Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa
File:                     XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (raw, json)
Hash identifier:          y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=
Subject key identifier:   5C:77:9B:D4:09:94:7D:7D:64:9E:00:D8:C7:B7:0A:DF:F1:08:BB:B4
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019DCF911C859B170A2953BC5331B74A8631
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa
Signing time:             Mon 27 Apr 2026 15:31:26 +0000
ASPA not before:          Mon 27 Apr 2026 15:31:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202613
Providers:                AS: 31034
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:91:1c:85:9b:17:0a:29:53:bc:53:31:b7:4a:86:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Apr 27 15:31:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5c779bd409947d7d649e00d8c7b70adff108bbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:06:a9:ed:27:29:a3:2c:63:18:fa:7d:79:
                    30:49:35:4b:45:11:9c:e3:cc:f2:99:3d:d2:1a:78:
                    ba:a5:48:1d:35:c6:12:b2:a4:32:ce:aa:b2:09:b5:
                    c2:e4:7a:a1:b2:d1:8a:f5:97:2d:bd:79:1b:39:45:
                    a3:9e:e1:d7:09:ef:9f:eb:18:c7:42:2c:52:54:8a:
                    70:d5:d8:35:3a:e3:e7:d8:77:11:de:13:55:19:66:
                    b7:32:b0:d3:5f:33:c7:f5:31:7f:a8:cc:7a:c0:00:
                    c9:4f:e5:74:33:30:0e:13:50:a5:f8:be:15:8a:91:
                    ca:06:21:92:34:57:7c:85:6f:e4:4f:d6:a7:1b:cb:
                    ec:e4:af:ba:6f:7f:77:26:a3:71:58:96:56:40:e8:
                    15:9e:c7:8c:77:26:0a:4b:58:6d:82:ad:47:e2:26:
                    7e:5a:c5:01:b8:86:7c:ed:f9:48:2f:e1:f1:4e:02:
                    c7:8d:e1:23:3b:49:3b:aa:ee:f9:8a:d2:e0:c6:7a:
                    5d:49:9e:e8:ac:c3:1a:c2:df:8a:c5:68:4e:5f:b5:
                    be:47:c6:06:b7:ab:ae:ee:e2:5d:77:8f:b8:8b:8d:
                    ce:dd:fd:08:8a:ff:2f:67:fd:56:ab:99:06:0e:83:
                    11:00:cb:e4:5f:f8:f6:07:2a:fa:d4:d6:0f:31:bc:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:9B:D4:09:94:7D:7D:64:9E:00:D8:C7:B7:0A:DF:F1:08:BB:B4
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202613

    Signature Algorithm: sha256WithRSAEncryption
         36:92:8b:f4:4a:85:ee:60:22:0d:ce:b1:b1:be:c8:48:9c:b1:
         84:a8:5f:e2:ef:41:cd:43:6b:fa:39:f2:5a:6f:9e:9d:df:3e:
         a5:07:bd:b1:0a:65:da:81:57:9b:e9:ea:88:aa:7b:94:0c:52:
         a9:5d:33:f7:9f:ea:69:61:1d:1f:fc:ac:af:31:2c:71:86:c0:
         38:d4:be:0e:ac:9b:5d:8f:bb:b1:99:f0:b7:1d:0f:4a:9a:35:
         48:97:c5:ed:4f:86:f5:a5:8c:ce:2d:58:be:8f:82:71:19:87:
         97:c4:9b:20:45:7c:17:56:6a:67:35:d4:fc:77:7a:ad:78:7d:
         11:c5:08:b4:b3:57:82:99:4a:dc:6b:9f:2a:1a:60:1b:68:7e:
         41:4b:c4:a5:39:ae:0b:4a:f3:8d:34:34:34:d5:59:3a:3d:30:
         77:b0:93:20:a5:4b:a7:cb:5a:b9:6b:b4:5b:4a:7d:f6:47:d0:
         ac:2b:23:88:f5:89:5d:55:7f:98:ce:44:fb:25:68:61:ef:02:
         87:b4:12:7a:b7:cc:f8:63:79:eb:6d:00:25:2d:5f:41:69:e7:
         a2:3c:75:68:8a:fc:f0:ed:ce:a1:d8:55:f1:db:d1:6e:8a:98:
         f5:a7:54:96:f9:c0:5c:58:86:00:74:07:3b:55:a6:30:2f:a8:
         f6:bb:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:52 2026 by rpki-client