Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/Y4PPIpkii_K_B3es2z2wg-o0K4g.asa
File:                     Y4PPIpkii_K_B3es2z2wg-o0K4g.asa (raw, json)
Hash identifier:          E0zhRt7/fWPWPotvek7QQ9QAuuv2LHcZSkRznjzV2UQ=
Subject key identifier:   63:83:CF:22:99:22:8B:F2:BF:07:77:AC:DB:3D:B0:83:EA:34:2B:88
Certificate issuer:       /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial:       01A073006335C52638D81684EC773A27DF72
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/Y4PPIpkii_K_B3es2z2wg-o0K4g.asa
Signing time:             Sat 05 Sep 2026 19:16:40 +0000
ASPA not before:          Sat 05 Sep 2026 19:16:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198352
Providers:                AS: 20562
                          AS: 24785
                          AS: 34307
                          AS: 205185
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:73:00:63:35:c5:26:38:d8:16:84:ec:77:3a:27:df:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
        Validity
            Not Before: Sep  5 19:16:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6383cf2299228bf2bf0777acdb3db083ea342b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:b1:cd:37:2d:f8:b4:f0:9d:11:96:0c:cf:
                    a3:87:68:a4:ac:ef:a5:9e:88:76:9c:9e:48:cb:d9:
                    b5:26:00:c1:06:87:4d:9d:71:da:be:ee:c9:08:7e:
                    2c:f3:47:c1:1f:11:fc:cf:e4:77:db:7f:b9:83:40:
                    b4:15:c2:98:a7:e2:e0:40:b9:04:07:b8:ae:87:66:
                    92:e7:de:17:3c:a0:1c:74:2e:f1:bc:b5:62:be:91:
                    26:9d:df:d8:ce:94:6b:26:4f:c5:1a:a1:50:2e:20:
                    aa:69:40:84:6a:f2:a7:32:7d:36:2a:c4:e0:7d:dc:
                    e7:95:f1:cc:24:8d:58:b3:8e:26:43:1a:4a:83:68:
                    b4:b7:ca:01:f2:c7:df:74:01:26:3d:3f:46:1b:73:
                    13:0c:6a:7a:37:a6:66:6c:5e:82:3e:8c:03:c7:56:
                    cf:71:3c:89:3e:9f:e8:9e:f7:14:9c:3a:75:06:27:
                    d9:74:48:ae:b1:53:d1:8d:94:15:7f:0b:11:56:37:
                    f8:11:e2:7c:65:f0:85:f1:5e:8d:c6:e2:81:fb:e5:
                    7d:f5:68:1a:9e:ac:30:92:75:96:c6:f6:ef:33:20:
                    81:95:fc:30:d8:36:a0:1d:b5:50:2a:30:31:0b:0e:
                    ce:7d:f4:56:a2:39:5b:a9:4d:91:4a:c3:74:46:12:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:CF:22:99:22:8B:F2:BF:07:77:AC:DB:3D:B0:83:EA:34:2B:88
            X509v3 Authority Key Identifier:
                keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/Y4PPIpkii_K_B3es2z2wg-o0K4g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198352

    Signature Algorithm: sha256WithRSAEncryption
         09:87:10:d4:27:bf:95:fb:ad:4a:a1:9c:92:a6:a3:48:bc:49:
         fe:05:72:3e:c4:4d:e5:eb:1b:27:5a:8c:c8:5a:65:f3:9e:19:
         be:f7:87:c5:db:9b:36:63:0e:f2:07:5e:4c:f2:64:8b:4e:da:
         9d:2f:84:34:07:4a:32:ae:d9:82:ad:1f:93:0f:56:23:b1:6b:
         33:81:9b:31:01:13:16:37:a7:29:24:33:04:cd:21:c6:ff:25:
         bd:a1:70:a5:7d:dd:d1:78:0c:9f:c8:bf:ed:42:ec:fd:ec:81:
         ef:b1:06:9d:8c:95:3d:1e:74:2c:42:de:e4:40:eb:fd:d1:d0:
         5e:03:f0:89:31:1a:2a:98:dd:83:85:54:34:44:70:06:89:f0:
         79:3d:a0:10:e5:e5:30:42:da:a9:a4:8f:3e:53:5f:21:66:c4:
         f2:cb:1e:41:4c:c8:2f:06:96:b7:d1:1b:21:96:8e:64:58:a8:
         e4:7f:74:ff:1f:19:14:7d:ef:7b:3a:5f:80:26:e9:97:04:9c:
         85:64:eb:fc:2b:4b:ba:bc:0c:9c:db:ac:ef:bd:52:e1:ea:c5:
         43:df:52:a0:6d:c7:96:cc:d9:d2:cc:4e:12:53:be:0e:08:ab:
         72:e5:82:4d:8f:4a:d5:6a:e0:2f:f5:70:07:ef:bd:d2:f7:8e:
         6d:4f:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:26 2026 by rpki-client