Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uLiGUdUp1QE06JM9iAdiQtpMvk8.asa
File:                     uLiGUdUp1QE06JM9iAdiQtpMvk8.asa (raw, json)
Hash identifier:          fjrERIKL6/G/sI3dbhERzZVvKqNbAbtJ0HpWMjXdBu8=
Subject key identifier:   B8:B8:86:51:D5:29:D5:01:34:E8:93:3D:88:07:62:42:DA:4C:BE:4F
Certificate issuer:       /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial:       019CD770A99469A2E4C571D6BA19989C5ECF
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uLiGUdUp1QE06JM9iAdiQtpMvk8.asa
Signing time:             Tue 10 Mar 2026 11:10:10 +0000
ASPA not before:          Tue 10 Mar 2026 11:10:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196954
Providers:                AS: 1299
                          AS: 5405
                          AS: 6939
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d7:70:a9:94:69:a2:e4:c5:71:d6:ba:19:98:9c:5e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
        Validity
            Not Before: Mar 10 11:10:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8b88651d529d50134e8933d88076242da4cbe4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:58:59:9d:4b:02:f0:0c:2e:5e:6d:2b:66:
                    f0:86:bc:44:0f:ef:35:3f:46:e9:a3:a9:7d:05:48:
                    25:25:2f:66:b4:a5:3b:d3:f7:49:c9:72:8a:a7:86:
                    2f:43:e1:b3:d0:a9:10:62:d6:d1:ee:8e:29:0d:83:
                    f1:38:26:73:ec:14:63:68:cd:cb:06:00:9c:6e:17:
                    74:cb:68:9e:db:ba:f5:f1:49:9d:1c:fc:19:41:ef:
                    c9:1a:49:7a:21:a4:45:d5:fa:b9:27:ee:4b:77:9a:
                    89:74:4f:97:78:97:3a:a4:1a:64:b8:2c:a6:16:36:
                    09:c7:9d:ba:79:80:53:da:36:87:10:b2:08:22:20:
                    97:24:7e:05:2f:40:88:c1:01:b3:f1:7d:02:0d:28:
                    f9:b6:d7:1d:5b:11:5a:05:e4:78:a8:18:66:04:03:
                    24:b0:21:63:f1:7c:f1:2f:81:01:74:dc:30:49:2c:
                    63:d4:41:de:e6:5b:3c:d5:70:73:7c:40:9a:f9:d2:
                    c3:21:58:3c:83:f8:69:1d:6c:23:61:7f:92:2f:74:
                    90:8d:69:e7:3d:2a:a6:57:4f:f0:f6:e4:01:d9:a8:
                    ce:fb:5c:dc:6b:75:9d:b7:97:e6:ad:0d:d8:e8:a1:
                    f9:66:18:36:fc:f4:aa:44:fc:08:18:fd:54:22:92:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B8:86:51:D5:29:D5:01:34:E8:93:3D:88:07:62:42:DA:4C:BE:4F
            X509v3 Authority Key Identifier:
                keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uLiGUdUp1QE06JM9iAdiQtpMvk8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196954

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:37:39:3b:91:9d:23:87:39:f9:e3:07:d7:db:56:00:6d:
         87:40:b1:84:2b:50:51:33:02:fb:a9:a3:47:af:97:12:b8:6a:
         4d:29:ff:88:3b:fd:a3:4b:8d:aa:67:76:a0:9d:a4:e0:77:fc:
         55:60:c0:59:78:e8:b8:e9:8e:e3:68:7d:28:cb:b6:f5:4f:56:
         40:ea:45:a1:6c:7b:82:76:ac:e8:98:18:39:ed:8b:f6:b3:6c:
         ee:47:0e:7f:96:84:fd:74:bb:03:ec:34:16:ed:51:af:33:9f:
         7f:ea:2d:8d:d7:f8:3a:5a:e9:c9:01:d4:eb:e6:5d:1b:f0:37:
         bf:27:96:e9:5c:07:f4:f3:3b:3c:6f:0a:91:b9:da:e4:4d:e5:
         e8:90:8b:95:da:7f:f2:07:44:a9:9e:5e:6b:5b:90:ae:d7:64:
         79:83:5c:38:e9:27:ff:05:9c:c2:db:82:c5:a1:e2:51:26:90:
         13:23:ed:05:85:51:8e:21:28:af:5d:83:a1:18:56:95:7b:d8:
         de:b3:58:20:43:a2:b5:7c:86:b0:89:bd:e9:ce:02:54:2a:6a:
         a9:d6:f1:1d:b9:a6:98:0b:9c:32:af:bf:e6:c2:ef:cc:5a:4d:
         9e:47:3d:0f:ee:39:52:0b:c1:ce:6b:ef:ce:92:9f:d8:5e:1f:
         73:3c:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:59:33 2026 by rpki-client