Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/xTtDR4yokQ7U_bsMzZ8Y6phU9gs.asa
File:                     xTtDR4yokQ7U_bsMzZ8Y6phU9gs.asa (raw, json)
Hash identifier:          prFmwAXqESBX8SXJA0lfRIHoBHkJdTngIBMS4TtzhUo=
Subject key identifier:   C5:3B:43:47:8C:A8:91:0E:D4:FD:BB:0C:CD:9F:18:EA:98:54:F6:0B
Certificate issuer:       /CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Certificate serial:       01A0F005AE774898873B7F715D94E3C50E8F
Authority key identifier: DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/xTtDR4yokQ7U_bsMzZ8Y6phU9gs.asa
Signing time:             Wed 30 Sep 2026 01:54:59 +0000
ASPA not before:          Wed 30 Sep 2026 01:54:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218751
Providers:                AS: 51396
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:05:ae:77:48:98:87:3b:7f:71:5d:94:e3:c5:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda09e472b9c25a85ff23c9db2420a496087fa56
        Validity
            Not Before: Sep 30 01:54:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c53b43478ca8910ed4fdbb0ccd9f18ea9854f60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:86:6b:b7:35:8e:41:c8:ab:05:81:b2:3f:
                    97:4e:e4:7b:6e:38:68:8a:2b:32:7a:12:2e:00:71:
                    b6:7a:eb:57:23:f9:79:c6:57:95:0d:84:3f:49:2d:
                    06:a4:71:2e:76:93:9d:7d:9d:cc:5b:4c:0b:e4:fd:
                    68:b4:56:92:44:9e:ef:da:e6:b1:05:6e:0f:a1:84:
                    d7:b7:eb:75:21:93:2e:a3:fc:51:23:ec:89:a9:eb:
                    8b:fa:db:82:99:e1:f4:00:70:5d:88:db:61:43:b5:
                    bb:fa:e3:04:22:5f:f3:27:58:f7:78:fb:5c:e3:52:
                    d9:d4:35:68:9d:e0:e6:34:27:c5:34:be:2e:cb:d3:
                    9c:a8:80:b6:d8:a8:26:ab:6f:7f:f1:0f:61:7f:00:
                    68:33:8a:eb:05:22:e4:19:80:e3:55:9f:5c:b5:7b:
                    1b:9e:f7:21:91:1d:f0:45:78:70:fb:e1:2c:56:8d:
                    70:e5:ab:99:76:24:9a:18:ad:25:7d:dd:f1:74:f2:
                    9c:81:50:c7:32:41:58:6a:37:45:c2:60:44:b5:69:
                    5d:2a:84:46:6c:f1:eb:27:14:18:82:d1:0b:9c:3e:
                    90:c1:fc:d0:9e:38:16:18:57:23:8d:57:f1:29:cd:
                    8a:83:55:d9:3b:76:93:db:a6:65:65:06:9f:79:3e:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:43:47:8C:A8:91:0E:D4:FD:BB:0C:CD:9F:18:EA:98:54:F6:0B
            X509v3 Authority Key Identifier:
                keyid:DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/xTtDR4yokQ7U_bsMzZ8Y6phU9gs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218751

    Signature Algorithm: sha256WithRSAEncryption
         11:77:ac:62:a2:2d:91:02:ef:a2:14:1d:9e:c4:ca:6d:78:2c:
         bc:7f:0b:fc:f4:0f:1d:3e:de:2c:51:e6:9c:3d:76:b5:8b:57:
         e9:d1:5f:7f:53:84:69:26:74:01:b6:29:f7:32:ca:d9:63:25:
         bb:e8:0b:e1:17:f4:22:b9:22:d9:be:85:39:e1:95:72:30:f9:
         9f:9e:af:3a:16:a4:15:4d:47:e6:58:65:88:e5:f3:42:11:c6:
         d9:9b:8d:5a:71:d8:c9:bf:1e:40:f3:fd:5a:df:74:0f:1a:43:
         8a:6c:c2:a1:24:2f:6a:1e:51:06:65:2b:a7:7e:8c:2c:07:b3:
         b5:b9:8c:09:05:6a:e3:50:28:5b:62:73:9f:6a:ae:1b:56:67:
         15:42:a0:ae:b4:36:d3:5b:94:67:0d:12:87:ea:29:55:7e:fc:
         6b:70:a6:72:95:e7:04:60:97:40:e9:b5:3e:e3:13:09:ed:f1:
         f3:06:b0:49:bf:73:4a:cb:28:48:e6:e4:41:9c:95:0d:d2:1f:
         5f:95:18:f8:1e:f5:74:8b:b0:cc:77:47:c6:25:27:2c:d5:08:
         f0:fd:94:81:e4:0b:f3:67:18:60:33:6e:c4:75:8b:94:b6:cb:
         3e:40:cf:07:0f:f6:94:c6:f6:2e:9a:22:57:30:65:73:82:76:
         a2:98:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:23 2026 by rpki-client