Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/1zeYV39Isr6OL1s_vjgqUVa3Hmw.asa
File:                     1zeYV39Isr6OL1s_vjgqUVa3Hmw.asa (raw, json)
Hash identifier:          GrAWOFtYtGsuwZzP0Xb7H1Utm0w2ywgiCtruxkTTP3A=
Subject key identifier:   D7:37:98:57:7F:48:B2:BE:8E:2F:5B:3F:BE:38:2A:51:56:B7:1E:6C
Certificate issuer:       /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial:       01A0F1B313D8C4BDCAB3B29595AB25C002EE
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/1zeYV39Isr6OL1s_vjgqUVa3Hmw.asa
Signing time:             Wed 30 Sep 2026 09:44:00 +0000
ASPA not before:          Wed 30 Sep 2026 09:44:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206924
Providers:                AS: 1299
                          AS: 3170
                          AS: 3257
                          AS: 5511
                          AS: 6939
                          AS: 44684
                          AS: 44854
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:b3:13:d8:c4:bd:ca:b3:b2:95:95:ab:25:c0:02:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
        Validity
            Not Before: Sep 30 09:44:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d73798577f48b2be8e2f5b3fbe382a5156b71e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:67:4e:4a:45:22:b2:04:08:45:5a:51:e9:
                    4a:17:1c:30:62:50:34:eb:09:35:4b:2b:db:7a:81:
                    b8:55:a2:c0:de:e3:5c:97:cc:87:4f:83:65:3f:1f:
                    56:07:90:df:f2:54:7e:55:5f:7f:ba:f4:fa:d6:63:
                    73:6a:d5:7c:9b:d8:05:f8:b8:5f:02:05:81:70:6b:
                    61:32:89:9a:65:54:4c:a4:1e:4b:3e:50:79:67:58:
                    91:23:08:6d:6d:18:3f:f8:5e:06:c5:dd:88:4e:cd:
                    f7:47:99:01:77:52:2d:13:9b:59:b4:e5:ec:fb:a6:
                    0b:c5:52:08:b7:b2:81:12:68:b4:77:41:0e:ce:27:
                    3c:db:b1:f3:36:2c:04:9c:de:38:f3:e6:09:6a:f8:
                    c6:01:1d:84:42:ad:14:5f:f7:db:32:55:7d:ac:2e:
                    18:f4:63:1c:b1:dd:05:4d:f0:b7:23:bc:92:bb:12:
                    4a:11:22:80:2b:79:88:f1:98:c7:85:9a:84:53:d3:
                    46:7e:7e:e6:9b:b6:cc:30:2e:98:02:db:ee:2b:78:
                    e2:9e:cc:70:77:82:7c:50:10:55:83:09:d8:1c:79:
                    79:fe:75:02:01:45:e8:4c:f6:a2:70:01:ac:01:a5:
                    fb:57:1a:c8:07:45:62:c3:ea:20:42:c5:9c:99:61:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:98:57:7F:48:B2:BE:8E:2F:5B:3F:BE:38:2A:51:56:B7:1E:6C
            X509v3 Authority Key Identifier:
                keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/1zeYV39Isr6OL1s_vjgqUVa3Hmw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206924

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:8d:f0:dd:4c:0b:c4:b0:02:84:86:42:ce:36:bd:32:e3:
         ce:56:af:c9:7d:04:da:8a:52:49:50:b3:0e:bf:b3:96:59:d7:
         ea:12:1d:49:25:8b:b5:8e:fe:9d:a2:22:d6:f5:73:77:cb:cc:
         2b:a0:b3:67:22:c4:73:1c:ad:c4:b0:5d:27:22:2c:38:aa:73:
         cc:3c:42:56:fa:eb:3d:55:6c:60:4b:02:f5:dc:10:32:dc:3e:
         55:c0:dd:64:56:78:ac:f1:2d:03:5d:97:a5:ec:67:81:91:0c:
         8b:96:6c:ef:23:a0:02:19:80:b8:74:b0:12:25:7f:23:1a:0e:
         fe:37:e1:b3:9b:8d:5e:e6:f9:4f:e6:a3:b4:a9:80:00:97:bb:
         60:0f:99:19:42:77:e0:78:b7:47:f7:76:e8:ce:10:09:4d:d6:
         6d:48:6f:f4:4a:35:42:ad:15:5c:23:cb:53:96:e1:53:2c:07:
         5c:4d:30:2a:12:14:34:d4:bf:a0:14:b4:32:af:b1:d6:94:b0:
         e0:41:3d:11:b5:31:ae:01:d4:3c:31:72:e2:c1:86:cc:08:33:
         d8:0b:7d:40:80:8f:22:8b:72:f8:5f:58:6c:f5:88:5c:07:0d:
         f8:06:66:c1:e9:52:7d:1e:84:e6:62:25:8d:0b:16:43:cc:ac:
         f5:ae:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:54 2026 by rpki-client