Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/3H4t6aVUO8WAiaJGghHZPFOuXds.asa
File:                     3H4t6aVUO8WAiaJGghHZPFOuXds.asa (raw, json)
Hash identifier:          w7cO7RuqXG62dr/GQ7Tdne9GWD9Usv0P33VC02W75Ss=
Subject key identifier:   DC:7E:2D:E9:A5:54:3B:C5:80:89:A2:46:82:11:D9:3C:53:AE:5D:DB
Certificate issuer:       /CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Certificate serial:       019FEBF0F9FCF19E7CA689FF8F05860CB614
Authority key identifier: 54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/3H4t6aVUO8WAiaJGghHZPFOuXds.asa
Signing time:             Mon 10 Aug 2026 13:51:06 +0000
ASPA not before:          Mon 10 Aug 2026 13:51:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199180
Providers:                AS: 13335
                          AS: 21859
                          AS: 50340
                          AS: 58212
                          AS: 60068
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:eb:f0:f9:fc:f1:9e:7c:a6:89:ff:8f:05:86:0c:b6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
        Validity
            Not Before: Aug 10 13:51:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc7e2de9a5543bc58089a2468211d93c53ae5ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:f7:f4:1d:7f:e6:8a:45:a4:59:0b:9a:48:
                    9d:39:69:27:af:76:50:12:11:52:6c:ed:28:b3:1f:
                    f3:18:21:de:6d:df:aa:79:9a:b3:57:af:59:cb:c7:
                    4e:16:74:9e:de:06:6c:89:34:5d:c2:f6:b4:e8:6d:
                    c8:e7:0c:f5:cb:6f:32:2f:d9:53:29:4f:16:2e:50:
                    b6:c9:26:0b:ce:7d:3b:e2:d2:fe:95:3d:40:ee:2c:
                    5d:99:9f:95:8b:a1:d3:37:f6:84:74:5f:9f:85:e0:
                    58:13:37:61:6d:81:5d:df:49:a2:f1:e3:7e:81:f0:
                    6e:32:c5:6d:23:b7:28:cd:56:1b:f0:c0:7b:47:a2:
                    c6:a1:41:58:44:da:c3:db:26:79:22:9e:e2:06:f7:
                    f7:1f:c4:8f:1f:f9:bb:90:c5:93:b8:08:63:28:e2:
                    d1:91:62:b0:18:04:a6:1a:87:d6:fe:31:42:91:2e:
                    19:37:e5:be:cf:9c:dc:86:87:3b:fc:99:0d:06:f2:
                    6a:9a:b4:f2:45:ae:87:01:f5:b6:76:41:d2:83:51:
                    74:82:1e:82:72:dd:e5:7d:8d:8b:cd:3d:49:f8:60:
                    33:55:46:81:3d:b9:e5:2f:3f:e2:c1:ec:e3:1e:5a:
                    9c:1d:19:0c:63:cd:2a:84:81:2a:f1:87:15:f1:a3:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:2D:E9:A5:54:3B:C5:80:89:A2:46:82:11:D9:3C:53:AE:5D:DB
            X509v3 Authority Key Identifier:
                keyid:54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/3H4t6aVUO8WAiaJGghHZPFOuXds.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199180

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:5b:c2:e6:57:eb:c6:9d:66:be:78:83:38:d9:90:66:2c:
         9d:c2:96:0d:ca:cf:ee:aa:56:fd:18:f5:a9:98:26:51:8e:75:
         7e:c6:5b:2d:5d:dc:43:a0:4b:e1:02:da:db:91:0a:e1:7a:76:
         18:ef:4a:6d:2f:dc:bb:00:62:e6:18:a3:b3:af:d8:23:a7:20:
         26:b2:6e:ba:76:6e:85:23:30:71:4e:70:ad:f3:a4:2e:f2:3f:
         47:de:6a:1b:bc:ac:7e:c8:d9:ef:2b:4f:ab:fd:e6:9c:32:9b:
         35:82:d4:63:bb:b3:68:cf:23:da:52:65:53:d9:9f:d2:1f:8e:
         d4:53:ec:88:47:d4:25:58:70:b1:f7:b5:22:44:63:82:2b:a0:
         f8:a3:e7:ac:9d:29:c6:ea:8c:f4:fe:3d:d7:79:75:51:ff:2c:
         b7:72:fb:55:a6:85:d8:30:f1:22:42:21:9f:24:64:ef:d1:df:
         e4:65:b5:9f:6b:49:68:ae:90:14:d3:7a:95:fc:b3:ad:ff:18:
         67:1f:4c:cf:d2:58:47:60:29:c5:00:5e:71:e5:08:f3:82:b7:
         da:65:c5:ff:91:a5:73:75:e9:2d:16:62:f5:8b:5f:9d:72:68:
         27:4a:a3:90:26:81:ab:b7:19:60:b3:ba:64:a4:5c:4a:cd:00:
         e2:5d:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:03 2026 by rpki-client