Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/rdBZpzVHc6sLCkt5q9g7isJN69s.asa
File:                     rdBZpzVHc6sLCkt5q9g7isJN69s.asa (raw, json)
Hash identifier:          df15E74ZEK87PYtJKxjLK9h7KqcYvQDc52uFCsOePEM=
Subject key identifier:   AD:D0:59:A7:35:47:73:AB:0B:0A:4B:79:AB:D8:3B:8A:C2:4D:EB:DB
Certificate issuer:       /CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
Certificate serial:       01A0997D1847E28CC9C8FCF166BDB041A032
Authority key identifier: E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/rdBZpzVHc6sLCkt5q9g7isJN69s.asa
Signing time:             Sun 13 Sep 2026 06:38:27 +0000
ASPA not before:          Sun 13 Sep 2026 06:38:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204921
Providers:                AS: 6939
                          AS: 11421
                          AS: 11967
                          AS: 17408
                          AS: 18423
                          AS: 36530
                          AS: 40792
                          AS: 44324
                          AS: 51087
                          AS: 140096
                          AS: 199310
                          AS: 204211
                          AS: 204539
                          AS: 204844
                          AS: 206216
                          AS: 216211
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:99:7d:18:47:e2:8c:c9:c8:fc:f1:66:bd:b0:41:a0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
        Validity
            Not Before: Sep 13 06:38:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=add059a7354773ab0b0a4b79abd83b8ac24debdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:ca:5b:bd:4f:7e:80:5f:9c:37:c6:06:53:
                    c2:76:55:6f:e3:75:d0:f1:f0:2e:73:3f:99:9f:25:
                    d6:55:77:1e:1c:07:80:2c:cc:9b:36:32:e4:a0:92:
                    7c:92:14:d2:09:fb:83:e8:bc:68:06:dc:b6:fe:68:
                    0b:f4:33:18:2c:d5:b3:6b:83:2d:2a:90:9c:c3:83:
                    61:96:a3:e4:02:d5:42:8d:6e:b8:52:ff:cd:ce:8a:
                    27:78:fb:70:d5:33:62:79:b7:0f:9e:f8:29:a3:c1:
                    9d:4d:7a:76:7b:fa:94:54:71:41:9d:4e:41:43:ea:
                    68:c8:4e:06:fb:e3:56:9d:f7:43:a9:a1:97:69:6f:
                    4e:e9:9a:fb:eb:79:78:cc:19:b9:d1:c2:30:ad:a2:
                    69:a9:ae:85:61:c0:f7:80:28:96:64:7c:2b:62:eb:
                    a9:a9:fd:56:35:35:fd:78:6a:4e:d0:96:b9:96:22:
                    89:4c:7e:cd:f5:01:dd:82:ec:5a:68:46:c1:d0:9c:
                    d1:5c:9f:6d:a8:bd:cf:1b:08:62:f4:51:08:3f:1c:
                    08:1e:07:60:27:f2:4a:c2:c9:9a:66:a3:b1:18:4d:
                    88:67:5c:64:e9:9f:88:fb:4b:fd:3a:bf:da:5a:7b:
                    bb:08:84:85:5e:83:f0:7a:86:0b:f7:43:21:ba:d4:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:59:A7:35:47:73:AB:0B:0A:4B:79:AB:D8:3B:8A:C2:4D:EB:DB
            X509v3 Authority Key Identifier:
                keyid:E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/rdBZpzVHc6sLCkt5q9g7isJN69s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204921

    Signature Algorithm: sha256WithRSAEncryption
         ba:a1:02:ad:03:e5:ab:d7:42:94:af:8e:9f:e5:7a:10:18:b2:
         89:8c:30:db:04:21:68:1c:93:c0:40:a1:a9:61:2f:06:28:7e:
         36:ca:47:17:14:ed:f9:c5:52:e1:46:19:15:ec:45:8c:dc:f7:
         09:e6:aa:ee:54:fd:e5:78:99:b9:a3:d6:95:d3:21:fd:6a:c4:
         62:4e:77:fd:fe:31:00:96:3a:2b:f2:16:39:8e:de:7a:63:a6:
         d4:b4:3a:25:50:4c:9b:ef:3e:39:4d:24:e8:8f:fa:2f:a1:f6:
         63:0d:17:33:e3:4d:0f:35:28:aa:31:f8:fd:56:72:dc:a1:76:
         36:08:19:70:1e:4a:50:01:0d:66:e0:0d:47:b6:92:5d:75:88:
         ad:e9:f5:80:e6:37:11:0a:aa:f4:ef:40:aa:f4:77:35:99:60:
         d5:ee:bf:c5:32:59:88:f4:69:7b:1b:8b:98:bc:d7:90:e4:23:
         3c:4b:cc:48:4f:79:66:c3:73:d0:b7:40:3e:73:bc:42:4b:08:
         6d:c9:4c:30:2c:fd:88:c2:c5:36:5d:19:14:70:f3:e9:a4:91:
         6b:c8:2a:33:3c:00:ee:a1:66:38:58:a1:8e:6c:98:41:e7:e7:
         1c:f6:9f:e8:d2:f6:b6:d9:17:da:68:4a:58:28:c9:89:e0:db:
         3f:de:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:27 2026 by rpki-client