Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/zyN-ZVjyBRof3RZPTAuiK23Dij4.asa
File:                     zyN-ZVjyBRof3RZPTAuiK23Dij4.asa (raw, json)
Hash identifier:          CcKHk8N+y7xcd6YwUq0NHCEOSb2kKqihjTrjg5DotXw=
Subject key identifier:   CF:23:7E:65:58:F2:05:1A:1F:DD:16:4F:4C:0B:A2:2B:6D:C3:8A:3E
Certificate issuer:       /CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
Certificate serial:       019EA76C93D50DB1AA6CBEDDC05FF4006BE5
Authority key identifier: CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/zyN-ZVjyBRof3RZPTAuiK23Dij4.asa
Signing time:             Mon 08 Jun 2026 13:29:31 +0000
ASPA not before:          Mon 08 Jun 2026 13:29:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219513
Providers:                AS: 8695
                          AS: 35297
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a7:6c:93:d5:0d:b1:aa:6c:be:dd:c0:5f:f4:00:6b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
        Validity
            Not Before: Jun  8 13:29:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cf237e6558f2051a1fdd164f4c0ba22b6dc38a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:73:6b:7c:4d:ce:ea:8f:d4:a0:95:86:30:
                    b4:da:3e:5e:70:f4:1f:3a:c5:c5:b9:91:34:55:0e:
                    4d:9e:df:94:2e:57:b1:75:42:e9:70:6f:56:9a:cc:
                    56:70:5e:79:a1:ea:31:fe:d7:85:2f:a1:59:04:49:
                    25:f8:4c:43:8e:d3:37:e6:dd:68:93:66:64:cc:0c:
                    1b:18:5f:d4:aa:6c:26:4c:d2:73:5c:01:a5:6a:e5:
                    fa:4a:f9:89:d6:04:ec:c7:0a:56:7b:52:ce:36:52:
                    a3:bb:1f:f0:77:7a:40:e1:78:f2:a9:11:98:5d:f2:
                    66:fe:d2:82:f2:89:1d:46:82:26:52:8d:05:9f:01:
                    b7:0b:83:e2:89:6e:65:48:65:f5:27:66:d6:f2:d1:
                    ed:ef:3d:16:b9:6f:69:63:00:21:ee:54:cd:5b:0e:
                    15:36:18:95:7b:2c:86:ee:33:e6:da:66:23:94:ad:
                    ca:78:2b:d9:62:86:ba:f4:47:cd:f1:fa:6c:24:82:
                    66:8c:c9:dd:18:61:fd:8e:25:1c:a1:1e:9a:cd:70:
                    0b:52:b6:74:c9:3a:24:2a:51:f1:3c:73:c9:eb:09:
                    ed:b0:59:01:43:f2:ba:93:32:49:9b:7c:c7:7b:56:
                    25:cf:b8:d0:cf:02:6b:13:d6:9b:0f:91:d3:01:0c:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:7E:65:58:F2:05:1A:1F:DD:16:4F:4C:0B:A2:2B:6D:C3:8A:3E
            X509v3 Authority Key Identifier:
                keyid:CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/zyN-ZVjyBRof3RZPTAuiK23Dij4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219513

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:e2:47:6a:31:1c:87:72:9b:de:c3:55:1a:4c:ad:53:33:
         3c:86:b8:8b:7c:62:c7:67:78:21:05:31:57:e3:e9:34:36:21:
         15:a4:ae:37:9c:32:84:9b:7a:46:a4:f2:dc:ae:61:8d:f5:e5:
         ca:42:bf:0f:24:d3:1c:73:2b:e3:b0:1f:17:0f:f7:06:70:cd:
         75:7b:54:c2:68:da:71:7c:10:20:cf:f0:ef:9c:dd:7c:e2:7b:
         7a:0a:20:bb:c4:25:40:58:31:e3:f7:05:d4:54:53:02:39:f4:
         08:06:90:71:9b:b4:18:2d:69:f3:31:48:42:b5:7f:22:d9:d6:
         a6:4a:79:60:d9:c8:a0:a6:23:a4:cc:31:68:46:bc:96:53:79:
         a2:f7:3e:29:0d:91:b5:1b:7f:c6:b8:a7:5e:a1:60:dd:50:07:
         94:94:e3:71:31:16:2a:b4:ff:2e:a4:8b:31:07:c6:1a:ff:11:
         ed:cb:ac:d6:39:bc:94:be:48:0c:d2:be:14:ee:94:e9:16:8b:
         94:d8:87:65:c3:81:7b:1a:2b:5a:2e:4d:bc:51:85:75:ac:da:
         0f:00:59:c5:4c:19:df:12:08:11:13:5c:36:68:58:2f:64:52:
         f3:cb:01:89:f9:35:18:94:59:51:59:b7:0f:39:2c:73:94:97:
         37:cb:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:36 2026 by rpki-client