Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/bX62eycaxQqqmzCrVbRnmBhI_fQ.asa
File:                     bX62eycaxQqqmzCrVbRnmBhI_fQ.asa (raw, json)
Hash identifier:          Xm5/UoBRk/jihZRblRqnYsjlOIOktCKA69PAH+25ryw=
Subject key identifier:   6D:7E:B6:7B:27:1A:C5:0A:AA:9B:30:AB:55:B4:67:98:18:48:FD:F4
Certificate issuer:       /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial:       01A052CAB8CCD79CB8B1DC71571DA9367FD1
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/bX62eycaxQqqmzCrVbRnmBhI_fQ.asa
Signing time:             Sun 30 Aug 2026 13:10:12 +0000
ASPA not before:          Sun 30 Aug 2026 13:10:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219505
Providers:                AS: 20473
                          AS: 41051
                          AS: 209533
                          AS: 210132
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:52:ca:b8:cc:d7:9c:b8:b1:dc:71:57:1d:a9:36:7f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
        Validity
            Not Before: Aug 30 13:10:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d7eb67b271ac50aaa9b30ab55b467981848fdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:b4:a9:61:39:db:56:74:57:dc:aa:55:03:
                    2a:fc:a3:09:64:14:65:8d:58:dd:b2:87:db:4e:92:
                    6e:56:a8:e5:24:3a:13:ef:7b:8c:93:f7:00:4f:48:
                    f8:56:91:9f:66:08:7f:ce:03:49:94:e0:be:d0:e0:
                    87:f0:a3:82:42:b9:88:73:b9:64:5c:3e:08:89:f6:
                    a8:51:4e:86:11:97:11:1c:8d:a1:36:ce:0b:5d:31:
                    7b:c9:54:93:6c:ec:8d:07:92:d2:c6:cf:6d:5c:2a:
                    1b:0d:21:16:7c:e1:eb:e5:75:e0:a6:ce:3c:f7:1a:
                    84:19:e6:9f:d8:c7:bd:bc:74:60:2a:eb:aa:fd:4f:
                    30:78:ad:28:83:22:62:40:98:8f:45:13:b4:2b:5c:
                    a9:d6:9d:07:8e:f3:75:ec:6b:06:6b:8d:7e:78:ad:
                    c8:3e:9c:73:e7:4f:2b:60:81:d2:f4:47:0a:09:27:
                    a3:87:fd:4c:d9:c4:27:79:17:b0:02:c0:1d:25:c6:
                    d9:f8:8f:38:1d:62:55:7d:40:21:3b:c4:50:49:37:
                    85:36:43:c7:ad:17:c7:e8:2b:f8:26:3b:b7:a6:28:
                    21:77:6d:28:6f:d8:67:92:dc:ee:ea:19:81:62:fd:
                    e5:be:f3:f2:1a:a9:c5:1d:51:3a:fd:21:a0:e9:00:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:B6:7B:27:1A:C5:0A:AA:9B:30:AB:55:B4:67:98:18:48:FD:F4
            X509v3 Authority Key Identifier:
                keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/bX62eycaxQqqmzCrVbRnmBhI_fQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219505

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:3f:5b:d5:b5:53:59:7e:28:d5:46:53:59:7a:b5:01:e5:
         c2:61:d0:c9:17:63:43:38:72:a6:57:f5:d2:ef:4b:c2:ca:81:
         89:76:f2:a1:01:58:a7:b4:c2:76:6a:6b:98:bf:ee:38:38:dd:
         e4:28:b1:03:68:91:09:ed:4c:3b:06:ba:8d:3f:57:6a:85:6b:
         3c:b3:f4:7f:24:58:7c:61:f1:70:e0:f9:43:8a:3c:fc:9c:54:
         34:b6:5f:07:e3:3a:9f:de:22:0e:72:58:01:9e:1f:57:7b:9a:
         f4:45:19:af:d0:83:d3:02:53:d8:51:88:b1:3f:e0:18:0e:36:
         f9:4b:1b:e5:55:ef:b5:2d:d5:7a:20:7c:43:46:71:71:32:fe:
         1b:ec:85:a8:0a:7b:01:08:50:6b:88:06:a7:45:e6:78:b7:68:
         fa:ed:be:61:e1:b0:86:fe:cc:11:76:4e:73:db:96:41:71:89:
         08:ac:71:6b:78:fc:b7:46:44:08:79:b9:ad:76:42:6e:64:c6:
         9c:8a:71:31:78:5f:9f:07:8f:bf:2e:48:b8:fe:ef:0c:c1:bf:
         1b:a1:18:ee:11:8a:22:51:91:6f:97:9b:2a:35:73:2a:47:68:
         2a:0b:5a:89:b1:44:3e:f6:be:84:06:c6:7c:5a:1c:58:e1:56:
         6c:7b:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:23 2026 by rpki-client