Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/y0t4f3SYiNI2RVeLlWE56pwZqao.asa
File:                     y0t4f3SYiNI2RVeLlWE56pwZqao.asa (raw, json)
Hash identifier:          7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=
Subject key identifier:   CB:4B:78:7F:74:98:88:D2:36:45:57:8B:95:61:39:EA:9C:19:A9:AA
Certificate issuer:       /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial:       019DCE879BE79B0DA52CB800A0185E6A9A54
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/y0t4f3SYiNI2RVeLlWE56pwZqao.asa
Signing time:             Mon 27 Apr 2026 10:41:26 +0000
ASPA not before:          Mon 27 Apr 2026 10:41:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200825
Providers:                AS: 20473
                          AS: 44324
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:87:9b:e7:9b:0d:a5:2c:b8:00:a0:18:5e:6a:9a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
        Validity
            Not Before: Apr 27 10:41:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cb4b787f749888d23645578b956139ea9c19a9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:5c:2f:12:80:a6:d6:3b:20:f0:f3:7a:69:
                    12:12:44:3b:31:ea:9e:ff:7e:c1:21:18:47:39:d9:
                    e2:35:4a:74:0f:2a:58:7d:2b:08:ac:1c:64:fd:87:
                    fa:fb:72:3c:42:cc:78:5d:6e:72:a6:e1:a6:9e:90:
                    11:46:3f:f5:28:86:3d:7f:25:ac:42:4d:d6:31:01:
                    6e:2a:b2:29:aa:32:60:92:32:fc:41:5b:3e:65:91:
                    87:f5:b1:9f:f7:b9:7e:e0:fb:73:07:dc:78:2c:40:
                    20:f0:40:64:d3:c4:9c:86:dc:12:b8:1f:9d:94:bb:
                    96:12:7f:5a:29:65:ff:b0:b1:cf:e8:30:65:05:70:
                    73:7f:93:37:66:5c:7c:65:7a:95:30:a6:0a:23:ad:
                    e3:85:65:d8:7e:0e:81:aa:84:6e:11:5c:5d:5d:ee:
                    cb:3c:2c:5c:aa:a9:fb:ea:6d:23:3e:4c:e5:3a:ce:
                    4e:51:69:d9:8a:ec:77:44:a5:37:3f:e8:f7:13:b4:
                    9e:1c:a8:6f:52:5a:8c:b8:e7:a7:57:26:0b:bd:64:
                    39:72:e1:1b:52:14:dc:eb:c2:71:06:c5:f2:8d:78:
                    be:cf:77:3a:bc:bd:c9:58:a8:01:86:1f:ad:28:cb:
                    44:ae:3c:5b:1b:86:72:7a:8d:87:e0:ff:ac:02:0e:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:78:7F:74:98:88:D2:36:45:57:8B:95:61:39:EA:9C:19:A9:AA
            X509v3 Authority Key Identifier:
                keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/y0t4f3SYiNI2RVeLlWE56pwZqao.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200825

    Signature Algorithm: sha256WithRSAEncryption
         90:69:b2:ef:07:7e:57:df:c2:fa:39:1a:91:3f:13:87:1c:3d:
         f4:34:ab:80:84:ef:81:e4:36:24:9d:c1:6e:c0:70:55:fa:f3:
         87:00:6d:28:82:61:2b:3d:cb:fc:27:97:32:f9:de:e3:10:8f:
         c1:27:40:1b:cb:17:aa:f1:2b:d0:0e:4e:b6:3b:56:97:17:9a:
         1b:32:c5:93:2e:c9:9d:10:5a:57:3c:46:aa:f7:38:93:dc:39:
         d1:60:4f:39:f3:be:aa:bf:18:e2:40:ac:8e:b7:15:55:a7:24:
         a9:88:66:54:4d:e2:f8:36:9b:0d:7a:ae:ee:16:c6:c2:8c:d6:
         72:c6:33:b7:35:09:2d:b1:69:69:5a:34:b5:c4:49:f9:3d:09:
         e7:6b:f6:88:91:57:6a:22:47:b9:bd:34:47:d6:3b:04:06:3d:
         bd:c5:bf:30:3e:c0:bc:b5:f5:df:d5:18:90:1d:50:82:d4:23:
         ec:6a:d6:c8:99:66:29:0e:3c:c7:9d:55:f8:3e:cd:7f:84:fb:
         bd:fb:19:6e:a5:8f:67:5b:f5:30:01:c5:11:49:72:89:45:8e:
         f2:b1:35:3a:c2:ef:08:43:b5:4b:c6:c6:f4:84:e6:4c:c3:44:
         e3:45:9c:71:e2:b9:ab:70:c6:dc:6e:61:c4:07:58:e4:66:c7:
         ca:36:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:38 2026 by rpki-client