Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/UVwGUstyqvelkq37jwrCyB34k94.asa
File:                     UVwGUstyqvelkq37jwrCyB34k94.asa (raw, json)
Hash identifier:          E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=
Subject key identifier:   51:5C:06:52:CB:72:AA:F7:A5:92:AD:FB:8F:0A:C2:C8:1D:F8:93:DE
Certificate issuer:       /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial:       019CD42836DC60114A8A94B4B21DB8624207
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/UVwGUstyqvelkq37jwrCyB34k94.asa
Signing time:             Mon 09 Mar 2026 19:52:10 +0000
ASPA not before:          Mon 09 Mar 2026 19:52:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47757
Providers:                AS: 34984
                          AS: 201160
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d4:28:36:dc:60:11:4a:8a:94:b4:b2:1d:b8:62:42:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
        Validity
            Not Before: Mar  9 19:52:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=515c0652cb72aaf7a592adfb8f0ac2c81df893de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:e3:60:49:dd:4a:d2:d9:2a:2d:44:a9:84:
                    f4:eb:b4:20:3b:c9:82:60:b8:da:c8:c9:c0:eb:b7:
                    4d:93:62:c0:ee:08:00:44:38:31:e6:1f:5a:da:ce:
                    84:f5:99:4e:aa:16:16:be:80:9c:53:72:8c:5f:d6:
                    c1:e2:f2:0c:d6:3c:84:1a:a3:b3:74:19:d2:a3:08:
                    59:01:1f:40:6b:07:60:cc:56:31:db:c2:54:8e:73:
                    c7:fb:14:7f:c0:a5:43:37:ee:c9:42:75:96:9e:f4:
                    db:46:66:dd:a7:5b:a0:70:4a:55:49:02:38:9f:71:
                    46:3c:f0:3e:de:ba:58:2d:bc:ef:ef:0e:53:74:76:
                    f5:78:cb:ba:8b:1a:4b:09:8e:25:31:5d:56:0e:10:
                    69:0f:4a:fc:f4:e7:6b:e5:1f:64:1e:5e:10:c3:c7:
                    ef:d6:ba:a1:ec:e5:da:8a:05:3d:8a:75:ad:41:07:
                    04:f4:e2:04:b9:ba:98:e2:6c:3d:50:aa:bf:7c:0b:
                    f9:cc:d4:77:25:bb:27:15:bb:f2:54:df:46:4a:04:
                    65:52:9f:96:41:f9:b7:06:0a:93:a5:0c:f9:10:f1:
                    c2:6e:4d:b5:4d:9a:03:ac:eb:04:81:26:d9:25:e2:
                    16:46:9a:ad:be:6d:a6:1a:f0:74:20:9d:34:6c:09:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:06:52:CB:72:AA:F7:A5:92:AD:FB:8F:0A:C2:C8:1D:F8:93:DE
            X509v3 Authority Key Identifier:
                keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/UVwGUstyqvelkq37jwrCyB34k94.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47757

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:cc:38:07:e4:da:4c:13:49:51:06:d6:e5:31:71:2b:10:
         56:3f:38:2b:3a:6d:92:53:bc:4a:fc:1f:91:d6:49:fe:7b:ed:
         d2:c9:fe:49:b3:e0:56:a9:71:cb:8b:12:15:72:47:4f:40:60:
         cf:bc:73:fb:0b:1c:23:09:e5:f2:d3:7a:0b:9a:2e:a2:75:1a:
         54:16:ea:3f:4f:90:c1:04:a7:61:6a:0c:1a:aa:a0:49:1a:e7:
         27:f8:9e:0b:4e:46:9a:60:76:d0:92:0a:ab:e0:fb:be:ec:70:
         7d:ed:47:89:22:a4:0a:3a:7d:4a:b8:c4:65:42:05:41:e7:c0:
         a7:ac:c9:4b:c8:1f:89:b3:15:be:a8:d2:ba:aa:98:e9:2d:b4:
         b7:28:9a:0a:b8:9a:c9:f4:c0:a0:97:4f:22:86:85:ee:41:3d:
         8f:5a:dc:08:96:0a:9f:6e:e8:47:ef:aa:c5:69:07:73:03:8a:
         bb:d0:d5:9a:8d:3d:61:14:f4:f3:78:2c:7c:85:57:94:03:1c:
         b7:92:90:f7:a0:6e:18:74:94:98:84:63:21:1b:40:7d:03:11:
         a6:13:b5:71:d8:2f:db:eb:33:3d:00:4a:0d:86:11:6a:16:0a:
         12:31:5c:17:f9:80:9a:39:87:a8:10:53:ad:cb:91:b7:dc:61:
         1e:bd:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:00 2026 by rpki-client