Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/SziyxY1sZxMSjtHJqiVs05V-vCk.asa
File:                     SziyxY1sZxMSjtHJqiVs05V-vCk.asa (raw, json)
Hash identifier:          Wrcy9/aQFlANW1WRGXEsgQya2i/bD8AmCJIRuIiIad0=
Subject key identifier:   4B:38:B2:C5:8D:6C:67:13:12:8E:D1:C9:AA:25:6C:D3:95:7E:BC:29
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       019DC62A2FC450B9368B01EF6E61F3A1DC76
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/SziyxY1sZxMSjtHJqiVs05V-vCk.asa
Signing time:             Sat 25 Apr 2026 19:42:26 +0000
ASPA not before:          Sat 25 Apr 2026 19:42:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51341
Providers:                AS: 1299
                          AS: 8631
                          AS: 20485
                          AS: 20764
                          AS: 29076
                          AS: 31500
                          AS: 39607
                          AS: 48193
                          AS: 49869
                          AS: 50817
                          AS: 50952
                          AS: 59539
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c6:2a:2f:c4:50:b9:36:8b:01:ef:6e:61:f3:a1:dc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Apr 25 19:42:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b38b2c58d6c6713128ed1c9aa256cd3957ebc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:a4:97:17:e5:67:28:ae:5e:58:39:ea:18:
                    ea:57:fe:01:ea:48:90:ac:db:1e:a4:16:47:d9:73:
                    16:09:c6:b7:e0:2f:58:a0:04:3e:04:1b:e4:b1:c6:
                    a8:3e:f9:b4:fa:5b:58:2f:51:ba:7d:ae:7c:b7:71:
                    6f:b3:97:01:08:75:f7:45:ab:cc:d0:3b:ee:92:8d:
                    aa:0b:c9:85:f4:1b:88:79:45:c3:b6:ac:ad:01:63:
                    d6:d4:71:3c:04:32:04:82:48:b1:9b:21:32:6f:e7:
                    96:30:0f:76:8a:8f:a8:e6:46:60:33:3c:08:df:1a:
                    7c:b8:a9:1a:4e:63:2d:3d:26:41:02:a0:be:02:f3:
                    6f:98:90:fe:af:c3:c8:ab:57:92:5d:a7:1c:f2:ed:
                    e1:2a:c7:d4:90:06:6e:67:ce:9b:36:e5:49:7e:4e:
                    df:34:ba:72:49:b5:48:f7:cd:b1:f8:ef:7b:60:44:
                    54:cf:aa:c1:c8:60:f4:5d:16:6c:78:c4:3b:7b:dc:
                    8e:7d:d5:73:e2:d7:43:7e:13:14:be:bf:7b:b0:10:
                    da:f6:03:f0:56:98:8d:6b:f5:36:1e:ea:d6:dd:78:
                    d9:c8:c1:bc:35:a3:d6:86:53:e8:f8:d0:ee:63:da:
                    fe:b2:c5:8f:01:5b:cc:2c:0b:51:92:2c:46:1d:71:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:38:B2:C5:8D:6C:67:13:12:8E:D1:C9:AA:25:6C:D3:95:7E:BC:29
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/SziyxY1sZxMSjtHJqiVs05V-vCk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51341

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:22:0a:af:64:f9:79:eb:2b:5f:05:2a:7b:a0:89:b5:76:
         5b:ea:ba:55:b2:00:1f:97:f5:f0:3f:32:98:7c:8d:1b:5f:26:
         8f:cd:96:55:f4:d1:0b:b1:c0:ac:d6:e3:61:e3:50:92:41:99:
         d3:c7:46:55:94:c9:90:38:d5:ae:62:d5:a9:7c:75:86:17:17:
         c9:23:6f:9d:80:ad:42:13:76:6f:27:98:42:e7:36:58:db:2e:
         d3:c9:8e:b5:26:3e:63:41:2d:56:91:30:5a:0b:f0:f7:6e:55:
         91:ed:0b:1b:2b:d2:9f:ad:4a:12:12:4a:af:0d:88:f9:8b:4e:
         c1:f6:16:bf:f7:69:69:e6:6e:80:ce:6c:f7:cb:e6:4f:56:32:
         62:77:86:d5:2f:d4:46:44:91:fc:44:43:d9:99:25:74:e0:7c:
         ff:d0:6c:07:6a:41:ee:63:1f:a0:92:ac:6b:1c:2b:1e:4f:32:
         44:89:66:bd:97:53:37:82:b9:61:59:f6:2f:10:1d:1e:c5:f3:
         3f:12:3f:de:c5:6e:e5:7b:34:62:3c:35:57:2f:dd:8d:59:30:
         20:49:8a:59:1c:7c:ac:41:82:e4:72:d1:ce:b2:58:3e:b4:6d:
         55:97:b5:58:58:87:f8:65:e4:8c:c8:38:3f:5e:36:7d:e4:c3:
         85:26:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:54 2026 by rpki-client