Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/aU9kgnyrWEDQEPKNwyNLEVRBatE.asa
File:                     aU9kgnyrWEDQEPKNwyNLEVRBatE.asa (raw, json)
Hash identifier:          dvn023c0w0CUoHP/TX/t+FPbTAi+h0wxkZINn6wTNQU=
Subject key identifier:   69:4F:64:82:7C:AB:58:40:D0:10:F2:8D:C3:23:4B:11:54:41:6A:D1
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01A1268E305D0F5D2126676824A6ADAE116C
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/aU9kgnyrWEDQEPKNwyNLEVRBatE.asa
Signing time:             Sat 10 Oct 2026 16:03:35 +0000
ASPA not before:          Sat 10 Oct 2026 16:03:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            20912
Providers:                AS: 174
                          AS: 3257
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:8e:30:5d:0f:5d:21:26:67:68:24:a6:ad:ae:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct 10 16:03:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=694f64827cab5840d010f28dc3234b1154416ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:97:49:fa:95:e8:e1:9c:96:40:ed:f5:b4:
                    f9:81:7b:a0:f0:e1:a8:9c:c8:87:0d:13:f8:6f:de:
                    2a:d9:c4:02:7d:72:e5:88:9b:a8:d1:ef:f3:59:9a:
                    f8:b3:09:e8:c1:06:d8:f7:52:a5:e0:a4:b2:7c:81:
                    98:d5:df:6e:90:05:2f:68:35:d6:9d:82:e3:ad:57:
                    40:6f:99:8e:82:44:3f:2c:e0:09:44:2e:8e:ef:9b:
                    48:b5:fe:7a:79:fe:2c:0c:47:6d:b7:42:93:25:f8:
                    fb:ea:b6:18:14:ac:79:ce:e6:1f:ed:5f:f7:68:c7:
                    28:12:7f:26:42:e5:83:98:ea:7e:d3:78:51:5a:b5:
                    18:04:40:a4:dc:36:1e:8a:55:95:9c:85:34:3a:88:
                    c2:f7:41:03:15:a2:60:5e:da:8b:f0:a5:dd:45:83:
                    1a:6d:1f:c2:49:ac:f1:24:f4:6f:90:71:97:7b:31:
                    16:5e:5b:86:0c:df:a8:00:07:1d:77:f0:95:1b:01:
                    ec:00:11:ca:e1:bb:b5:84:c4:3f:d9:e5:dd:13:49:
                    00:8a:04:16:78:6e:22:7c:00:a4:f4:7b:fb:03:20:
                    bc:a0:d8:08:90:28:d2:03:d6:d2:7c:4d:05:04:e9:
                    fc:56:e1:c2:82:01:e2:14:89:41:41:e8:7b:15:30:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:64:82:7C:AB:58:40:D0:10:F2:8D:C3:23:4B:11:54:41:6A:D1
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/aU9kgnyrWEDQEPKNwyNLEVRBatE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20912

    Signature Algorithm: sha256WithRSAEncryption
         ab:be:f3:db:14:03:c1:29:b1:07:f9:16:bf:b5:14:58:1b:a1:
         60:ec:c6:f1:7f:0f:03:df:85:97:d1:c5:10:7c:6e:b1:88:5a:
         a8:da:c9:6d:61:be:6f:05:0c:93:79:0d:07:82:b8:2b:4a:30:
         78:86:46:aa:86:b2:92:26:90:0c:4d:6c:24:f9:81:99:01:96:
         52:62:24:32:1a:25:cb:2f:6c:ad:04:98:a7:52:e4:6f:8e:a5:
         35:a3:fd:a2:9d:bf:88:12:cc:34:0a:a5:d5:15:8c:01:fe:80:
         96:39:c7:c7:5f:64:c7:eb:3e:fc:3f:8f:09:1e:40:3f:cf:02:
         57:38:84:fd:4d:f9:e7:c3:01:7b:2f:d7:0c:df:dc:c6:88:d0:
         01:46:9b:5e:9a:09:ae:c3:18:f5:62:c2:16:22:53:6f:5b:21:
         84:5f:ef:ec:ce:d0:45:a0:ae:f9:36:c7:96:70:4e:5f:d8:db:
         e8:34:f5:77:a1:21:d0:bf:33:ac:3f:05:97:db:e0:e9:aa:1c:
         d5:b5:91:a9:c4:7b:03:05:e2:32:c5:c5:bf:8e:b6:51:c6:a3:
         37:9e:f4:4e:3c:6f:a8:0c:1c:f5:e6:f3:b0:fa:01:e7:d8:a9:
         67:7e:42:7b:da:cb:c2:ac:f9:99:d8:ff:23:0f:f2:e0:8e:8e:
         18:7f:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:54 2026 by rpki-client