Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa
File:                     YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (raw, json)
Hash identifier:          eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=
Subject key identifier:   61:96:03:41:75:61:93:24:04:53:B1:57:33:17:3A:A1:A6:14:4F:FE
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019D3A3FDF2698DC9F7AC6ABE929FE0571CE
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa
Signing time:             Sun 29 Mar 2026 15:39:17 +0000
ASPA not before:          Sun 29 Mar 2026 15:39:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215122
Providers:                AS: 41051
                          AS: 56630
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:3f:df:26:98:dc:9f:7a:c6:ab:e9:29:fe:05:71:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Mar 29 15:39:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61960341756193240453b15733173aa1a6144ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:f5:f7:69:9b:46:18:a1:b4:59:be:20:2f:
                    30:3f:26:d9:58:bf:74:9d:04:82:02:5e:10:9b:65:
                    51:89:f3:84:7b:8f:58:86:20:aa:13:c6:16:5e:db:
                    1c:5c:53:ff:ef:1a:9e:2e:e7:39:c9:42:92:1f:bc:
                    b0:ce:2e:f1:7f:78:1d:42:01:b4:1b:22:a7:f5:6e:
                    97:58:e0:b1:80:81:4f:47:8c:fc:6e:77:50:76:49:
                    e9:ff:f5:56:11:da:4d:f6:f2:17:3b:4a:2c:59:9b:
                    9c:f4:b6:71:45:b8:eb:d5:ed:60:9e:93:61:71:7b:
                    bb:a5:ec:0a:e5:e7:95:96:a2:71:ee:18:39:11:b5:
                    dc:0a:c4:f4:1f:b6:55:87:2c:27:c7:8a:1b:cb:d0:
                    42:58:b3:5a:2e:c7:ac:26:ab:b9:be:4a:79:62:23:
                    5b:7f:83:e3:6d:b2:f3:75:0c:2c:a6:ac:d0:45:a8:
                    ae:07:5f:5d:86:48:fa:35:93:01:01:6b:ec:48:94:
                    58:b5:64:b3:b2:83:18:58:14:8d:2e:57:0b:e2:6d:
                    4c:88:1a:75:d3:95:2f:42:0a:41:fa:f6:0e:46:37:
                    a0:51:a1:32:26:48:f4:b7:0b:e7:c5:30:d3:f2:93:
                    a6:1c:a5:39:b2:89:2a:94:6b:a5:af:33:32:ec:c7:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:03:41:75:61:93:24:04:53:B1:57:33:17:3A:A1:A6:14:4F:FE
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215122

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:02:1b:be:e5:cd:59:33:84:a1:9c:6e:7d:41:28:c6:70:
         59:9b:e3:bb:bb:86:f2:28:3c:6a:63:43:6d:d7:1a:fc:1f:a1:
         c0:e4:0f:9d:90:2d:ab:e0:e9:22:5b:c8:2c:0f:65:84:ba:36:
         b8:67:57:8d:57:34:74:61:c9:72:66:07:c0:7d:3e:1d:7e:de:
         7d:c5:68:9c:c5:3c:e0:4b:ea:81:6e:6c:d7:ee:06:02:0d:dd:
         cb:89:c2:9b:8e:06:4e:ea:e1:00:1e:c8:ed:78:cf:9d:83:07:
         ab:30:2b:71:81:1a:10:af:c5:b0:73:f0:86:57:1b:af:51:43:
         74:49:a2:9a:ba:ef:27:35:6b:6c:a5:6a:e5:ea:d5:21:ca:4b:
         d1:f1:79:dc:ff:ff:f0:2f:df:1b:d6:0f:df:78:38:76:14:65:
         a2:2c:6e:f8:94:fe:df:41:08:fc:13:62:55:fc:bb:12:80:20:
         23:cd:99:4e:0c:d9:c3:cd:af:38:f4:20:49:dc:b4:6c:33:a3:
         50:74:f6:9b:4d:03:a0:82:4f:96:70:52:67:f7:db:a7:b7:47:
         48:86:aa:1e:bb:4b:82:4b:58:02:60:89:5f:03:46:8e:97:63:
         82:49:40:b8:33:52:ec:ab:77:53:68:a4:5a:16:44:12:b9:bb:
         d7:8e:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:26:05 2026 by rpki-client