Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/mALgzDSxXDzVJNiDvt2dKpm8IFE.asa
File:                     mALgzDSxXDzVJNiDvt2dKpm8IFE.asa (raw, json)
Hash identifier:          ZY2/ckn240I39uLzKbkJvTxIH+Ygic7jlvezsYQfI5s=
Subject key identifier:   98:02:E0:CC:34:B1:5C:3C:D5:24:D8:83:BE:DD:9D:2A:99:BC:20:51
Certificate issuer:       /CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
Certificate serial:       01A00C9293D5B9450247F8169F151A2D9181
Authority key identifier: 06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/mALgzDSxXDzVJNiDvt2dKpm8IFE.asa
Signing time:             Sun 16 Aug 2026 21:55:27 +0000
ASPA not before:          Sun 16 Aug 2026 21:55:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202294
Providers:                AS: 174
                          AS: 5405
                          AS: 25145
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0c:92:93:d5:b9:45:02:47:f8:16:9f:15:1a:2d:91:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c30891da7efa9a6444efec88b4bef55ccbbe5c
        Validity
            Not Before: Aug 16 21:55:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9802e0cc34b15c3cd524d883bedd9d2a99bc2051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:4e:59:9a:08:5c:e5:11:6f:42:29:c6:d9:
                    59:5c:28:42:cd:0e:82:80:5c:c8:51:a4:ad:ae:50:
                    f3:68:17:bf:c1:7f:47:4c:ab:dd:26:84:f6:79:c6:
                    8e:7d:a2:01:52:ff:7e:3f:b0:13:44:44:df:3c:51:
                    d8:da:9c:51:29:fd:24:fb:40:01:bb:e9:e7:d1:4e:
                    32:c2:59:6a:98:19:bf:fc:f3:da:64:e0:1f:90:18:
                    66:4a:85:0b:2e:00:67:1b:49:e7:e2:0d:8a:d2:ea:
                    2f:f5:0b:90:fc:b6:fb:ca:d1:f0:d6:4d:17:b8:e0:
                    0a:53:55:7a:36:90:ff:25:c8:67:b5:9f:e7:e7:5d:
                    70:b6:c0:98:80:65:90:7d:3f:7a:c5:d4:4a:25:8a:
                    78:d9:ee:96:d4:65:04:8e:37:09:bd:90:db:f6:53:
                    91:99:ae:ac:21:f0:92:fb:d9:52:4a:47:45:22:75:
                    7e:8b:4b:a6:eb:1c:e8:83:9a:40:76:45:aa:a4:53:
                    6f:11:1f:09:04:7c:8a:c3:2e:98:f0:35:c3:b9:0f:
                    64:3a:dc:5b:90:18:a1:81:f9:b8:66:aa:28:6b:f8:
                    88:99:bd:fd:52:40:2e:b6:38:30:49:50:a9:42:34:
                    f9:7c:d6:be:be:2a:98:1c:30:1f:44:93:0e:36:93:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:02:E0:CC:34:B1:5C:3C:D5:24:D8:83:BE:DD:9D:2A:99:BC:20:51
            X509v3 Authority Key Identifier:
                keyid:06:C3:08:91:DA:7E:FA:9A:64:44:EF:EC:88:B4:BE:F5:5C:CB:BE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsMIkdp--ppkRO_siLS-9VzLvlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/mALgzDSxXDzVJNiDvt2dKpm8IFE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/00c464-ddf8-446f-994d-789ee689d47c/1/BsMIkdp--ppkRO_siLS-9VzLvlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202294

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:ed:4d:fe:8b:9f:62:ac:70:ac:4e:0c:fd:4c:37:11:67:
         7f:c4:d9:ee:6a:f0:34:4a:49:05:6d:66:e3:ee:76:a6:04:dd:
         25:0f:3e:41:73:a4:0e:b6:c7:4e:ac:6c:dd:d1:ff:f8:ae:97:
         f3:14:cd:bd:0a:e5:db:e1:89:a8:1a:f3:cd:bb:81:71:be:92:
         a2:2c:2a:c7:59:f6:8d:1b:b4:62:da:6f:8b:50:92:9b:06:2c:
         d8:3b:7e:87:ea:fb:1f:58:e9:45:47:b7:8c:90:84:1f:8e:a4:
         51:a6:a0:84:29:9c:e4:34:fa:b2:a8:e7:b4:32:35:24:04:f7:
         ca:d4:5c:fa:25:00:71:2e:ec:4e:d5:14:4e:91:72:39:53:3b:
         9a:bc:fc:c9:44:a8:52:3e:57:96:8a:22:35:c9:c8:91:7b:4a:
         ab:80:09:29:00:25:03:41:eb:2c:35:66:9b:c4:2b:b5:9b:1c:
         9b:ea:db:cb:12:6d:de:9e:e5:17:50:e9:d8:ad:b9:b0:38:ff:
         b1:49:f0:e9:51:40:76:e9:b3:88:16:b6:7b:a1:f1:0d:a3:1d:
         24:cb:2e:13:8f:1f:11:43:68:e7:8f:ed:f6:c1:dd:f6:0b:7e:
         9b:f4:0a:53:76:69:3b:2f:65:89:b8:8a:b7:ae:88:c6:86:be:
         d4:2c:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:45 2026 by rpki-client