Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/gFOGmZRlX2Va7a4eZJorJSldfM0.asa
File:                     gFOGmZRlX2Va7a4eZJorJSldfM0.asa (raw, json)
Hash identifier:          iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=
Subject key identifier:   80:53:86:99:94:65:5F:65:5A:ED:AE:1E:64:9A:2B:25:29:5D:7C:CD
Certificate issuer:       /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial:       019DCEFDB4F8B66BC9BFEF36FCD18C4B10AC
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/gFOGmZRlX2Va7a4eZJorJSldfM0.asa
Signing time:             Mon 27 Apr 2026 12:50:26 +0000
ASPA not before:          Mon 27 Apr 2026 12:50:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12976
Providers:                AS: 3327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:fd:b4:f8:b6:6b:c9:bf:ef:36:fc:d1:8c:4b:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
        Validity
            Not Before: Apr 27 12:50:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8053869994655f655aedae1e649a2b25295d7ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:78:e2:e6:2e:68:b9:1c:de:97:a5:5a:c9:
                    47:af:4c:87:35:4e:30:cd:87:87:98:9b:41:cb:f7:
                    9f:fd:46:cf:16:a3:3a:62:47:76:71:4a:e0:8c:d0:
                    42:86:61:c0:cc:4b:35:a8:1f:7c:25:c0:30:88:b1:
                    45:c1:09:ca:31:1d:df:76:03:aa:f0:6b:1f:d0:5f:
                    26:05:19:19:7d:9b:26:6b:95:cb:c7:69:f3:68:a6:
                    a2:5a:ef:dc:2d:01:a1:ef:b0:41:c6:52:12:42:26:
                    d6:5c:13:9b:d6:bd:c0:d6:25:75:9a:ec:2c:e0:f7:
                    bf:b7:3e:e3:68:06:00:9a:f6:e4:5f:c3:14:f4:04:
                    5d:f9:67:c3:1b:61:c0:9d:fa:e9:fc:cc:bf:7b:67:
                    c2:55:a2:bd:43:36:66:c4:60:ef:5c:d5:ce:65:50:
                    d6:0c:ef:b7:1b:43:be:87:98:72:82:28:cb:ac:6c:
                    11:b1:4f:b2:86:05:82:c5:88:cb:d9:b1:67:87:98:
                    42:5b:4d:79:8e:3d:33:43:e1:2a:40:e6:3f:66:d8:
                    95:18:21:d7:e5:da:9e:c2:04:3a:68:c4:d4:21:50:
                    29:d7:46:36:29:03:28:1c:c8:9a:50:a5:5a:7e:d0:
                    a4:5c:a1:94:8a:2a:d7:72:28:2f:c9:57:81:e1:5e:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:86:99:94:65:5F:65:5A:ED:AE:1E:64:9A:2B:25:29:5D:7C:CD
            X509v3 Authority Key Identifier:
                keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/gFOGmZRlX2Va7a4eZJorJSldfM0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12976

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:f3:48:8a:1a:06:42:16:4b:49:fe:12:52:66:48:47:16:
         87:1a:ae:da:7e:c6:c1:5c:e8:66:a1:9e:31:49:cb:6e:25:84:
         41:86:07:b4:27:c2:b7:9e:33:ea:c8:5b:86:48:6f:80:e4:8f:
         62:ad:e2:62:22:ec:a0:9c:78:6f:a1:98:48:9d:0c:13:67:84:
         2d:60:be:4c:44:da:0f:95:f4:bb:b3:e8:e8:52:d6:4e:66:f5:
         6d:fa:be:94:07:41:f6:40:0b:9c:fa:f9:61:c3:9d:a5:f5:8b:
         b4:65:42:4f:34:52:8c:f6:74:68:9e:09:33:52:3c:79:52:91:
         8b:2b:36:22:2e:81:34:84:7a:38:48:e3:09:95:04:45:d1:0c:
         d3:98:e2:b3:8e:6f:b3:8f:54:8a:3d:9d:a8:96:78:2c:20:1d:
         e1:e3:29:4b:7b:25:f7:0b:9d:3a:52:63:98:37:9a:3e:fc:71:
         94:8c:68:d4:96:28:d2:ae:9c:ba:8c:39:de:82:ce:1c:9b:18:
         2e:e7:7b:56:1e:83:60:e5:ec:23:c8:02:61:a6:8a:bd:1c:84:
         c6:9e:96:e1:eb:5c:9b:fa:ce:b9:6b:29:85:94:6b:5b:53:ec:
         c4:7d:1b:87:78:56:69:b2:0c:b9:b5:b7:7a:dd:10:7f:92:b0:
         f9:30:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:34 2026 by rpki-client