Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/T0GmtxLDrxtqyIA0bdu-NCJQlEA.asa
File:                     T0GmtxLDrxtqyIA0bdu-NCJQlEA.asa (raw, json)
Hash identifier:          7uMkuKkLWu61F6KDBGYAGC+XrwgeiAnE8WRKGfMpV9A=
Subject key identifier:   4F:41:A6:B7:12:C3:AF:1B:6A:C8:80:34:6D:DB:BE:34:22:50:94:40
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       019D06B1CFE854534DEC6FF7AB7B5010D586
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/T0GmtxLDrxtqyIA0bdu-NCJQlEA.asa
Signing time:             Thu 19 Mar 2026 15:23:29 +0000
ASPA not before:          Thu 19 Mar 2026 15:23:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200827
Providers:                AS: 29670
                          AS: 41051
                          AS: 41108
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 15:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:b1:cf:e8:54:53:4d:ec:6f:f7:ab:7b:50:10:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: Mar 19 15:23:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f41a6b712c3af1b6ac880346ddbbe3422509440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:09:f5:df:8d:d0:c2:e2:26:e0:ef:07:ed:
                    82:68:bd:71:40:cc:df:9f:6a:5c:57:c8:75:54:00:
                    74:f5:59:9e:66:41:03:0c:8f:d6:d5:75:6a:ba:4c:
                    1a:aa:88:1e:42:8a:e5:c3:f8:a4:8d:2b:bf:d5:be:
                    d6:12:bc:c4:67:e0:db:07:f2:92:6a:7b:ee:0f:f7:
                    0b:67:32:79:0e:ae:36:d0:15:c8:9f:12:92:55:f7:
                    28:1c:7f:88:d4:69:78:36:5f:a2:6a:5f:a4:51:94:
                    45:76:61:2b:e2:5b:df:30:49:77:14:c2:cf:ed:bb:
                    5a:3b:88:66:43:79:ff:fb:18:58:39:0f:65:7c:30:
                    d1:36:8a:18:fd:0b:fc:f2:16:64:06:04:a5:de:c3:
                    d3:47:d9:96:e0:7e:dd:6f:e4:da:0d:d5:7a:e4:7f:
                    c9:68:57:50:eb:b3:f8:3b:f8:96:2d:3a:6c:70:72:
                    a1:ea:48:d9:e7:2e:71:86:5f:6d:72:65:31:e3:48:
                    1e:45:39:bc:3d:dc:86:84:09:41:c8:df:4a:6b:b3:
                    4f:9d:38:f7:d6:4b:41:0a:02:ac:ae:74:a6:ab:bb:
                    05:b6:37:c4:f5:f0:c3:54:07:ae:da:5a:a4:7c:4b:
                    89:b5:c6:91:58:ef:92:cd:51:78:53:75:3e:30:ad:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:A6:B7:12:C3:AF:1B:6A:C8:80:34:6D:DB:BE:34:22:50:94:40
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/T0GmtxLDrxtqyIA0bdu-NCJQlEA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200827

    Signature Algorithm: sha256WithRSAEncryption
         35:59:2e:af:75:f6:f6:26:fc:6e:59:1c:13:81:65:65:4f:e7:
         d1:7f:99:03:d7:4f:c6:73:4c:d9:62:0c:b2:bc:c2:b5:ee:88:
         61:10:ea:c4:c2:78:f2:63:81:85:4c:a2:d3:6e:76:bd:8c:75:
         e8:5d:62:83:15:b1:83:9b:d4:96:f5:54:d9:40:15:05:0e:a6:
         62:82:ad:c0:b0:a5:d5:9a:56:4a:d6:69:a7:81:1e:4d:c0:8e:
         3d:63:98:c0:06:f5:d4:a2:ad:c1:cd:e0:65:57:2a:f5:d8:6c:
         3d:3d:90:ec:b3:99:83:49:51:05:84:c2:2f:fd:ff:ad:c5:cb:
         3f:3d:6d:bb:69:aa:64:58:5c:46:e8:92:86:21:3a:c2:cc:f3:
         e1:8c:16:15:f1:a8:54:02:d8:41:9f:7e:b0:1f:d6:f3:93:de:
         29:ab:31:06:61:ee:3b:fb:2a:b5:bf:d5:10:cd:49:9a:34:b9:
         23:66:2b:4e:bd:2d:c1:15:a8:05:cf:44:49:9a:7b:1b:ef:2a:
         ed:44:35:ab:04:26:97:a6:3a:9f:7e:a7:00:53:f5:66:89:4d:
         cf:d5:fd:f0:db:5a:7d:a0:69:5c:f5:0f:1c:23:d8:b2:8c:b9:
         94:33:62:82:1e:79:24:2c:78:98:e3:70:bc:dc:ce:ec:3b:74:
         b8:e7:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:28:44 2026 by rpki-client