Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa
File:                     0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa (raw, json)
Hash identifier:          t3G1NkXWHK4wGViktIA9e/IpeSePFuwm4DhV5QXwwUE=
Subject key identifier:   D2:65:F7:2A:BD:1B:D1:41:41:32:C2:6D:55:99:F9:C9:FD:A5:85:33
Certificate issuer:       /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial:       019F7AAAAF1D48405A3CF90DADA8D9A01616
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa
Signing time:             Sun 19 Jul 2026 13:57:14 +0000
ASPA not before:          Sun 19 Jul 2026 13:57:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202119
Providers:                AS: 34927
                          AS: 41051
                          AS: 207252
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7a:aa:af:1d:48:40:5a:3c:f9:0d:ad:a8:d9:a0:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
        Validity
            Not Before: Jul 19 13:57:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d265f72abd1bd1414132c26d5599f9c9fda58533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:02:b0:f7:03:00:99:6f:7f:cb:bc:32:d9:
                    81:45:47:cd:b7:1e:fc:ff:e6:aa:ce:b6:8e:a0:90:
                    33:92:19:33:7c:7d:4b:04:26:d6:05:53:c1:f1:f3:
                    6c:9b:a2:4f:f4:d9:b5:ec:f0:c7:0e:fe:ef:91:dc:
                    0b:2b:1b:26:1d:72:e3:61:c4:c2:44:01:14:4d:70:
                    5f:6c:3b:30:b7:8f:7a:da:3a:6b:22:84:43:09:b6:
                    92:cd:85:35:5e:74:c1:36:ee:57:ec:5a:9a:1c:cb:
                    00:c5:da:8b:79:9b:57:94:08:c7:2c:19:fb:54:ec:
                    bc:ec:b1:08:57:2b:84:bf:af:c1:25:e7:80:76:b1:
                    8c:c5:a6:2d:b8:34:da:5d:94:94:e9:28:b9:b1:c8:
                    b0:d3:9d:0c:77:4f:6d:e7:ec:83:20:6d:5c:67:2d:
                    93:9a:5f:b3:3a:f0:bc:fe:84:34:26:5c:bd:ca:8c:
                    83:99:63:be:55:57:b8:1a:80:ef:c2:d6:ff:6b:70:
                    09:2e:5f:51:24:d7:cd:b2:6d:24:ae:42:2f:50:6d:
                    c3:65:20:62:c7:85:3e:61:e1:e0:5a:42:f9:18:9f:
                    65:77:bc:ca:18:6b:1e:a8:46:61:bd:53:70:4a:b0:
                    40:08:e8:d5:0c:e6:dd:f7:e7:12:b7:39:7f:0a:8f:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:65:F7:2A:BD:1B:D1:41:41:32:C2:6D:55:99:F9:C9:FD:A5:85:33
            X509v3 Authority Key Identifier:
                keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202119

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:15:ff:90:5b:b9:03:db:57:6e:6b:4b:cf:db:a8:01:3d:
         2b:01:d6:87:e5:91:e1:08:33:96:45:40:7f:65:be:55:b3:a2:
         f5:17:d4:78:06:3a:8f:bd:9a:79:fc:45:db:7a:74:0b:12:ba:
         f8:a5:dc:dd:fd:e0:9f:e8:a4:34:5c:bc:c6:71:6d:28:a2:67:
         b7:db:71:8b:3f:94:a0:46:1a:d9:df:bb:ff:7e:2e:1d:24:56:
         dd:98:88:fd:96:3e:58:81:30:be:45:b2:a9:22:b4:05:1d:f7:
         03:e4:26:b1:c2:4e:6f:d3:3b:e2:c4:aa:fe:64:0d:79:a4:e4:
         9e:f9:39:e7:5e:8f:cf:f8:77:e2:22:0d:e9:cb:66:80:dd:be:
         cd:d2:40:d5:3c:13:80:2c:b8:b2:fc:f4:0c:e3:a1:be:e3:48:
         db:b8:b6:9d:47:65:5c:76:91:b2:6c:88:0e:cc:d9:7a:c5:4a:
         85:36:57:26:1e:a3:ab:7a:c3:09:36:9d:4d:7b:8f:0e:2e:b0:
         5c:64:a7:dc:dc:71:c1:d1:19:8d:38:f6:8e:24:6f:64:49:37:
         37:11:b3:d1:df:6d:29:e6:2a:e9:02:b5:75:b0:95:99:3f:af:
         34:8e:f0:32:9a:75:2a:05:5a:3c:b1:2a:2d:76:56:49:cd:41:
         48:48:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:52 2026 by rpki-client