Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/72Q1egWr6oypefXTdA5CthpoDwA.asa
File:                     72Q1egWr6oypefXTdA5CthpoDwA.asa (raw, json)
Hash identifier:          Ex+nllLw34K8tM+m1tc2SsZ0dGbxERIt7to9fxi4ZLU=
Subject key identifier:   EF:64:35:7A:05:AB:EA:8C:A9:79:F5:D3:74:0E:42:B6:1A:68:0F:00
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01A0145AC3D5C2A2076C503C29AEA99F724E
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/72Q1egWr6oypefXTdA5CthpoDwA.asa
Signing time:             Tue 18 Aug 2026 10:11:27 +0000
ASPA not before:          Tue 18 Aug 2026 10:11:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198969
Providers:                AS: 24875
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:14:5a:c3:d5:c2:a2:07:6c:50:3c:29:ae:a9:9f:72:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug 18 10:11:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef64357a05abea8ca979f5d3740e42b61a680f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:21:49:83:57:6d:68:a8:eb:50:df:42:ec:
                    d6:7b:12:5a:29:a2:bf:1d:9c:37:70:b1:f9:a5:9d:
                    36:4c:1b:c9:f3:36:c4:8a:91:6a:ec:00:c4:fe:bd:
                    39:ac:26:ad:0f:67:69:cf:7c:73:70:fd:6d:bf:ed:
                    3b:c8:d1:bc:4b:f4:ff:74:9f:de:77:5d:95:52:46:
                    e7:b1:43:b4:27:62:66:75:70:8a:4f:8f:ae:1a:7b:
                    d2:42:c5:3d:39:0b:d2:56:4b:48:f5:e0:d3:82:76:
                    a4:6d:80:fa:71:3b:d7:67:f1:15:5d:0f:4b:d7:32:
                    d2:fb:59:e7:bb:70:33:32:b2:97:d0:98:d5:97:8c:
                    6d:cc:bf:f0:73:53:8e:fc:c6:06:50:de:c2:2e:ad:
                    9a:b1:0a:79:25:b0:13:0d:c0:d3:99:57:b4:6b:5f:
                    06:a3:a2:87:1e:c1:2b:48:a2:3c:a8:ee:1c:0f:04:
                    2f:41:16:2f:a7:b6:5d:74:6d:d1:10:6f:c2:46:17:
                    ab:a5:70:bf:e7:87:88:92:bf:5c:73:d3:ed:16:e1:
                    56:75:7d:e1:6b:7f:4b:16:8c:2d:d4:5f:83:b3:4f:
                    24:e8:fd:7b:39:51:d9:23:27:e3:fd:fa:e4:14:82:
                    43:9b:a5:7f:ce:fb:b0:9a:b1:05:4b:f5:2c:19:7e:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:35:7A:05:AB:EA:8C:A9:79:F5:D3:74:0E:42:B6:1A:68:0F:00
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/72Q1egWr6oypefXTdA5CthpoDwA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198969

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:30:38:da:43:53:8c:b9:bc:8b:58:e4:b4:31:22:cd:94:
         9f:a8:ec:0f:9a:19:e4:f3:36:fa:31:11:00:23:21:42:de:c1:
         ef:02:0d:c6:4e:f5:16:fe:73:df:58:9a:d4:1f:2e:18:a3:e8:
         14:26:cc:36:3c:0b:80:8b:eb:af:94:b7:c9:9a:50:4a:eb:45:
         f4:bc:65:ea:8d:88:bb:1b:b6:98:6d:45:58:0c:b4:1b:ba:c7:
         da:80:4b:0e:2c:52:ad:cb:42:a4:ea:22:1b:d3:18:46:85:7a:
         8f:b9:69:5e:e4:62:7b:24:c0:df:bd:6b:30:62:c3:58:fd:0f:
         a3:06:ce:44:a4:5a:0a:c3:b7:d5:19:6b:7e:41:9e:4d:47:39:
         28:52:3c:0d:f2:47:9e:bc:74:b8:c6:83:e1:79:83:a1:19:67:
         9e:16:1d:91:1f:12:a1:0f:c2:33:47:e9:ae:e7:5a:e4:e8:48:
         07:b1:f7:8e:c4:33:29:ed:35:14:5d:3e:66:cc:a3:8a:7a:69:
         b1:a8:72:14:db:16:83:84:25:69:4a:e2:a4:45:aa:7e:90:1b:
         ff:89:14:c4:60:e5:9b:5b:08:2a:1e:bc:4c:b6:0d:b5:6f:b1:
         83:81:4a:01:ee:d8:03:42:f0:aa:5c:bd:36:ff:00:18:c2:d4:
         94:9e:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:22 2026 by rpki-client