Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/yOrKQ7MJyIV7x473bRDSyqGxk3M.asa
File:                     yOrKQ7MJyIV7x473bRDSyqGxk3M.asa (raw, json)
Hash identifier:          RT2JBxL5LFYXoAORUjDuOF/GcHeKiXEXJ3d8DuggJSU=
Subject key identifier:   C8:EA:CA:43:B3:09:C8:85:7B:C7:8E:F7:6D:10:D2:CA:A1:B1:93:73
Certificate issuer:       /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial:       019ED633EE381605BAA9E21A501878931AE9
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/yOrKQ7MJyIV7x473bRDSyqGxk3M.asa
Signing time:             Wed 17 Jun 2026 15:29:48 +0000
ASPA not before:          Wed 17 Jun 2026 15:29:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208694
Providers:                AS: 34927
                          AS: 41051
                          AS: 212895
                          AS: 215828
                          AS: 400818
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d6:33:ee:38:16:05:ba:a9:e2:1a:50:18:78:93:1a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
        Validity
            Not Before: Jun 17 15:29:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8eaca43b309c8857bc78ef76d10d2caa1b19373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:cd:be:75:11:9d:2e:85:f9:ec:71:19:b7:
                    35:dd:b6:db:96:2e:32:6a:43:08:30:de:e8:10:3f:
                    20:4c:a4:80:0e:09:c0:e3:62:61:8e:c4:8f:4b:f7:
                    9a:dc:32:30:e8:45:71:21:57:fb:ac:68:92:14:cd:
                    1d:b0:bc:f1:b7:63:35:c8:85:ad:a8:8a:53:93:81:
                    93:13:94:90:d5:5d:5e:82:2f:35:a7:4f:4d:c7:47:
                    20:c4:d3:a2:94:ed:82:21:c1:ef:81:f5:66:9c:29:
                    82:e8:da:27:98:48:2a:99:a4:df:29:dd:dd:37:77:
                    0a:4b:12:1e:0e:97:e3:6e:a2:6a:0b:eb:8b:2f:12:
                    eb:0b:37:7b:1b:2c:dd:f8:05:4f:d5:2a:86:e9:c6:
                    f0:05:81:5c:6e:7c:3b:2c:1a:7d:36:08:94:9f:e4:
                    b7:4d:f9:11:91:85:51:c5:21:ac:43:c0:71:ef:2d:
                    1c:8c:0d:94:da:08:6c:0f:c4:01:a5:18:aa:a8:bb:
                    a9:ee:05:95:3f:f1:83:50:ad:e3:a9:82:cc:bf:88:
                    44:d1:86:7a:dc:3a:00:db:94:57:de:7f:d2:eb:80:
                    2e:9e:07:22:ae:21:17:35:28:cd:23:35:0a:90:f4:
                    65:54:41:16:2d:67:1f:c1:b0:8e:b4:6d:13:25:af:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:CA:43:B3:09:C8:85:7B:C7:8E:F7:6D:10:D2:CA:A1:B1:93:73
            X509v3 Authority Key Identifier:
                keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/yOrKQ7MJyIV7x473bRDSyqGxk3M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208694

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:75:0f:93:df:b6:3e:15:c6:25:d9:8b:fe:09:e4:5b:dd:
         96:d4:03:2f:1c:cf:fb:c1:a3:e3:fe:47:19:63:83:94:16:6c:
         d2:af:8e:d6:6b:da:c0:20:f3:64:ba:03:ee:c0:92:9d:bb:d4:
         a6:1e:92:4a:b0:63:6f:75:7b:47:f8:90:cb:e0:1f:05:32:d6:
         2e:06:34:14:9c:b5:5b:10:d7:11:59:da:74:f6:66:c6:8a:41:
         d9:ef:e8:c0:49:80:d2:53:5a:4e:08:70:90:41:9a:74:2d:7f:
         cc:c8:d8:f7:7b:c5:57:cb:44:26:b2:7b:f7:53:23:a1:d1:81:
         94:6d:41:94:93:68:c6:4a:f5:de:96:4a:f6:1c:0d:fa:b0:d9:
         d0:3a:33:c5:6d:60:7d:fd:fe:e3:74:20:23:78:4f:e6:ec:06:
         28:37:74:3e:92:ae:7b:43:12:1f:58:0a:52:0f:6c:c7:84:5b:
         6d:29:82:06:9f:6a:6c:7c:b5:b0:96:90:08:36:ca:61:10:e8:
         3e:b5:dd:7b:42:34:e3:a6:40:a7:96:e3:0e:e3:97:a4:c0:9f:
         8d:ee:52:0c:f3:f3:79:9f:19:7d:a3:f0:48:f2:64:fa:f5:de:
         35:db:f0:0f:d2:73:6e:25:4b:f2:ad:30:47:f6:94:1a:30:4c:
         1c:64:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:54 2026 by rpki-client