Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/Og9L-X79pFxCY-PZrsh89NiYOgw.asa
File:                     Og9L-X79pFxCY-PZrsh89NiYOgw.asa (raw, json)
Hash identifier:          mD3NvocgZjYeAZzNwxBmzTTWsMAM1llMbcLc1vO5R8I=
Subject key identifier:   3A:0F:4B:F9:7E:FD:A4:5C:42:63:E3:D9:AE:C8:7C:F4:D8:98:3A:0C
Certificate issuer:       /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial:       01A0D1EAD4E1BDC65E8E68E07F814373ED02
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/Og9L-X79pFxCY-PZrsh89NiYOgw.asa
Signing time:             Thu 24 Sep 2026 05:37:03 +0000
ASPA not before:          Thu 24 Sep 2026 05:37:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207790
Providers:                AS: 1299
                          AS: 3356
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:ea:d4:e1:bd:c6:5e:8e:68:e0:7f:81:43:73:ed:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
        Validity
            Not Before: Sep 24 05:37:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3a0f4bf97efda45c4263e3d9aec87cf4d8983a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:76:7c:8e:ef:44:15:c1:8e:9e:8b:e5:3c:
                    59:71:7c:74:00:23:4c:8f:33:db:7f:08:c1:c6:6d:
                    cd:e4:11:52:c5:84:3d:f7:13:00:5b:7c:43:31:88:
                    2c:6f:a7:d9:b5:5e:75:2c:60:4d:cf:58:7e:c0:4b:
                    c2:d7:e0:b0:a4:05:a7:63:89:07:af:73:95:eb:e7:
                    30:19:dd:38:c4:36:77:8c:44:95:59:d2:8b:9c:8a:
                    15:fe:52:9c:d9:35:40:67:43:a2:37:12:dc:73:79:
                    b3:2c:1d:ad:4a:fc:2a:5a:f4:09:ea:99:15:31:3c:
                    6e:b2:f8:58:59:b0:ce:c6:a6:b3:86:d0:5e:2f:22:
                    dd:41:6a:73:ee:0b:75:26:27:ba:b2:eb:57:2c:b2:
                    00:60:03:63:ee:44:e3:d6:32:37:26:c1:a7:5a:1f:
                    83:00:bc:e9:4e:7c:57:fd:f4:27:22:83:2e:57:a7:
                    ec:bb:21:2f:d9:32:cc:38:e8:30:61:a7:b1:d6:eb:
                    a0:f3:fd:58:55:68:13:eb:83:9c:5e:3f:cd:5d:01:
                    5d:da:a2:e0:31:12:b5:ec:03:7c:13:37:6f:93:cd:
                    f4:49:8e:c5:1d:40:20:71:2b:33:6b:92:e4:26:2c:
                    fb:44:30:9e:ac:7f:cf:fb:4a:68:88:f3:b1:95:a2:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:4B:F9:7E:FD:A4:5C:42:63:E3:D9:AE:C8:7C:F4:D8:98:3A:0C
            X509v3 Authority Key Identifier:
                keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/Og9L-X79pFxCY-PZrsh89NiYOgw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207790

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:37:88:43:8b:bb:26:91:e8:ff:1e:6e:ca:2e:fd:2f:51:
         93:97:aa:5e:ca:f6:66:92:fb:43:8a:f7:49:c2:1a:59:6b:0f:
         1b:ce:ab:18:f6:20:af:cc:a6:f6:1a:b4:87:ce:18:e0:26:24:
         be:f4:9d:92:8a:5e:44:2c:4c:73:78:98:c9:2b:89:61:b6:ce:
         2f:01:7f:41:b1:05:c8:09:ae:ed:ce:a9:0a:e4:1d:a5:70:02:
         d1:e9:2a:44:9b:88:ba:5a:9a:f5:f2:38:b2:dc:65:0b:52:a4:
         7c:d1:78:bc:ab:14:cf:04:9e:7b:00:6f:a8:3f:e4:5c:7a:0c:
         76:72:77:60:67:26:5e:dd:14:51:6d:da:ac:3d:7a:16:ca:b0:
         a3:c1:14:6c:8e:1f:b4:9c:27:a6:55:b4:a0:95:ef:68:d5:84:
         e8:85:f4:19:34:f5:7f:1e:d1:de:8e:a7:92:04:e8:4f:8a:f9:
         fc:53:3f:cb:e2:19:ba:fa:e7:2e:20:27:b2:e3:20:30:1b:59:
         8c:1d:5b:6e:e3:17:0d:63:d5:36:fe:db:a3:88:f6:d4:5d:07:
         61:ce:32:be:1a:7e:7a:97:27:4d:d9:b2:58:37:ed:32:d2:6b:
         1e:cc:d1:20:3c:aa:fb:a7:59:cb:fd:2c:b3:15:8c:20:86:8b:
         63:14:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:23:01 2026 by rpki-client