Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/QVq18C8a73aIQH-AcKRLMzpO3YQ.asa
File:                     QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (raw, json)
Hash identifier:          2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=
Subject key identifier:   41:5A:B5:F0:2F:1A:EF:76:88:40:7F:80:70:A4:4B:33:3A:4E:DD:84
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       019F9ECE17A3E0FD549D07EC3ECE8F9C0BF1
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/QVq18C8a73aIQH-AcKRLMzpO3YQ.asa
Signing time:             Sun 26 Jul 2026 14:22:14 +0000
ASPA not before:          Sun 26 Jul 2026 14:22:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200625
Providers:                AS: 209533
                          AS: 212895
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:ce:17:a3:e0:fd:54:9d:07:ec:3e:ce:8f:9c:0b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Jul 26 14:22:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=415ab5f02f1aef7688407f8070a44b333a4edd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:bb:c9:70:1f:69:14:ae:41:7c:fc:ad:39:
                    a6:24:ca:a8:3a:ec:43:21:e4:26:b7:0d:fc:11:36:
                    16:1d:37:9b:36:09:06:86:c5:71:9b:38:84:85:56:
                    85:98:85:da:88:15:90:5b:57:02:67:b5:96:b4:1e:
                    b9:e7:5f:a3:bf:73:2f:52:04:9d:d3:6c:35:f3:68:
                    0f:dd:db:8b:ac:e3:80:43:ad:fe:01:b4:fc:64:a4:
                    87:19:f0:e3:5e:6d:e7:02:b2:86:46:5a:08:4a:51:
                    03:89:7b:27:1e:f7:c9:fc:ba:2c:89:31:7c:4b:3d:
                    1e:43:0a:8f:c0:ef:64:4a:24:28:d8:85:76:39:78:
                    14:4e:7c:aa:85:6f:0f:2a:3d:7a:9c:7a:18:9b:62:
                    16:c4:a0:1a:24:8d:93:35:12:db:1f:1f:83:ad:15:
                    11:86:41:07:a9:a8:42:3b:13:b9:20:1a:65:30:f1:
                    c6:d7:1d:3f:d1:27:2d:6d:df:7d:7f:af:3c:07:63:
                    2a:23:5d:ba:00:e7:ea:29:6d:6f:e1:35:40:26:e7:
                    3a:8c:d7:8c:76:13:82:9c:62:e1:16:ae:41:27:ad:
                    68:c7:c6:20:2c:8f:60:18:aa:05:3c:7b:6c:ae:b7:
                    e2:97:5c:25:ad:d0:9b:f5:85:9d:56:71:0c:e7:38:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:B5:F0:2F:1A:EF:76:88:40:7F:80:70:A4:4B:33:3A:4E:DD:84
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/QVq18C8a73aIQH-AcKRLMzpO3YQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200625

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:88:e9:1c:8f:81:d7:00:d8:19:16:c9:1b:a1:3d:c7:60:
         d0:16:81:6d:68:46:29:67:a0:e2:01:a9:21:e9:69:1e:04:67:
         75:87:9c:cc:89:b8:e0:7a:bf:9a:34:53:b7:5b:bd:fb:83:28:
         2c:d2:b1:60:d7:61:12:95:66:a9:78:ac:6f:92:b2:01:08:14:
         7e:81:03:2b:6a:71:4b:70:5b:4e:12:f6:92:a9:aa:5a:76:10:
         65:04:8f:0d:8a:17:ab:ca:04:ff:2d:72:00:42:0d:dd:a2:6d:
         ee:9d:90:fa:75:38:e4:b8:3f:82:32:eb:83:89:e4:19:15:d1:
         2b:fc:c8:da:bf:34:9e:d4:41:25:e7:82:46:8c:75:1c:9c:9c:
         0a:29:eb:12:8b:eb:26:e0:a5:cc:19:c9:bf:7e:96:8e:86:92:
         0b:0a:f9:f8:66:8f:ce:03:cb:bd:37:1e:df:6f:00:5c:0a:96:
         7f:84:43:da:cf:45:ea:5f:6f:e0:f8:bb:44:b0:f9:9e:90:26:
         df:46:b5:78:84:2b:99:cf:eb:ba:dc:4a:60:b6:00:66:e9:c5:
         dd:b6:90:75:f9:b5:45:49:35:bc:f1:34:3b:2c:77:ec:4b:a5:
         6a:6c:98:60:fc:1a:82:f3:93:96:0f:59:ae:ca:d8:5f:86:70:
         f6:55:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:29:19 2026 by rpki-client