Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/gRLPj-QZguZ09jmT3_4W7rktsIQ.asa
File:                     gRLPj-QZguZ09jmT3_4W7rktsIQ.asa (raw, json)
Hash identifier:          s5g3qik4l7YdfpWjnJdY6kRR7Y327DcpVO692i5PIOY=
Subject key identifier:   81:12:CF:8F:E4:19:82:E6:74:F6:39:93:DF:FE:16:EE:B9:2D:B0:84
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       019E827B1E64AD02DD2533A7855893BE715E
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/gRLPj-QZguZ09jmT3_4W7rktsIQ.asa
Signing time:             Mon 01 Jun 2026 09:19:27 +0000
ASPA not before:          Mon 01 Jun 2026 09:19:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201550
Providers:                AS: 3491
                          AS: 6453
                          AS: 6762
                          AS: 8452
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:82:7b:1e:64:ad:02:dd:25:33:a7:85:58:93:be:71:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Jun  1 09:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8112cf8fe41982e674f63993dffe16eeb92db084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:be:63:47:39:24:c8:af:16:cd:07:68:2a:
                    8e:3f:b1:b0:0f:9b:b1:44:b1:61:0a:1f:03:58:7c:
                    42:41:59:4a:e6:16:3e:c0:86:b9:29:9f:ba:18:c2:
                    66:24:c2:2a:f4:01:95:75:b3:14:03:f2:1d:a9:d2:
                    65:8f:d1:bb:5d:10:08:ef:1c:53:4e:b7:3f:99:4a:
                    0f:96:69:9e:5f:84:7a:b5:0e:5e:66:8c:2b:11:9e:
                    a7:5a:6f:fe:2e:d8:20:37:7b:98:cc:7e:1f:8c:93:
                    86:bd:e4:86:87:e4:e5:b8:ea:d7:79:9f:cb:3a:75:
                    2b:20:4d:f4:20:3b:31:fa:f3:02:25:be:94:6b:8b:
                    83:47:e2:7c:fc:c4:01:cd:59:86:67:65:ff:ca:2b:
                    41:07:f6:fa:55:60:8a:fc:4b:a5:35:a5:e0:91:22:
                    f1:7f:ab:41:2e:f3:eb:b9:86:3e:7d:9d:fa:05:79:
                    08:64:7d:b8:66:08:12:d3:75:0d:61:90:f1:27:a3:
                    c4:25:c4:de:a4:c0:70:a5:88:ef:f2:6a:99:7a:0b:
                    ad:13:da:fd:4b:fa:3f:ab:ea:a5:a9:d4:83:cc:fb:
                    16:b7:3d:65:51:30:fe:0c:ae:24:84:60:70:bc:eb:
                    7b:c1:ef:b1:fd:84:4f:eb:b7:b2:3d:30:0f:6c:16:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:CF:8F:E4:19:82:E6:74:F6:39:93:DF:FE:16:EE:B9:2D:B0:84
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/gRLPj-QZguZ09jmT3_4W7rktsIQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201550

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:19:2f:f7:17:f8:ab:52:3f:c0:82:0d:7e:c9:3f:19:d2:
         0a:0d:89:e7:48:b9:64:5f:20:be:44:a8:87:c8:86:e6:d0:c4:
         aa:5c:65:f2:22:bb:78:6a:1d:52:15:9e:83:11:c3:bb:88:8b:
         46:9c:d3:07:4b:0d:ac:d3:90:6d:22:04:af:5d:76:ba:e2:fb:
         55:d0:df:66:01:5c:31:a4:c2:04:3f:ea:1f:f5:d5:d2:14:14:
         1c:1a:fe:b5:1e:03:42:01:fb:73:c7:67:f7:24:bb:93:5a:40:
         c2:5a:a2:50:46:72:dd:5e:b1:61:2a:60:a6:05:3c:46:8f:a1:
         70:a0:70:2e:5d:0f:88:ca:d1:9c:33:02:0a:69:55:35:12:25:
         a0:70:d1:a4:e3:e6:46:c0:33:2e:8e:82:27:11:ab:60:17:85:
         4e:fd:42:40:8f:59:d2:75:f7:53:c0:ed:4d:c8:07:d4:f3:dc:
         b3:f3:ac:de:19:de:57:88:28:69:c5:14:38:98:f5:d5:ef:f9:
         85:29:1d:d9:20:6d:cc:56:87:4d:93:67:03:c2:2f:dc:de:d2:
         cd:5a:d1:0e:52:70:4d:4d:cb:dd:e4:c7:e5:a9:ac:f7:9b:fa:
         f3:05:08:6a:40:3a:fb:b2:23:8e:c7:00:a2:48:38:96:b6:7d:
         c5:94:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:19 2026 by rpki-client