Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/Zd2PZJM2-BoHB9V0Vm2TLCeAKws.asa
File:                     Zd2PZJM2-BoHB9V0Vm2TLCeAKws.asa (raw, json)
Hash identifier:          OpJX3qnH2PFs+bU0xU6kT7vgyoAOLVzFICTCuQQVC9g=
Subject key identifier:   65:DD:8F:64:93:36:F8:1A:07:07:D5:74:56:6D:93:2C:27:80:2B:0B
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       019FFB26220161CE3E2A26D2B7B27274F0B3
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/Zd2PZJM2-BoHB9V0Vm2TLCeAKws.asa
Signing time:             Thu 13 Aug 2026 12:43:27 +0000
ASPA not before:          Thu 13 Aug 2026 12:43:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212170
Providers:                AS: 34779
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:26:22:01:61:ce:3e:2a:26:d2:b7:b2:72:74:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Aug 13 12:43:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65dd8f649336f81a0707d574566d932c27802b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:55:6e:4c:b1:1e:8a:e6:0a:de:f7:09:ce:
                    9c:2e:c6:61:86:86:48:2d:91:50:ef:88:e1:bb:3a:
                    ec:7f:9a:df:be:f3:2d:f0:e3:2c:aa:51:8a:c0:c1:
                    d9:11:1c:48:13:6f:55:74:6c:5a:5c:37:7a:3c:ab:
                    d8:47:0d:1b:2c:6b:8e:5a:98:73:ca:13:00:30:a3:
                    53:60:33:69:85:e0:a0:9d:5f:3d:b0:b0:d4:fa:ad:
                    21:4f:23:c7:2a:04:75:c4:49:70:b7:3c:b3:0b:f7:
                    cf:81:1f:fd:60:19:1a:33:d7:e9:81:9a:43:00:ea:
                    28:5b:15:56:40:03:cc:06:83:d6:28:bb:7b:66:9b:
                    50:72:f8:d0:18:5e:61:95:32:d1:e0:75:61:48:13:
                    15:72:8b:b0:a0:a0:31:cd:d2:ee:22:af:ed:ad:98:
                    eb:b0:71:c1:7a:fa:af:67:94:b4:8a:c1:63:23:72:
                    d6:c7:e7:03:94:ca:79:39:58:0f:58:bc:4b:97:3c:
                    95:12:a0:3b:d8:10:92:24:fc:f4:03:ec:e2:0b:9f:
                    90:5f:9a:8e:fc:fd:4c:15:22:32:63:e3:c4:c2:2c:
                    8e:16:60:c9:a9:3f:b0:1c:7a:d8:16:96:28:cb:6e:
                    8c:c2:38:bf:10:a1:d1:cc:be:e1:50:1f:d8:f4:a8:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:8F:64:93:36:F8:1A:07:07:D5:74:56:6D:93:2C:27:80:2B:0B
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/Zd2PZJM2-BoHB9V0Vm2TLCeAKws.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212170

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:ca:69:09:dc:0a:ab:10:0d:ac:f8:31:31:f5:48:6a:45:
         ca:74:d5:0f:e6:87:bc:31:61:74:d0:8b:fd:5e:4b:01:a9:ca:
         0d:12:7d:de:d3:46:75:95:28:71:e6:7c:7f:08:eb:e3:64:8c:
         a3:12:1e:f2:1e:31:f8:39:0d:1c:77:42:f4:bf:1d:f3:a8:20:
         84:31:fc:5f:18:15:a5:e4:2f:34:67:4c:d5:39:39:48:08:91:
         b6:f1:35:b2:cb:3e:bb:c0:91:97:2c:7a:b8:fb:c0:e9:17:d6:
         8d:0a:df:06:41:bd:cb:52:4a:ff:65:52:50:4e:6a:1d:12:5b:
         2d:44:88:38:91:1a:c1:0a:02:62:05:6c:3c:5d:43:9f:a4:a6:
         4f:54:0a:ed:32:eb:2f:e2:99:3b:13:db:ed:54:09:c4:a2:a2:
         6b:ca:53:b5:38:a0:c1:92:2f:29:14:3c:3c:c9:f9:23:3d:fa:
         ff:5a:aa:f0:1b:47:b6:8f:82:a0:b5:b2:c5:34:5b:01:c6:fc:
         39:e6:cb:a0:a6:b1:29:cc:02:ba:41:8b:fb:fb:c4:60:4a:e0:
         50:23:ad:27:ae:43:b7:8b:51:94:38:85:03:04:a3:e7:b2:80:
         47:a4:7b:4f:63:89:cd:c0:68:81:50:22:a0:1e:88:f2:1d:75:
         86:b7:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 19:56:23 2026 by rpki-client