Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/pgBBKcazaoiXCzEzUp_gTetVvEk.asa
File:                     pgBBKcazaoiXCzEzUp_gTetVvEk.asa (raw, json)
Hash identifier:          Dh/MX1NMsxQMvM6tInaE9dYK7D88X4+TEFqSEG4SvSk=
Subject key identifier:   A6:00:41:29:C6:B3:6A:88:97:0B:31:33:52:9F:E0:4D:EB:55:BC:49
Certificate issuer:       /CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
Certificate serial:       019FCDAF73D05F2273702455D7222618421E
Authority key identifier: AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/pgBBKcazaoiXCzEzUp_gTetVvEk.asa
Signing time:             Tue 04 Aug 2026 16:50:55 +0000
ASPA not before:          Tue 04 Aug 2026 16:50:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213929
Providers:                AS: 1299
                          AS: 13030
                          AS: 398999
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:af:73:d0:5f:22:73:70:24:55:d7:22:26:18:42:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
        Validity
            Not Before: Aug  4 16:50:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6004129c6b36a88970b3133529fe04deb55bc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:2f:77:b0:30:97:6e:4b:0a:bb:a0:8a:cf:
                    f1:61:a6:7e:0f:95:51:94:6c:e5:88:fd:05:c9:d9:
                    b0:49:8b:48:82:9a:66:bf:41:2f:f2:62:3c:63:ea:
                    6d:fc:b1:2c:b6:e1:7a:78:30:63:d9:c6:46:fe:4e:
                    db:69:32:8c:d3:34:63:27:92:af:5f:fb:10:42:ac:
                    be:af:62:ae:b5:77:bc:5d:79:e8:78:43:f8:6a:fe:
                    84:84:4f:58:24:8d:0b:d0:7f:06:34:29:af:0d:37:
                    27:1d:2c:8b:9a:77:98:2a:c8:80:a3:ec:4d:51:01:
                    c5:c7:a2:92:c8:e1:f8:f6:1d:26:54:d0:35:6e:55:
                    7c:74:43:06:09:ef:93:23:3a:29:20:1c:ff:6f:7e:
                    dc:d3:ca:f0:69:c9:ec:87:92:32:8c:2b:d0:4f:f4:
                    b7:d3:9c:fd:6b:42:d4:4a:df:97:2b:f0:75:a6:e2:
                    ca:43:86:d2:a4:35:d5:55:53:47:06:87:b9:88:ee:
                    6d:a3:4d:55:06:de:0c:67:f9:1d:75:e8:79:75:a4:
                    93:9c:fa:80:2a:29:4d:7f:90:c3:42:fb:57:29:f2:
                    b7:72:4f:c1:b7:3b:36:e0:dc:fe:72:9d:d6:3e:9e:
                    18:69:be:e6:e2:93:f1:ea:93:d4:7a:87:8f:90:ad:
                    3a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:41:29:C6:B3:6A:88:97:0B:31:33:52:9F:E0:4D:EB:55:BC:49
            X509v3 Authority Key Identifier:
                keyid:AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/pgBBKcazaoiXCzEzUp_gTetVvEk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213929

    Signature Algorithm: sha256WithRSAEncryption
         54:00:b4:f7:8c:6b:67:63:ff:12:17:20:7d:19:31:c5:3d:f8:
         77:8d:ff:77:15:94:83:50:dd:8c:48:4a:77:4e:89:32:01:bd:
         56:e6:f6:25:ca:19:68:11:6f:b0:5b:d8:e4:3a:c1:45:e7:6a:
         cd:68:8f:d5:51:54:0a:f6:e1:c3:e8:c5:6d:16:ff:68:3f:15:
         45:bf:43:2e:79:02:fc:6b:fc:16:49:bf:4e:76:a4:5b:9a:4d:
         e0:f8:80:3c:ea:6f:4a:f0:a3:a1:72:16:b6:4f:d6:be:2e:86:
         a9:43:88:ec:f1:3f:1b:06:37:78:37:31:ef:ce:e1:de:3d:b7:
         89:12:44:aa:72:c2:c3:7a:5b:66:cb:59:62:7a:bf:4c:df:94:
         e0:aa:65:29:b5:17:ea:f3:47:5a:b1:a3:91:4e:20:6a:64:e5:
         04:78:eb:02:24:8a:fe:ee:b1:c6:26:0f:2c:22:8e:f0:70:d1:
         b6:c1:54:f3:81:2b:57:c3:4a:59:4d:40:66:bc:9e:e3:f8:97:
         4b:80:ef:87:33:da:18:09:84:e4:e5:e1:71:54:2e:1d:7f:72:
         aa:2e:78:33:98:b9:11:3e:dc:0e:5e:97:37:fc:8d:69:f7:55:
         88:f7:8b:1f:05:b0:0f:17:07:9b:db:14:de:92:38:0c:6d:ea:
         30:b7:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:24 2026 by rpki-client