Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa
File:                     7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa (raw, json)
Hash identifier:          ywvJHVR3B4vawxtuFjj3XJUi3rb3QhowkNq1qP6BNhk=
Subject key identifier:   ED:DC:0C:5B:3C:6B:60:B2:94:CB:3F:4E:30:5C:2C:9B:70:35:3B:96
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019E8B1D32B6B57C666EB13A9314E97155B1
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa
Signing time:             Wed 03 Jun 2026 01:33:26 +0000
ASPA not before:          Wed 03 Jun 2026 01:33:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200636
Providers:                AS: 174
                          AS: 1239
                          AS: 3356
                          AS: 8943
                          AS: 23033
                          AS: 212477
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8b:1d:32:b6:b5:7c:66:6e:b1:3a:93:14:e9:71:55:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Jun  3 01:33:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eddc0c5b3c6b60b294cb3f4e305c2c9b70353b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:8b:d4:85:af:ef:08:a1:5b:d4:0f:03:01:
                    b4:cf:24:92:eb:8d:2d:21:55:36:de:a6:7c:99:3f:
                    ee:51:ae:e6:11:ef:0e:d0:41:61:26:11:c2:06:bc:
                    db:3a:95:25:b4:dc:9a:b5:5f:07:a1:05:dc:19:51:
                    3a:8d:f4:6c:99:ca:b6:22:fc:04:b0:27:91:f6:c7:
                    61:43:86:33:20:9b:f5:db:3b:b0:22:7e:c3:54:4f:
                    e2:ec:3b:1a:b6:ba:9a:71:cc:5e:a3:fa:42:bd:94:
                    19:91:45:43:a8:0f:b6:bc:09:b7:75:b2:77:48:6a:
                    4b:88:4d:2d:c6:e8:8e:7f:34:55:42:9b:aa:65:45:
                    f6:0d:9d:31:c4:54:0d:87:06:7c:c5:d0:5e:47:a2:
                    78:d1:af:3d:89:58:6a:cf:6c:78:49:68:6e:ee:4d:
                    5c:de:3a:7d:84:4a:9a:7a:24:a9:c0:86:23:8a:22:
                    1b:a3:27:ee:4f:0c:89:f2:f9:9c:b7:4d:47:f8:c8:
                    12:9a:67:5c:21:74:49:77:4d:ef:c6:0b:51:91:b7:
                    65:d7:04:af:bf:5e:de:e5:32:41:6d:4f:c0:6f:2d:
                    b6:72:73:9b:e5:57:63:24:5b:09:88:92:18:d0:aa:
                    03:ff:f4:f8:88:d9:69:40:63:86:fb:43:1f:cd:71:
                    3b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:0C:5B:3C:6B:60:B2:94:CB:3F:4E:30:5C:2C:9B:70:35:3B:96
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200636

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:d9:8d:86:1d:13:c5:16:b1:ff:79:1d:e8:c2:d9:e9:ac:
         a3:b2:85:5d:b9:f8:c9:f6:66:da:c4:80:d8:38:b3:8b:56:71:
         ef:47:de:a2:a1:22:b4:49:3a:bf:37:f9:9b:26:fb:3c:2d:1f:
         b4:1c:83:1b:ae:f0:a5:87:f8:81:16:85:19:cb:c1:27:13:c2:
         50:ee:1e:08:1d:f4:0b:72:af:8d:59:b1:04:71:9d:e8:d5:8b:
         88:23:21:1a:a3:b6:70:97:59:5e:a4:ac:19:ff:23:76:cc:3c:
         3a:a4:26:19:3f:e1:e4:9f:a7:34:2a:4e:6f:bc:46:79:77:3a:
         b3:ac:59:6d:fe:d2:ff:36:4f:5f:49:7f:d0:f8:37:93:e0:62:
         22:dc:3e:c4:17:90:4e:17:2a:83:04:91:b0:ab:4e:53:f3:44:
         8f:ab:cd:85:24:89:a4:d4:30:c9:6e:52:2e:f7:0c:3c:d3:3a:
         9f:99:33:cf:71:22:61:59:0d:8f:f8:0c:1d:da:7c:0c:3f:5e:
         0a:a3:b6:5a:6e:ec:c1:77:75:1c:12:7c:41:ac:3f:15:22:99:
         e0:0a:23:23:ba:6b:ff:8c:82:d0:ce:58:fa:3d:1b:50:8b:41:
         e0:a5:16:31:65:c9:6f:7c:37:c0:9a:09:0c:2a:4e:ee:93:92:
         44:ee:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:37 2026 by rpki-client