Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa
File:                     rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa (raw, json)
Hash identifier:          i5/iyo2rt1F0mdV5nHS/+ieV6kBSf0qdaLWU+lHJUz0=
Subject key identifier:   AD:98:83:CC:92:6F:1E:64:35:0E:83:23:0C:FD:E9:12:62:99:78:4C
Certificate issuer:       /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial:       019FE62C000C34AFF13F5EEB8F076F2D01A2
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa
Signing time:             Sun 09 Aug 2026 10:57:51 +0000
ASPA not before:          Sun 09 Aug 2026 10:57:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202427
Providers:                AS: 835
                          AS: 6939
                          AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:2c:00:0c:34:af:f1:3f:5e:eb:8f:07:6f:2d:01:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
        Validity
            Not Before: Aug  9 10:57:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad9883cc926f1e64350e83230cfde9126299784c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:9a:54:94:69:1d:cc:12:1c:9a:ef:29:7a:
                    19:d6:3a:8c:90:c6:4d:c5:73:ef:15:f6:16:44:1f:
                    d7:47:0f:c8:5b:e6:71:29:dc:da:96:03:b7:bb:12:
                    e6:08:fd:d2:dd:f2:20:13:6c:14:bc:1b:f3:7e:2a:
                    0b:2c:76:6b:85:cb:50:ac:fd:c5:41:05:ce:c1:ce:
                    a4:0a:53:5e:65:89:30:01:a9:cb:3d:e0:74:06:11:
                    d7:aa:9c:7b:d6:7c:95:72:5e:20:eb:98:cd:ae:f2:
                    27:29:e5:3a:f8:49:7f:52:b5:71:f1:e3:2e:c0:38:
                    91:d0:af:07:d2:27:e4:d7:1b:98:7c:e0:60:b8:26:
                    3f:a5:4f:eb:a7:ec:72:c7:53:db:e8:aa:68:49:4f:
                    66:8e:08:76:f5:26:45:94:8b:91:fd:2f:93:45:e5:
                    e2:57:eb:d0:86:50:c4:31:1b:4c:3a:5d:2d:51:61:
                    07:7a:46:db:90:60:ac:d2:b7:28:80:fb:ad:0b:d9:
                    2e:f6:c6:89:c1:2a:28:57:5d:45:f8:db:a0:bc:99:
                    ca:56:2a:02:99:eb:8c:d0:19:34:98:a7:60:9b:12:
                    d8:33:3b:df:6b:0f:f9:1f:c3:38:45:dc:92:f9:18:
                    43:13:13:80:67:5d:81:14:95:e5:64:eb:d6:5c:22:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:83:CC:92:6F:1E:64:35:0E:83:23:0C:FD:E9:12:62:99:78:4C
            X509v3 Authority Key Identifier:
                keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/rZiDzJJvHmQ1DoMjDP3pEmKZeEw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202427

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:e1:ed:63:1a:d3:18:62:75:96:6d:f8:37:82:35:34:36:
         52:14:ba:ff:d0:b3:07:c1:00:d6:81:61:1c:d2:1d:11:07:01:
         be:67:89:55:92:bf:0b:0c:3a:f3:66:46:1d:30:8f:6c:ac:f9:
         2e:d5:de:0f:16:b4:68:3b:c3:9a:d4:2f:36:65:df:7c:e6:15:
         06:52:c1:d7:30:ed:29:f2:8a:84:d6:a9:a1:bd:6d:3d:a2:44:
         a4:fd:9d:49:0c:6b:1f:f1:ab:fb:0a:18:e3:d6:cc:dd:16:14:
         ca:e5:c7:6b:67:4e:e5:fa:c6:3f:d8:7c:7a:0b:4a:22:70:95:
         40:70:c4:b6:49:0e:3c:9a:22:59:10:04:91:73:25:8c:30:a1:
         d7:d9:9c:f4:05:18:a4:33:f5:f5:1d:5d:fb:d3:56:48:c1:33:
         ec:77:bd:61:0c:49:ff:0e:0f:5b:2e:08:8c:73:4c:12:06:cd:
         75:fa:9d:21:f7:50:91:14:1f:43:bf:ff:5c:a9:c6:18:89:9c:
         8d:80:04:f4:d2:1f:51:5a:86:16:03:b2:e9:9c:91:57:79:7b:
         db:2b:15:30:9c:12:ef:f5:6e:88:78:dc:7e:58:ae:a0:98:10:
         f3:42:37:cc:5f:29:26:fc:ba:5d:c9:cc:d5:33:a4:84:22:19:
         f0:82:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:02 2026 by rpki-client