Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/hcfkZ1canYcqBaE9iPzQiK47YkU.asa
File:                     hcfkZ1canYcqBaE9iPzQiK47YkU.asa (raw, json)
Hash identifier:          WYngWTyXnFZ7BPoBYe6DykacViEk1I9J2lH7LeX7hgc=
Subject key identifier:   85:C7:E4:67:57:1A:9D:87:2A:05:A1:3D:88:FC:D0:88:AE:3B:62:45
Certificate issuer:       /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial:       019FAFC645895B1D3D8A98C0F416A2C033D3
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/hcfkZ1canYcqBaE9iPzQiK47YkU.asa
Signing time:             Wed 29 Jul 2026 21:27:14 +0000
ASPA not before:          Wed 29 Jul 2026 21:27:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209740
Providers:                AS: 3320
                          AS: 5405
                          AS: 8220
                          AS: 8422
                          AS: 34953
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:c6:45:89:5b:1d:3d:8a:98:c0:f4:16:a2:c0:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
        Validity
            Not Before: Jul 29 21:27:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=85c7e467571a9d872a05a13d88fcd088ae3b6245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:10:2d:ac:f5:c8:dd:7d:6a:4d:a9:7d:c3:
                    45:51:25:02:fb:6e:61:da:4a:4e:92:90:69:ab:2e:
                    03:21:8c:b8:98:d8:71:b2:a4:9c:fe:5c:23:c3:7e:
                    8a:b8:37:e8:b0:7a:f0:e2:df:b6:95:e5:80:80:38:
                    34:a6:c9:2a:a1:0b:e2:ee:8c:8d:47:fb:4c:c4:94:
                    f3:f9:c4:ad:45:86:6e:c2:b7:74:5f:05:98:2c:92:
                    34:43:ba:62:47:fd:02:6f:3a:ed:da:3a:6f:b8:e0:
                    28:2f:bd:f5:ac:99:97:01:3d:4b:4e:db:c5:f6:29:
                    fe:86:32:15:84:b7:4a:ad:79:14:4a:94:b3:ed:bd:
                    03:1b:b4:eb:fd:38:13:6b:d3:de:13:a6:37:e6:38:
                    80:50:87:19:ba:44:74:3f:35:6b:86:20:d5:61:ae:
                    58:a1:fc:06:eb:2d:7e:ad:06:68:8e:21:4b:6a:ea:
                    b2:de:4d:e3:9e:55:14:7c:26:55:91:38:9c:42:31:
                    de:73:5d:af:d7:cc:24:c3:77:55:94:92:94:0b:e9:
                    4e:f8:8e:22:ed:9a:7d:7a:09:1a:5c:95:3e:4c:a0:
                    1e:fc:55:67:c9:de:e9:09:c6:93:62:17:29:e9:42:
                    9d:40:6f:cf:cb:96:3f:18:83:6d:ea:70:73:e9:89:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:E4:67:57:1A:9D:87:2A:05:A1:3D:88:FC:D0:88:AE:3B:62:45
            X509v3 Authority Key Identifier:
                keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/hcfkZ1canYcqBaE9iPzQiK47YkU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209740

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:fe:cf:29:fe:fd:c3:33:d7:89:d5:4b:c8:92:cc:56:7b:
         0b:63:46:61:48:3c:3e:c0:6d:f9:ff:0f:37:77:7f:08:40:5f:
         52:a0:a5:a9:5b:2b:a5:98:a5:ba:12:16:3c:05:da:8d:b6:29:
         12:ab:ba:f7:ed:08:d4:b7:b6:ad:85:c8:ed:7b:4a:f2:3c:e2:
         44:f6:ce:64:eb:0e:ab:d1:7b:ed:ab:b0:a1:9b:fe:0d:49:5a:
         4f:08:93:f9:3d:5c:24:4b:98:e7:37:6b:8b:ac:02:e3:4c:b0:
         75:c2:36:9e:4a:a2:d2:ef:5c:c2:d5:7b:fc:19:3e:cc:b2:1e:
         28:76:42:32:23:5d:d1:b7:d6:ec:9e:99:07:a9:5d:d8:46:7d:
         3a:87:45:dc:71:45:b3:5e:8a:9d:d6:cc:43:bc:ce:af:50:c2:
         aa:ed:df:b2:2d:91:e7:96:2c:74:22:2c:d4:67:76:c4:42:ed:
         5c:46:93:92:b2:f4:5f:d6:b2:56:25:91:3b:34:d3:07:ca:27:
         24:5c:96:ee:51:36:b3:71:65:d5:e3:c7:47:7a:ca:28:9e:90:
         c4:b1:fb:f6:c2:77:ee:2b:6e:e1:55:5a:fc:1b:cb:ea:b0:f2:
         1b:30:cc:7a:0d:ee:f4:db:07:0f:9b:07:b9:be:45:d9:3f:90:
         1a:ee:bd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:10 2026 by rpki-client