Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/77tOqSkccCqsgT7iwIh2WZxvYEU.asa
File:                     77tOqSkccCqsgT7iwIh2WZxvYEU.asa (raw, json)
Hash identifier:          6cF0YRlZJ/irgaMjCJ/XGKH92QA9xLcwVuVDTHgofKs=
Subject key identifier:   EF:BB:4E:A9:29:1C:70:2A:AC:81:3E:E2:C0:88:76:59:9C:6F:60:45
Certificate issuer:       /CN=48e2a6e99d041ee1e2df7cefef055a6aff38fb0b
Certificate serial:       019FB7CC6C883CF4660322D09F59A61C1F1D
Authority key identifier: 48:E2:A6:E9:9D:04:1E:E1:E2:DF:7C:EF:EF:05:5A:6A:FF:38:FB:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/77tOqSkccCqsgT7iwIh2WZxvYEU.asa
Signing time:             Fri 31 Jul 2026 10:50:55 +0000
ASPA not before:          Fri 31 Jul 2026 10:50:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219404
Providers:                AS: 210538
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b7:cc:6c:88:3c:f4:66:03:22:d0:9f:59:a6:1c:1f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e2a6e99d041ee1e2df7cefef055a6aff38fb0b
        Validity
            Not Before: Jul 31 10:50:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efbb4ea9291c702aac813ee2c08876599c6f6045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:a5:16:b6:95:ba:d7:31:22:34:9d:da:c6:
                    b9:55:9f:aa:84:4e:dd:75:08:f2:cc:9a:c5:b3:e3:
                    ac:b2:35:f5:34:3d:1b:03:8f:33:31:1c:c8:f9:2b:
                    b5:23:0f:06:64:cc:bf:42:aa:ee:65:87:23:9f:32:
                    35:7b:62:59:8c:d9:66:0d:34:82:0a:fb:1a:65:d9:
                    a7:c0:bd:37:c7:fd:5a:7c:bc:a7:31:5e:6a:07:44:
                    81:5a:7c:85:0b:40:3b:89:a1:ed:8c:7d:b3:e1:70:
                    36:ff:18:9f:62:32:04:3f:8e:bf:10:6b:14:7d:67:
                    f9:62:89:cd:bf:71:bf:0c:30:74:6c:60:fc:95:8d:
                    52:12:46:f7:17:be:7d:1d:f5:dc:b8:c5:13:64:73:
                    6a:a3:7b:cb:e3:23:b3:85:a9:3a:69:78:c3:d6:7e:
                    18:d7:18:dc:77:a6:e9:12:1d:fc:30:6f:fd:af:1f:
                    e9:1c:13:cf:88:b7:56:61:fa:38:64:42:75:9d:3c:
                    f8:fc:6a:c4:3d:72:dd:98:e6:d0:ab:01:6f:a3:f9:
                    fe:72:41:df:6f:7d:1a:8a:ac:4e:ae:e0:de:6c:ec:
                    a0:1e:9a:dd:18:27:8b:5c:88:75:f7:ed:0a:6e:db:
                    01:c3:44:b4:32:c8:02:cf:ee:12:30:69:b1:48:4f:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:4E:A9:29:1C:70:2A:AC:81:3E:E2:C0:88:76:59:9C:6F:60:45
            X509v3 Authority Key Identifier:
                keyid:48:E2:A6:E9:9D:04:1E:E1:E2:DF:7C:EF:EF:05:5A:6A:FF:38:FB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/77tOqSkccCqsgT7iwIh2WZxvYEU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219404

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:df:60:ea:29:0b:50:b3:f0:d5:a1:83:d9:17:4c:1a:4c:
         c4:8d:c9:c0:b8:9f:ae:35:a8:d5:ea:c7:6f:e3:7d:30:76:d9:
         3b:e4:c9:df:d1:8c:e9:7e:02:7b:31:bd:8d:ab:c9:da:38:b8:
         40:9a:4e:c3:4c:b0:49:8f:c1:58:7f:cb:60:01:c7:27:27:c6:
         62:17:dc:f6:a5:1c:6f:22:3d:20:db:d3:32:bd:80:57:e7:91:
         e9:c9:4d:ae:3a:6f:da:23:3c:9b:eb:06:09:2d:1c:29:fe:90:
         70:1e:eb:54:0e:ed:fc:77:7e:3d:97:24:2d:76:01:83:a4:c2:
         2c:32:96:76:bf:80:7b:0e:96:ac:e8:04:9f:f4:41:fd:ff:78:
         bc:6b:72:9f:90:9f:8a:05:0d:e5:72:86:d9:80:5f:e8:04:df:
         4d:69:8d:ff:c6:cf:d0:2a:53:91:fb:9a:67:5d:1b:6e:8c:61:
         b0:3c:7b:c6:90:38:31:ad:33:ab:90:e3:70:20:3c:71:1c:20:
         90:79:be:1f:7c:16:a7:dc:41:d2:57:12:44:92:ab:1f:7e:08:
         5d:90:ed:0f:c2:3e:3a:aa:7d:d7:c4:f0:40:eb:9b:89:42:6a:
         c8:0c:c0:08:1e:55:55:59:34:12:e3:12:d8:ee:d3:1a:67:97:
         b1:91:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:18 2026 by rpki-client