Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/_uvgyWXgVjcCMDVIAS2TiGgJzn4.asa
File:                     _uvgyWXgVjcCMDVIAS2TiGgJzn4.asa (raw, json)
Hash identifier:          3vhPLU52VG2IqwsUeX1JgGIBJOR8BqW4eXYGkP1270Q=
Subject key identifier:   FE:EB:E0:C9:65:E0:56:37:02:30:35:48:01:2D:93:88:68:09:CE:7E
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       019DCB2BEC0930A179566CD2F23105D7CAF7
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/_uvgyWXgVjcCMDVIAS2TiGgJzn4.asa
Signing time:             Sun 26 Apr 2026 19:02:26 +0000
ASPA not before:          Sun 26 Apr 2026 19:02:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48014
Providers:                AS: 49581
                          AS: 58212
                          AS: 60068
                          AS: 61272
                          AS: 197071
                          AS: 201814
                          AS: 213250
                          AS: 213683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cb:2b:ec:09:30:a1:79:56:6c:d2:f2:31:05:d7:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Apr 26 19:02:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=feebe0c965e0563702303548012d93886809ce7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:72:d7:68:57:1f:8b:ff:5d:5e:64:81:c6:
                    b2:c6:e2:81:f2:8c:c7:f5:34:20:1f:a5:98:6b:8c:
                    0b:0e:ea:b4:36:0d:90:ab:e8:86:ef:d9:82:94:cc:
                    3d:88:3d:23:15:bc:04:59:e0:39:03:35:bc:7e:0e:
                    29:26:f3:22:81:45:70:bf:dd:66:93:bb:65:7b:be:
                    ec:5d:55:9e:c6:51:a8:e5:12:62:53:15:84:9e:49:
                    35:0b:92:98:98:ac:11:f5:41:f2:2a:9f:b7:bc:43:
                    49:0d:cf:c6:85:3a:ee:44:78:8e:e6:46:65:17:c9:
                    0d:97:87:08:a3:d4:6f:98:b7:9f:32:0d:1e:41:d9:
                    f0:0a:16:b1:ee:20:58:a5:a4:e8:d2:a2:f6:16:45:
                    0d:63:39:71:7a:3a:08:46:a6:96:81:56:f1:11:ae:
                    93:fb:8f:85:45:e8:43:55:44:a9:0a:20:04:68:ef:
                    87:52:8a:fc:8b:09:94:17:c2:97:5f:6a:a2:3c:69:
                    32:66:74:39:dd:5f:5c:35:6d:d0:ba:6c:20:37:3e:
                    70:20:29:79:43:dc:19:01:aa:42:ff:0c:1a:94:8e:
                    20:fd:7f:e9:cf:af:9a:69:82:03:04:b2:2d:ad:0c:
                    82:0a:0b:66:46:d3:c5:f2:53:94:09:9e:f1:4e:43:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:E0:C9:65:E0:56:37:02:30:35:48:01:2D:93:88:68:09:CE:7E
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/_uvgyWXgVjcCMDVIAS2TiGgJzn4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48014

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:b6:ab:6f:68:50:cf:14:e1:93:d3:b5:92:36:82:e1:f8:
         ba:4c:08:03:f7:97:3f:28:87:b8:7f:c5:a5:e2:4a:68:2e:0d:
         1c:ae:9c:9e:0c:02:26:e8:70:21:25:08:4f:2d:7a:ab:f1:b7:
         84:ab:41:60:90:b0:29:42:3c:d3:1b:3a:cf:34:cf:6f:f3:d4:
         0d:5c:03:b1:58:a7:c2:b3:dc:fd:fc:52:ce:73:33:21:b5:52:
         be:49:5e:6e:fe:df:0f:f0:05:38:21:46:6d:61:8f:c6:8c:be:
         2d:03:eb:b5:f4:02:e4:79:2b:d6:4b:03:e3:b9:41:d6:64:c3:
         4d:ff:1d:25:dc:40:11:d0:00:e5:88:d8:8e:46:90:86:24:9a:
         26:d2:a1:5b:81:62:ff:e2:f0:90:9e:26:54:c4:bb:46:94:e9:
         b9:f4:cc:53:51:84:a2:28:8c:f7:43:aa:e2:4c:24:d9:75:6a:
         cf:fb:a6:e8:3d:e3:ab:4b:9e:7f:4d:ea:41:04:3c:11:56:e8:
         2f:52:59:bf:aa:f0:63:69:6c:97:f5:83:59:58:87:69:ea:cf:
         5e:a7:f2:25:fd:e0:99:d7:8a:99:f5:70:8b:a4:ad:77:03:ff:
         26:e6:b6:05:7b:f7:b2:2f:eb:f4:a6:5f:b8:39:06:0a:61:d7:
         56:fd:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:54 2026 by rpki-client