Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/W77jTjdF2mxRj0NChvTE_9cAB5Y.asa
File:                     W77jTjdF2mxRj0NChvTE_9cAB5Y.asa (raw, json)
Hash identifier:          q6p+MlCf5ceFSHhfIArQLLvXvpzJmIxO5QEK37blEmU=
Subject key identifier:   5B:BE:E3:4E:37:45:DA:6C:51:8F:43:42:86:F4:C4:FF:D7:00:07:96
Certificate issuer:       /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial:       019FD5A9F8DDB3765C2218D690534A4F1109
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/W77jTjdF2mxRj0NChvTE_9cAB5Y.asa
Signing time:             Thu 06 Aug 2026 06:01:54 +0000
ASPA not before:          Thu 06 Aug 2026 06:01:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210941
Providers:                AS: 41051
                          AS: 58057
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d5:a9:f8:dd:b3:76:5c:22:18:d6:90:53:4a:4f:11:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
        Validity
            Not Before: Aug  6 06:01:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bbee34e3745da6c518f434286f4c4ffd7000796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:4c:d1:e0:3b:4f:15:22:82:dd:4f:50:67:
                    28:3e:ef:81:e0:45:f0:c9:d3:0f:0a:15:49:7e:78:
                    76:3e:4a:a9:c9:ed:9f:5f:8d:29:65:fc:35:a2:e0:
                    a8:30:62:24:18:10:43:9f:17:17:e2:b9:e1:96:7f:
                    7b:7f:7a:06:c3:39:eb:b7:17:a0:ab:a3:5c:08:1e:
                    bb:4d:5b:08:2c:23:f0:62:36:29:43:60:89:ca:d7:
                    a9:21:44:eb:4d:bc:d1:de:24:61:9a:16:9f:f5:03:
                    87:99:54:40:0a:08:55:30:a9:8b:1c:2b:03:52:70:
                    6c:bf:ea:2e:b2:6e:d0:aa:ff:e9:eb:8c:72:ab:d3:
                    12:31:83:08:e8:2f:b7:93:cb:08:44:a4:87:39:54:
                    12:c6:91:86:13:b4:fb:7c:c4:39:d3:7f:d7:49:60:
                    92:68:8c:d2:62:ba:02:f4:9f:b7:25:d0:fc:4a:be:
                    d3:d4:08:82:97:92:37:c9:43:4e:f8:ec:26:4f:0e:
                    10:eb:6a:9c:ac:1d:28:09:f6:f0:9f:34:d9:7c:80:
                    93:25:4a:1d:7d:f1:fe:77:97:b2:67:f7:f7:35:48:
                    29:ec:ba:30:e7:70:a1:33:59:ec:99:14:09:d4:08:
                    24:1e:95:34:e9:12:1e:c3:69:9b:15:ba:bd:28:dd:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:E3:4E:37:45:DA:6C:51:8F:43:42:86:F4:C4:FF:D7:00:07:96
            X509v3 Authority Key Identifier:
                keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/W77jTjdF2mxRj0NChvTE_9cAB5Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210941

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:33:97:14:34:97:bf:c2:74:62:bf:3b:e6:5a:aa:93:5b:
         34:01:cb:99:9f:05:df:61:71:59:ef:40:52:24:97:fd:3c:d0:
         0b:a4:d3:71:4b:f1:41:4f:14:1b:64:2a:91:89:d7:92:b6:d0:
         c6:d4:db:42:0b:97:d4:0b:fd:2b:4e:58:f9:7f:1b:b3:c0:79:
         70:0e:3a:19:41:3a:b2:a1:d4:bd:b1:24:35:b5:33:c6:f4:c1:
         f0:b7:18:91:08:c7:e8:ee:5b:6b:20:d6:b2:84:82:7a:66:ba:
         52:9b:21:1a:2a:4e:63:55:ca:c0:45:a5:a6:6c:04:f7:ad:a2:
         cc:91:4e:16:02:16:d5:5e:8d:7d:05:c4:3e:0f:0c:e9:2e:92:
         ae:06:4b:50:14:6a:52:23:30:d5:fc:c9:0a:17:13:31:dd:69:
         2c:45:3a:7a:5f:3a:28:a8:b2:78:bb:95:aa:d1:e9:cb:f8:18:
         c8:52:70:f0:fd:7a:c7:a7:6b:ab:33:b0:7a:03:1f:e1:15:14:
         ec:fc:18:55:3b:ef:5c:e5:92:80:22:2e:7e:f8:1d:65:bb:01:
         ac:c5:dd:9d:b1:30:d1:b5:06:67:47:ff:a3:9d:aa:f4:73:43:
         be:e8:46:11:ae:bc:a7:ba:06:e1:9a:ef:1b:63:ff:be:8e:ae:
         e6:b6:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:49 2026 by rpki-client