Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/7JrvDNG8oGw0RmNvLIxWBX3TSpo.asa
File:                     7JrvDNG8oGw0RmNvLIxWBX3TSpo.asa (raw, json)
Hash identifier:          klva+5TPMuYVnGfJMNENaMHwwVk+KQKe00ezvPZgP+0=
Subject key identifier:   EC:9A:EF:0C:D1:BC:A0:6C:34:46:63:6F:2C:8C:56:05:7D:D3:4A:9A
Certificate issuer:       /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial:       019DDDCB6BDAFFDF1E59B0962004C08BBFD5
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/7JrvDNG8oGw0RmNvLIxWBX3TSpo.asa
Signing time:             Thu 30 Apr 2026 09:49:49 +0000
ASPA not before:          Thu 30 Apr 2026 09:49:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208913
Providers:                AS: 202294
                          AS: 216132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:cb:6b:da:ff:df:1e:59:b0:96:20:04:c0:8b:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
        Validity
            Not Before: Apr 30 09:49:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec9aef0cd1bca06c3446636f2c8c56057dd34a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:8d:01:f4:81:c1:b5:89:ed:b5:45:5b:8a:
                    3e:0f:d0:cf:13:e4:bf:9f:85:36:2d:ef:c7:be:cb:
                    3d:53:ab:a7:84:c2:f3:bd:fb:73:27:6b:d5:cd:03:
                    82:5a:50:c1:88:e2:8f:68:92:55:fc:92:1c:eb:cb:
                    65:f8:7f:cb:89:3a:32:55:30:71:b0:55:59:13:5c:
                    e9:cd:ee:b2:46:c3:75:f0:fe:0f:13:26:ae:e1:a2:
                    37:4d:f7:98:44:ce:4c:ca:1d:5e:18:39:bb:5b:50:
                    e6:11:a8:8a:97:b2:a4:1b:02:49:5e:2b:b6:08:3e:
                    d5:78:56:fd:5a:1a:b3:ac:19:8b:dd:45:c7:33:e6:
                    c3:69:86:0a:c3:7b:42:f6:bd:d6:d1:1c:1c:78:7f:
                    76:ad:82:26:c8:d4:d6:c9:40:18:c8:40:3f:cb:a9:
                    f5:f5:d7:dc:8d:71:d8:67:ff:9e:df:bb:63:f9:41:
                    81:60:46:75:e5:51:67:39:ec:0d:28:4a:03:03:ac:
                    8b:e8:33:39:7c:dd:22:f9:2e:fe:b3:82:e2:bd:45:
                    ca:3a:10:de:4b:94:ec:dd:2e:39:da:fd:12:e0:ce:
                    83:0f:2a:ba:74:2c:15:f1:6b:1a:72:a3:1b:9e:dc:
                    48:0f:2c:ae:d2:6c:c2:a6:be:b7:4d:80:28:a7:a4:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9A:EF:0C:D1:BC:A0:6C:34:46:63:6F:2C:8C:56:05:7D:D3:4A:9A
            X509v3 Authority Key Identifier:
                keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/7JrvDNG8oGw0RmNvLIxWBX3TSpo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208913

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:29:76:74:26:87:6a:67:fa:7c:07:88:23:c7:42:b6:b9:
         d6:2a:ff:8a:ee:bb:ed:05:ce:37:a5:bc:7c:e0:c8:45:37:54:
         81:fe:72:bd:ef:fc:7c:a9:97:8f:5e:c0:d0:f0:37:78:98:37:
         77:b3:df:32:93:05:82:3a:4b:7a:ab:df:fd:9b:27:f7:f8:f2:
         11:66:3a:1a:aa:2b:5e:d8:97:59:f1:28:a0:c6:e0:50:b5:14:
         5b:5e:4d:c0:74:ec:7c:3d:23:e6:00:8b:2e:0c:e4:d2:29:ce:
         05:97:06:be:ac:c6:40:51:de:ad:ae:ff:30:69:1c:77:7a:19:
         b6:f6:f9:65:de:3c:6c:ff:9f:96:74:12:37:09:df:e1:84:3c:
         0b:a7:da:82:9f:0d:e8:a5:7b:2e:c4:56:8a:e5:9f:cd:f7:8f:
         2c:d2:b2:e9:39:5a:f0:77:84:80:ca:f3:6f:aa:20:7f:87:9f:
         29:52:cc:1c:8a:ed:ff:63:17:cb:1c:d6:e5:3b:b8:2b:e5:87:
         79:f2:1a:dd:e0:ab:5f:25:65:95:a8:d2:ff:9a:b8:93:d1:86:
         e3:3c:ea:19:ca:19:c8:90:60:49:5d:f5:27:9c:0c:ab:bf:f8:
         53:4c:34:e0:42:3d:64:df:d9:ee:dc:92:10:c3:1a:08:75:2c:
         e7:4c:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:22 2026 by rpki-client