Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/YUvBprPTRfZZcuIZT5c81ftcfmE.asa
File:                     YUvBprPTRfZZcuIZT5c81ftcfmE.asa (raw, json)
Hash identifier:          53yTBzuypoSdIg4y84fPhABfxj/Iwufg2RICzEJXFBY=
Subject key identifier:   61:4B:C1:A6:B3:D3:45:F6:59:72:E2:19:4F:97:3C:D5:FB:5C:7E:61
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       019DBA460E41DDA337D3F4062EBD082910FE
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/YUvBprPTRfZZcuIZT5c81ftcfmE.asa
Signing time:             Thu 23 Apr 2026 12:17:26 +0000
ASPA not before:          Thu 23 Apr 2026 12:17:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199455
Providers:                AS: 6908
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ba:46:0e:41:dd:a3:37:d3:f4:06:2e:bd:08:29:10:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: Apr 23 12:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=614bc1a6b3d345f65972e2194f973cd5fb5c7e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:67:0c:08:5d:28:69:05:d9:70:7f:99:fd:
                    0a:28:94:42:97:11:3f:b7:d1:ac:83:7a:9e:a6:95:
                    f7:94:22:26:e9:6b:c6:12:27:16:6e:c4:eb:0b:0f:
                    63:37:47:ec:31:96:9f:29:0d:8e:9f:77:76:22:b2:
                    49:20:fb:12:54:4d:96:2a:2c:ca:27:d6:da:cb:78:
                    46:8c:6f:bc:b2:48:74:1a:2f:69:4b:c3:ea:af:76:
                    b4:d1:43:cd:80:e7:f2:04:26:c1:62:9a:ae:6c:b5:
                    a3:dd:9a:fd:10:b7:ea:94:74:5f:60:8b:cd:fc:28:
                    ae:6f:14:db:b1:b8:a9:09:c0:d3:fa:8e:00:15:e1:
                    cc:4f:32:cc:d6:ae:f5:27:42:e1:40:c0:f2:d6:73:
                    26:fe:80:41:ed:2c:d9:87:15:e2:fe:47:82:6d:70:
                    d5:10:9e:71:24:1f:4c:22:21:83:cd:d0:34:48:4c:
                    eb:51:86:86:cd:3d:ea:8f:eb:57:bc:92:c6:18:7e:
                    b4:e6:89:a7:5a:32:3b:b3:52:76:f7:b2:0c:41:89:
                    cd:b6:87:2e:13:66:0a:83:58:b1:e2:07:bc:f0:1f:
                    15:7f:61:0c:62:43:b3:0f:8d:ee:21:be:14:03:71:
                    50:c0:f1:06:30:57:0f:88:a1:09:90:95:b8:8d:ba:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:C1:A6:B3:D3:45:F6:59:72:E2:19:4F:97:3C:D5:FB:5C:7E:61
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/YUvBprPTRfZZcuIZT5c81ftcfmE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199455

    Signature Algorithm: sha256WithRSAEncryption
         7f:d2:fa:d1:91:4d:15:77:32:db:74:a6:c8:6b:50:e2:09:01:
         1f:23:aa:29:67:73:66:f9:cc:15:dd:0c:96:8d:bf:db:f3:c9:
         65:d1:e2:de:9f:c2:cf:de:bd:5f:32:94:e3:dc:94:a8:31:e7:
         f1:b4:92:b5:5d:99:89:21:d2:c1:fc:06:d7:20:a4:df:6d:d7:
         55:e6:de:4f:d6:8c:41:61:43:e1:df:ab:08:0e:c2:8f:a5:c7:
         f7:84:e0:d5:70:ba:fa:02:d6:d1:f3:cf:32:4b:f6:4e:71:b7:
         ef:21:b3:c8:de:38:ef:db:4c:64:d4:b1:80:b9:fd:18:4f:dd:
         f9:01:b9:f5:43:12:3f:ef:fb:0d:cb:f0:87:39:63:af:ab:ad:
         a5:e1:af:e2:d8:66:28:4d:6a:09:a3:6a:8e:66:8f:27:11:54:
         58:a6:95:3f:cd:fe:37:fc:47:23:c6:2f:d5:6d:5f:f1:7e:19:
         34:30:c3:4d:09:9e:1d:45:65:0e:ee:cd:43:a0:4d:93:31:69:
         ac:92:b1:30:2d:6e:37:39:52:93:6b:be:34:ea:ea:1b:42:58:
         23:d5:db:a1:7d:d3:68:ed:16:03:30:2a:b2:50:1b:a9:5a:10:
         3b:b8:a1:3d:0d:86:a9:1e:85:fe:4b:c1:b0:39:29:7c:46:8f:
         ef:ad:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:04 2026 by rpki-client