Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/4GwizHDiJW34eVbsS1zqAhW5bAA.asa
File:                     4GwizHDiJW34eVbsS1zqAhW5bAA.asa (raw, json)
Hash identifier:          tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=
Subject key identifier:   E0:6C:22:CC:70:E2:25:6D:F8:79:56:EC:4B:5C:EA:02:15:B9:6C:00
Certificate issuer:       /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial:       019DA937D10EA5D418E53757C032D2999149
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/4GwizHDiJW34eVbsS1zqAhW5bAA.asa
Signing time:             Mon 20 Apr 2026 04:48:20 +0000
ASPA not before:          Mon 20 Apr 2026 04:48:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206058
Providers:                AS: 34927
                          AS: 212895
                          AS: 214675
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a9:37:d1:0e:a5:d4:18:e5:37:57:c0:32:d2:99:91:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
        Validity
            Not Before: Apr 20 04:48:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e06c22cc70e2256df87956ec4b5cea0215b96c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:af:6b:f2:d9:ea:b5:3c:4b:7c:c6:dd:49:
                    81:3e:8d:2f:23:8f:23:1d:86:3f:7f:70:2f:a9:0f:
                    ac:6a:90:b1:a4:a5:3b:06:a4:73:02:46:c5:c7:b3:
                    c8:a5:f0:4b:e2:5f:d8:f5:1d:4a:a3:e4:ec:a3:9e:
                    4c:2c:f5:1a:8f:0e:bd:3c:f0:86:a0:8d:d3:4c:f0:
                    ec:da:fd:dc:7b:2a:b8:98:e3:29:74:2c:93:3b:93:
                    ad:67:68:06:82:35:ba:ac:f6:6e:e7:2b:e1:4b:0f:
                    b5:6d:25:d3:30:04:dc:95:c3:3e:8a:1c:31:e0:12:
                    fc:70:41:87:48:23:f9:c3:99:8d:95:ff:ed:19:69:
                    41:70:64:12:3c:ba:ed:e0:bb:a0:87:17:62:81:db:
                    25:95:12:ee:69:30:ff:e8:2a:17:1e:4c:3c:43:51:
                    2a:ac:c0:eb:c4:43:4b:4e:c6:1b:ce:94:24:b8:1f:
                    34:21:e9:e3:61:05:bb:5a:a5:e6:28:b4:34:74:e3:
                    ea:26:1a:01:ba:4a:0d:64:b1:ea:9f:c5:bf:9a:28:
                    a5:28:fa:b9:5b:89:8a:1d:bc:0a:5f:19:a4:c5:6b:
                    f2:a5:11:89:64:3b:77:bc:3b:4c:0e:c2:99:13:08:
                    a5:aa:da:e3:54:68:67:a3:0b:fa:20:b5:0f:67:b0:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:22:CC:70:E2:25:6D:F8:79:56:EC:4B:5C:EA:02:15:B9:6C:00
            X509v3 Authority Key Identifier:
                keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/4GwizHDiJW34eVbsS1zqAhW5bAA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206058

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:42:e1:bd:c9:d8:cb:48:89:60:29:42:70:5f:81:58:ff:
         b7:c4:fb:03:ea:e7:7e:08:ef:99:38:27:9a:d3:a8:a7:f8:49:
         82:af:8d:21:0b:da:07:0f:d3:dd:c8:5c:c2:db:de:c1:8f:11:
         3a:2b:6d:f4:13:35:77:fb:55:5c:f0:a7:4a:7f:10:93:00:8b:
         9f:a1:d8:3e:f1:c0:f4:92:1c:79:bb:f8:f4:1b:33:47:67:72:
         be:2b:97:f2:a4:54:09:b7:2f:58:94:21:ae:b0:ef:d1:62:e1:
         49:75:4a:a0:a4:3c:0c:86:a6:25:28:a4:dd:63:c8:9c:7c:fa:
         1a:e7:58:b4:70:d0:9b:59:b0:2b:cf:a4:a5:8a:41:43:aa:6b:
         4e:f3:29:1f:ce:d4:68:36:c4:56:ca:b6:62:2c:fb:89:72:ae:
         20:b5:af:aa:ff:91:26:cb:ad:06:47:8e:61:65:f4:92:21:8d:
         b2:1c:95:e7:36:8a:00:19:be:b8:07:1e:5c:a7:aa:2c:4d:3c:
         1c:03:eb:79:3d:d1:7f:f3:9a:39:d2:a4:1e:25:86:cb:0d:a3:
         0a:d5:56:5b:0f:3a:8c:d8:7a:66:95:6f:c9:a7:a0:e3:00:c6:
         92:64:d3:bf:38:0b:cb:af:81:af:6a:df:43:aa:43:02:20:47:
         f9:11:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:40:19 2026 by rpki-client