Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/4kp9Gd2mxG804RIdTKshm3Dwmdo.asa
File:                     4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (raw, json)
Hash identifier:          eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=
Subject key identifier:   E2:4A:7D:19:DD:A6:C4:6F:34:E1:12:1D:4C:AB:21:9B:70:F0:99:DA
Certificate issuer:       /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial:       019ED0B4EB9018AB821A515EDC6D719C417B
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/4kp9Gd2mxG804RIdTKshm3Dwmdo.asa
Signing time:             Tue 16 Jun 2026 13:52:57 +0000
ASPA not before:          Tue 16 Jun 2026 13:52:57 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211919
Providers:                AS: 30781
                          AS: 35625
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d0:b4:eb:90:18:ab:82:1a:51:5e:dc:6d:71:9c:41:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
        Validity
            Not Before: Jun 16 13:52:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e24a7d19dda6c46f34e1121d4cab219b70f099da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:d6:5a:cd:21:e4:9f:64:a3:45:ca:b0:45:
                    47:a1:e5:18:45:06:06:f3:2a:a9:3f:63:bd:70:47:
                    37:4e:12:7f:3c:51:8a:97:54:ea:70:72:23:6d:4a:
                    59:e4:bb:3e:3e:7f:d8:1e:73:52:d6:45:0d:a8:27:
                    0b:50:56:4f:d7:f3:d1:6e:22:34:df:38:39:27:a5:
                    97:13:a5:c6:4f:56:85:9e:94:c9:63:ea:88:4a:fb:
                    9a:fb:dc:03:99:77:6e:5a:3b:69:8f:b2:2c:9b:d5:
                    08:2d:2d:cd:86:f2:c4:ae:a8:93:6f:4e:a5:e0:c1:
                    c3:f2:32:ec:2d:1a:fb:d8:8c:b2:61:32:76:f1:a8:
                    52:5f:24:e6:c8:9e:6c:4e:69:92:92:dd:c2:75:19:
                    85:ce:98:db:fe:c3:98:32:c0:10:63:da:e2:13:8d:
                    20:8c:19:1f:95:21:56:e8:c8:a6:aa:35:46:26:ae:
                    8f:49:31:47:2a:fd:39:9d:be:cf:4b:36:06:b0:e1:
                    b4:a2:b3:03:8d:22:f6:77:ce:95:92:5b:e0:ce:51:
                    ef:c4:22:79:9e:cf:9c:94:a9:0e:4b:c7:a8:2c:93:
                    62:2c:d9:63:0c:f1:f5:c6:ce:98:78:f5:e4:f2:8e:
                    98:b7:d7:7f:aa:58:78:74:41:12:0b:9d:4e:bd:5a:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4A:7D:19:DD:A6:C4:6F:34:E1:12:1D:4C:AB:21:9B:70:F0:99:DA
            X509v3 Authority Key Identifier:
                keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/4kp9Gd2mxG804RIdTKshm3Dwmdo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211919

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:f5:61:6d:23:f0:40:59:3c:1e:04:28:04:47:1a:78:83:
         85:18:a8:78:7e:5c:65:10:72:b4:5b:a9:5b:f2:69:07:e3:19:
         8b:b3:63:3a:94:5d:5f:fa:fa:1a:c8:e6:ef:4a:49:e7:ef:89:
         df:f7:34:f2:fe:c6:34:60:4f:61:47:76:f4:05:1a:95:8a:c5:
         31:fc:f5:c3:16:18:11:76:5d:5e:95:fc:cf:a9:f2:7f:02:22:
         82:06:d9:a1:81:8c:7a:9b:05:99:cf:59:3d:06:37:27:83:6a:
         78:25:cf:1a:53:0b:5e:ff:d8:8f:7d:e6:26:77:3a:55:15:52:
         9a:3e:8e:da:9e:75:cc:f5:75:39:0d:28:db:01:58:93:2c:d2:
         e4:80:5f:55:cd:98:2c:2a:13:61:b9:6d:63:6f:0e:5f:c6:6d:
         41:3b:b0:3c:c6:3c:33:1f:25:97:0c:50:47:c8:b9:ac:f2:af:
         38:80:23:96:ef:60:d1:06:66:e0:af:0e:ce:e7:07:d0:44:30:
         2a:17:d8:dc:86:ee:34:d1:81:93:18:ff:3b:20:0c:fb:c6:bf:
         0f:98:5c:c8:fe:85:94:b6:0d:c2:75:7a:b9:4d:9c:7f:b3:07:
         de:2b:5b:e2:ea:e6:8c:be:a4:1c:78:91:8c:a9:d0:3d:b0:b6:
         d4:8e:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:33 2026 by rpki-client