b1:c2:
         bd:83:11:4c:76:eb:02:bf:d4:91:d7:73:de:31:02:1f:5d:9c:
         21:86:9b:52:a4:fa:9f:f4:ef:fd:2f:ea:3f:e4:3a:ba:cc:3b:
         be:1e:63:74:b9:0f:19:ae:6a:21:31:d9:8b:68:90:87:a8:79:
         41:07:7a:19:85:2a:d1:39:d8:dc:02:76:df:d7:3d:b7:e3:d1:
         ed:04:84:64:aa:1e:24:bf:8b:61:d3:fb:d9:c4:2d:e2:7b:9a:
         cd:0e:3c:c3:2a:00:27:73:05:41:16:5e:94:84:1e:34:a9:14:
         e3:a4:a9:98:29:28:b9:98:c8:68:4d:6a:0e:a4:79:7e:6f:88:
         d9:b6:3b:52:60:11:a6:37:b9:62:35:38:e5:e3:e8:2a:b6:dc:
         dd:a4:e8:36:d0:d7:a5:18:dd:eb:4e:da:3d:31:a8:bc:ab:c3:
         50:6f:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 12:30:09 2026 by rpki-client