Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/Velvuh1gpno0shkJ5khFZZ1M9Fs.asa
File:                     Velvuh1gpno0shkJ5khFZZ1M9Fs.asa (raw, json)
Hash identifier:          UtodF06r6O5PXRmMGWwd695ZbvpBr88baOFS+6FV2hI=
Subject key identifier:   55:E9:6F:BA:1D:60:A6:7A:34:B2:19:09:E6:48:45:65:9D:4C:F4:5B
Certificate issuer:       /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial:       019EC21B06971189771700A601B418F372C3
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/Velvuh1gpno0shkJ5khFZZ1M9Fs.asa
Signing time:             Sat 13 Jun 2026 17:50:11 +0000
ASPA not before:          Sat 13 Jun 2026 17:50:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214810
Providers:                AS: 8283
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:1b:06:97:11:89:77:17:00:a6:01:b4:18:f3:72:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
        Validity
            Not Before: Jun 13 17:50:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55e96fba1d60a67a34b21909e64845659d4cf45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:01:03:57:20:8c:11:e9:ee:ac:e8:8b:c4:
                    8c:9c:9b:35:90:36:09:b3:5b:98:fd:65:33:55:db:
                    40:52:8c:0b:3b:2d:24:bc:ec:39:a9:7e:0f:a8:78:
                    7f:33:14:9e:ef:4f:50:91:d1:66:46:18:b9:e0:0f:
                    33:b7:28:69:fe:3f:cb:d2:35:b4:f8:e3:ba:f7:be:
                    1b:68:aa:81:c2:2d:ab:66:d8:ab:56:ac:88:61:fa:
                    4b:76:0e:00:91:29:3f:94:f6:0c:b1:85:27:67:6f:
                    ce:e0:cb:bf:24:00:0e:b6:94:50:e9:c6:fc:d9:85:
                    df:00:e5:f8:83:8b:94:bd:7c:ea:80:c4:df:98:47:
                    0a:8b:73:fc:10:6c:77:5e:03:f5:0c:c8:d9:3c:03:
                    2b:ea:30:bd:54:ee:3b:12:65:6e:33:a8:74:55:d4:
                    fa:9f:ea:46:b0:d8:ee:69:76:cf:44:65:6f:10:93:
                    29:a1:bd:5d:b2:66:3e:91:47:a0:77:2a:f0:ba:7d:
                    12:f7:a4:6a:07:66:57:ba:fb:5d:99:bb:b4:9d:bc:
                    e5:d1:66:96:17:61:67:82:4b:e5:24:72:32:72:10:
                    4b:d0:62:e9:ba:29:ef:ef:55:66:9d:f8:73:4a:07:
                    b7:bd:89:46:14:ee:82:4b:56:4a:88:aa:2c:31:86:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E9:6F:BA:1D:60:A6:7A:34:B2:19:09:E6:48:45:65:9D:4C:F4:5B
            X509v3 Authority Key Identifier:
                keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/Velvuh1gpno0shkJ5khFZZ1M9Fs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214810

    Signature Algorithm: sha256WithRSAEncryption
         24:19:64:ce:6d:aa:37:2b:fe:4c:e4:18:3e:5f:42:e5:70:9b:
         b1:da:df:17:53:d2:c7:8c:1a:58:34:95:e9:25:69:7e:e4:9f:
         61:28:53:90:c5:9f:43:d3:4c:75:15:68:aa:90:93:29:99:12:
         b4:71:ab:9e:48:2e:0b:ca:62:7b:a6:bf:43:16:4b:bb:e9:43:
         5c:74:99:72:d9:7f:df:50:4d:7f:48:50:dc:49:da:58:1a:1e:
         64:62:56:36:81:31:5b:bf:27:0b:db:94:45:53:27:25:d6:ae:
         1e:8b:32:9d:88:c0:25:fb:ad:96:48:84:d2:51:5c:c7:b7:1e:
         5d:d1:2d:05:8e:4a:c0:c9:2b:fc:d6:c6:17:3c:ff:06:37:80:
         85:87:a5:1a:6b:04:00:4b:ca:6e:ad:d9:ce:bd:7e:21:30:98:
         19:a2:db:98:2c:61:4e:e8:8e:20:52:40:e0:8d:bb:02:b5:a9:
         61:6a:1d:8c:93:8e:d2:47:9a:21:4b:9a:44:d5:19:4a:cc:b1:
         4b:0e:f7:ae:45:30:2c:2d:e0:0f:ac:fe:5a:d6:61:35:31:e6:
         4d:77:0d:8a:7e:5f:76:af:cf:49:1b:73:2f:56:68:c9:8d:4d:
         45:50:46:78:d1:64:f5:64:09:67:69:cd:ac:d3:9c:65:43:1a:
         1a:b2:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:33 2026 by rpki-client