Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/1_9CTD55fA31dYiJKaTyCL4OIrM.asa
File:                     1_9CTD55fA31dYiJKaTyCL4OIrM.asa (raw, json)
Hash identifier:          djqucbZDGesAiVO1pouZlPrp0+NsNKU7ArDEE8maUzA=
Subject key identifier:   D7:FF:42:4C:3E:79:7C:0D:F5:75:88:89:29:A4:F2:08:BE:0E:22:B3
Certificate issuer:       /CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
Certificate serial:       019FB2BC09318223FA31697A8CD08FD225C7
Authority key identifier: 73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/1_9CTD55fA31dYiJKaTyCL4OIrM.asa
Signing time:             Thu 30 Jul 2026 11:14:55 +0000
ASPA not before:          Thu 30 Jul 2026 11:14:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200327
Providers:                AS: 714
                          AS: 6762
                          AS: 20764
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b2:bc:09:31:82:23:fa:31:69:7a:8c:d0:8f:d2:25:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
        Validity
            Not Before: Jul 30 11:14:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7ff424c3e797c0df575888929a4f208be0e22b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:64:6d:a1:91:c2:8b:fc:8a:4e:74:3e:e6:
                    72:18:f7:d8:d1:39:aa:99:ab:50:8d:3b:05:8b:09:
                    ef:c6:4a:f0:e0:b2:b7:d9:44:19:e4:d6:b6:74:c4:
                    5f:8e:4b:bf:41:43:82:00:28:9d:a5:42:c5:5d:c2:
                    a0:4f:7c:45:13:df:06:f9:67:fe:a8:ac:11:cb:00:
                    e9:a7:2f:ba:9c:52:f1:f2:43:c8:5e:79:49:4a:00:
                    e4:07:cc:70:f8:5b:27:ca:f7:0a:b5:d3:24:c1:28:
                    b7:11:16:31:b7:e6:58:18:71:e6:17:ae:a0:19:ea:
                    33:e3:36:e2:16:65:b9:40:ee:64:d2:4f:10:a3:ac:
                    d7:97:02:6a:8c:0d:5e:24:7a:aa:84:d7:2b:ff:c1:
                    4a:fd:23:a6:01:15:97:1c:52:2e:ce:46:dd:3c:8b:
                    20:23:53:63:a1:0f:e7:38:7c:0b:8e:3e:60:f1:94:
                    9d:81:23:a1:03:c4:27:2f:0d:37:6a:8a:f4:5a:5c:
                    00:5f:6f:f5:a7:cc:29:54:c9:1c:d8:f9:1a:86:4e:
                    78:d8:15:f9:e7:ed:18:da:ca:d7:d0:94:ee:d5:98:
                    25:9e:a1:0b:56:37:c6:a3:a8:6f:bd:e0:64:32:3e:
                    41:77:d0:68:d3:ba:3f:75:32:e0:9c:b2:21:5e:de:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FF:42:4C:3E:79:7C:0D:F5:75:88:89:29:A4:F2:08:BE:0E:22:B3
            X509v3 Authority Key Identifier:
                keyid:73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/1_9CTD55fA31dYiJKaTyCL4OIrM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200327

    Signature Algorithm: sha256WithRSAEncryption
         af:74:95:a7:c7:9f:74:f2:15:4b:64:99:d7:3b:0e:01:81:8c:
         2b:a3:d9:83:72:78:eb:26:4e:33:cc:dd:b2:5c:f2:25:e3:91:
         35:35:4c:ac:a7:03:58:78:9b:c5:c8:9e:18:93:58:88:d0:7f:
         14:e9:0a:9c:1d:26:ef:10:cc:15:af:a3:b3:a1:53:44:10:b5:
         6c:3e:4e:a5:86:6f:25:fc:b4:48:b8:3e:f4:54:16:48:61:bc:
         e0:36:3f:cf:75:88:6e:df:ab:c9:da:a5:99:d2:a6:ef:73:c8:
         d1:89:4e:6c:9c:97:f8:16:f0:7f:7d:30:7e:a9:3d:6d:20:8f:
         66:15:14:1c:22:46:11:5b:f7:ad:b2:c3:75:de:d8:4e:76:07:
         86:78:cd:db:16:7b:58:99:36:40:b4:82:2d:4c:9a:1e:34:52:
         44:07:2c:9c:8e:8d:48:aa:08:44:df:b2:13:c9:d3:a7:26:4f:
         82:36:22:4e:3f:cf:d4:d7:4b:16:37:6e:8a:dc:80:14:be:a0:
         39:44:c6:d7:21:7c:7b:bd:e7:a9:23:fa:86:87:94:3b:f4:97:
         de:a7:b6:97:ad:04:9b:13:48:01:04:d3:2c:36:d4:30:52:c3:
         8f:3d:cc:a6:69:b6:c5:32:71:0b:24:a9:98:6a:05:05:44:5d:
         8d:e9:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:01 2026 by rpki-client