Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/VI7RVEYYvUICSlt1xO0wPq6Xn3o.asa
File:                     VI7RVEYYvUICSlt1xO0wPq6Xn3o.asa (raw, json)
Hash identifier:          IbctZiGUWGnx51bBXvGEVJKWGkz+TpjrF6PAg8KAvSw=
Subject key identifier:   54:8E:D1:54:46:18:BD:42:02:4A:5B:75:C4:ED:30:3E:AE:97:9F:7A
Certificate issuer:       /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial:       01A159D8AA9F51AD0863FF088347C233A574
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/VI7RVEYYvUICSlt1xO0wPq6Xn3o.asa
Signing time:             Tue 20 Oct 2026 15:05:34 +0000
ASPA not before:          Tue 20 Oct 2026 15:05:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219533
Providers:                AS: 6517
                          AS: 6939
                          AS: 11967
                          AS: 208226
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:59:d8:aa:9f:51:ad:08:63:ff:08:83:47:c2:33:a5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
        Validity
            Not Before: Oct 20 15:05:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=548ed1544618bd42024a5b75c4ed303eae979f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:37:da:2e:a7:87:42:5b:29:c8:85:cc:49:
                    e3:39:f1:49:0b:1d:4f:5e:74:9c:83:33:6e:64:ad:
                    e9:6d:32:77:51:c3:91:a6:67:99:f0:08:5b:7d:1c:
                    e7:ad:fb:9f:e6:b3:f4:90:c9:a1:e3:30:68:56:b2:
                    9a:ea:8c:d9:15:0c:02:24:2f:3a:c2:01:2e:4b:02:
                    4e:ce:a0:df:93:19:c9:07:48:f5:f9:e9:16:a2:13:
                    ef:cb:22:70:8c:bd:60:ea:4b:55:86:12:50:af:78:
                    66:c4:1f:ad:fa:6d:06:2f:a0:1b:0f:a8:30:13:ea:
                    02:ef:45:2e:79:9e:49:e5:b6:31:ac:6d:3e:f9:e1:
                    15:2e:08:ab:a2:39:e0:f4:55:a7:67:70:9e:f1:23:
                    3b:76:fe:67:e5:de:8f:3c:a0:a0:08:e4:0c:96:57:
                    60:30:ce:ee:95:15:2f:ca:65:41:11:34:85:9a:86:
                    54:34:59:ab:0d:e3:f2:8f:34:43:cd:bc:99:69:6d:
                    e0:76:de:c9:95:09:96:85:2b:a6:e2:a1:5e:d0:7f:
                    4d:44:ab:3f:a4:c8:cf:ab:1b:7c:fc:07:ae:b5:a0:
                    14:0c:8c:42:99:79:3f:2b:34:6e:3e:15:ea:62:27:
                    fe:22:74:f4:56:33:c3:1e:16:27:bc:87:72:81:22:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:D1:54:46:18:BD:42:02:4A:5B:75:C4:ED:30:3E:AE:97:9F:7A
            X509v3 Authority Key Identifier:
                keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/VI7RVEYYvUICSlt1xO0wPq6Xn3o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219533

    Signature Algorithm: sha256WithRSAEncryption
         49:09:fe:64:13:0d:4d:78:06:43:f6:85:5f:e7:27:36:66:ad:
         17:de:ee:2d:35:d4:36:b1:7e:77:a2:a9:3c:63:9d:5d:b4:3d:
         d1:14:ea:ac:8d:cf:ff:a9:f2:c4:4f:19:f3:da:93:fd:e7:29:
         98:0b:5c:96:bb:38:63:2c:0e:08:fb:29:e5:0e:4f:a5:35:d4:
         58:ba:39:2e:fa:4f:30:bb:94:ab:dd:d7:16:0c:79:9c:e7:58:
         30:d2:80:09:df:2b:aa:6a:83:f4:39:7d:32:73:bd:4f:80:8f:
         a5:63:b3:84:5f:12:c8:96:3f:47:10:ba:ad:e5:bc:c0:6b:44:
         16:37:be:1d:78:0a:3e:c6:be:e6:25:91:a6:a0:23:eb:6d:80:
         6a:23:7b:43:8a:19:9a:66:db:a3:20:a4:04:b2:7a:e9:dd:32:
         73:f4:21:38:52:41:5b:6b:01:64:f1:64:bb:38:03:d5:e3:82:
         16:b0:dc:13:86:06:77:26:ca:a2:3b:e9:b1:4b:2a:d1:b2:11:
         8c:0a:f5:67:b6:31:ae:60:81:e1:1a:72:ef:42:f1:bb:3f:4d:
         e0:14:70:bf:c9:16:8e:d7:cb:ec:6c:63:54:11:57:a7:c3:e0:
         a5:69:83:be:a6:3f:51:3c:7b:8b:f3:4e:cc:4b:86:9a:49:03:
         f4:35:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:31 2026 by rpki-client