Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/YnZmmQc5Cy0g5wDU0qFabNwALig.asa
File:                     YnZmmQc5Cy0g5wDU0qFabNwALig.asa (raw, json)
Hash identifier:          xXOI/K8NCOaj+/uJsMaVZT7Q7qH5hRdbbfr9TqbZWq4=
Subject key identifier:   62:76:66:99:07:39:0B:2D:20:E7:00:D4:D2:A1:5A:6C:DC:00:2E:28
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       019D3E09BBB0BAC26D23CA0BBB58E26BA370
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/YnZmmQc5Cy0g5wDU0qFabNwALig.asa
Signing time:             Mon 30 Mar 2026 09:18:38 +0000
ASPA not before:          Mon 30 Mar 2026 09:18:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12799
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3e:09:bb:b0:ba:c2:6d:23:ca:0b:bb:58:e2:6b:a3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Mar 30 09:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6276669907390b2d20e700d4d2a15a6cdc002e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:a8:ae:cd:3a:ff:9f:a4:81:69:3b:9e:d6:
                    81:2c:75:72:04:c7:23:60:7d:34:44:7c:cf:b0:f1:
                    cc:8e:27:fa:4f:08:ab:d0:0a:3e:82:0d:c2:aa:f8:
                    be:fe:95:23:6d:cf:18:5f:9c:22:76:fe:49:12:94:
                    c3:d0:d5:c4:e7:4b:aa:62:4f:67:ce:3d:d7:40:0a:
                    36:70:3f:a1:0a:dc:90:94:51:91:03:1a:d6:79:4d:
                    47:bf:e3:7a:f5:a9:1f:63:3f:d5:c4:88:12:3f:c2:
                    77:07:29:6e:88:7f:46:1e:31:81:ab:d0:15:0d:8c:
                    93:10:7e:3d:d8:43:18:d5:ce:94:fc:c9:c6:ba:af:
                    b2:ae:88:b2:21:9b:3c:26:27:6b:dc:33:18:64:58:
                    b7:09:bc:7c:78:42:02:13:86:f7:2a:40:14:57:80:
                    6f:ed:1a:13:45:65:73:5c:62:94:d5:0c:df:5e:03:
                    3d:35:da:61:8a:04:40:cc:4d:e7:eb:2f:15:34:0c:
                    a6:1e:d6:f0:d0:b4:82:e2:42:f8:12:d6:3a:b1:c9:
                    a4:89:24:22:91:dc:b2:0b:4e:65:52:e4:f2:ff:3e:
                    c4:ad:28:63:45:de:9a:3f:8d:fc:0e:5e:de:c6:0f:
                    3c:aa:58:09:e8:ff:b9:53:e3:0e:7c:4e:43:0b:96:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:66:99:07:39:0B:2D:20:E7:00:D4:D2:A1:5A:6C:DC:00:2E:28
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/YnZmmQc5Cy0g5wDU0qFabNwALig.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12799

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:eb:a7:5f:03:50:17:0a:29:7f:85:ac:6f:5f:62:4d:dc:
         9c:00:09:a5:4a:13:fd:f7:15:1e:8b:c3:43:33:1a:76:8e:16:
         c2:cc:69:eb:8f:88:64:95:76:81:c5:90:2c:3d:fa:85:e8:7a:
         0b:e6:b8:e7:86:78:a2:74:10:ab:7e:b6:eb:d2:48:82:08:f0:
         4d:cd:b0:9e:c0:1f:d1:6a:27:5f:2b:bd:9c:0a:1e:44:b5:c3:
         23:d8:64:e3:32:45:b6:87:c7:9b:e3:10:af:36:b2:b0:ab:e8:
         fc:ff:bf:3b:b4:83:6d:f4:72:c7:be:b2:92:b8:cf:c1:8c:8c:
         b7:82:91:6c:c2:81:fe:87:0e:c4:f1:8c:1e:b2:16:fa:11:9a:
         05:bf:de:30:8d:b6:a5:ec:db:3a:c2:eb:73:b7:bc:d5:eb:c9:
         6a:66:2b:a7:d5:e0:d1:bf:9f:b0:70:79:f9:3b:aa:db:7e:2c:
         03:fb:eb:97:71:ab:67:f9:7d:9e:57:ec:f9:8f:1f:b4:f4:e6:
         8d:00:ca:9d:90:d9:28:16:9f:87:e1:f2:9d:66:60:2f:79:8d:
         1f:f6:f5:ca:3a:43:c0:b4:83:8b:43:0c:bf:fc:71:9e:48:33:
         b5:ae:38:c2:97:cf:25:d2:07:9f:31:06:36:5e:0e:e8:1f:b2:
         57:98:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:56 2026 by rpki-client