Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/qeUHZtnPD-NmkCbhWl9Z3Vhbpuk.asa
File:                     qeUHZtnPD-NmkCbhWl9Z3Vhbpuk.asa (raw, json)
Hash identifier:          UOGMmIzeH+bgLM/5CJEFkq46ttFJLEICvgKfPJi3WNs=
Subject key identifier:   A9:E5:07:66:D9:CF:0F:E3:66:90:26:E1:5A:5F:59:DD:58:5B:A6:E9
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019CED873F5D7FC614197876FF37421448F9
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/qeUHZtnPD-NmkCbhWl9Z3Vhbpuk.asa
Signing time:             Sat 14 Mar 2026 18:06:29 +0000
ASPA not before:          Sat 14 Mar 2026 18:06:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204464
Providers:                AS: 11967
                          AS: 24381
                          AS: 34800
                          AS: 34927
                          AS: 41051
                          AS: 44393
                          AS: 49581
                          AS: 56755
                          AS: 58057
                          AS: 205305
                          AS: 212232
                          AS: 212895
                          AS: 213409
                          AS: 213413
                          AS: 213449
                          AS: 214420
                          AS: 215569
                          AS: 215828
                          AS: 393577
                          AS: 400212
                          AS: 401753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:87:3f:5d:7f:c6:14:19:78:76:ff:37:42:14:48:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Mar 14 18:06:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9e50766d9cf0fe3669026e15a5f59dd585ba6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:36:aa:f3:ea:64:99:62:b2:41:ca:5f:ad:
                    e4:a7:80:13:36:82:e6:0e:c6:f0:46:3a:4e:db:d5:
                    eb:e4:72:7e:17:4d:fe:8b:10:5d:bc:bc:93:49:5b:
                    2a:09:78:f0:4b:c6:a3:ae:90:4a:34:24:38:84:33:
                    78:8a:73:7d:9d:a4:77:61:67:01:92:98:6b:68:ed:
                    25:9f:1c:66:fa:68:8b:0f:a5:3a:1c:ba:9e:cc:df:
                    ed:f7:40:9c:ea:38:ab:3b:a0:c3:21:cf:c7:57:fc:
                    9d:8e:b4:77:6c:7d:d5:34:31:80:d2:25:fd:f2:c5:
                    61:2d:a3:eb:86:2d:00:6c:be:28:7a:77:30:20:57:
                    82:1b:ae:aa:da:9b:54:a2:a6:f0:20:2c:42:b9:82:
                    b0:52:51:eb:d3:1b:d9:de:3b:70:56:60:31:b4:d0:
                    26:d4:4c:15:07:c2:fc:c0:a5:58:7e:ef:3f:60:7f:
                    b7:a5:90:0d:c5:c9:83:48:7b:7b:53:da:a1:97:f2:
                    fc:22:85:cc:e3:43:6c:ef:da:fa:61:92:79:61:73:
                    46:3a:51:1e:05:a5:ec:32:4f:a2:6e:df:a9:48:b7:
                    34:f1:93:80:cf:cb:e1:c8:53:90:ea:ab:bf:fe:22:
                    68:ad:a1:4d:ce:57:1e:a0:74:98:41:7f:10:52:1c:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:07:66:D9:CF:0F:E3:66:90:26:E1:5A:5F:59:DD:58:5B:A6:E9
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/qeUHZtnPD-NmkCbhWl9Z3Vhbpuk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:1b:fe:21:78:4d:7c:4f:0f:1f:87:ec:77:94:90:38:9c:
         d6:8c:df:b9:37:86:ae:6f:bd:26:cc:fb:de:aa:2c:7a:4b:3c:
         64:52:79:56:75:e2:72:f2:d7:a7:a6:8c:fc:97:2e:5f:bb:32:
         37:86:25:9e:0d:ad:fd:41:f9:0d:04:52:8f:b7:ab:d2:4c:6d:
         30:ae:67:8b:65:73:14:18:cc:75:7f:f9:8b:18:44:69:98:4a:
         31:20:8d:a4:a0:2d:9d:5b:17:91:89:08:a0:61:3a:43:b3:0f:
         47:66:a7:ba:b9:26:4c:b8:12:5d:06:ae:ad:cc:21:46:a9:22:
         a1:c0:a9:15:a3:1d:02:01:36:5d:f7:88:1f:a7:20:45:8d:47:
         8a:f6:89:73:99:91:39:21:42:67:5b:2c:49:93:76:5b:f3:3c:
         0c:f8:48:c5:dd:7d:45:66:f6:22:3f:6f:ef:17:2d:fd:50:59:
         38:b9:ab:8e:6d:08:7f:53:10:6c:2a:2b:f7:ec:2b:25:50:51:
         28:8d:12:57:ae:e7:23:b2:87:55:0a:91:1f:a7:f7:6d:e4:f4:
         13:65:6a:3f:81:7b:60:1f:63:74:90:de:be:86:68:75:31:aa:
         02:6d:59:f0:7d:35:6a:1f:a0:5e:c4:a1:16:e0:7a:d1:b6:20:
         9f:91:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:51 2026 by rpki-client