Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa
File:                     lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa (raw, json)
Hash identifier:          6aAqK2D28DLKSJ21dW5F1a+WDM8qLkyHEkDcgfiBl54=
Subject key identifier:   95:E8:72:20:9C:92:E6:DD:A0:8B:71:B4:02:A6:BA:C6:7C:3C:5A:55
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       019D7889A5DCB5C759E5CDF889A67FAC2D07
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa
Signing time:             Fri 10 Apr 2026 17:56:19 +0000
ASPA not before:          Fri 10 Apr 2026 17:56:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199133
Providers:                AS: 200993
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:78:89:a5:dc:b5:c7:59:e5:cd:f8:89:a6:7f:ac:2d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Apr 10 17:56:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=95e872209c92e6dda08b71b402a6bac67c3c5a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:04:2f:93:ed:ce:1a:dd:8e:d7:c7:80:66:
                    14:4b:d0:2c:de:22:33:0c:f9:0d:57:43:00:4e:77:
                    4c:10:89:c1:7c:29:c9:dc:68:e0:d0:b9:10:33:f7:
                    46:50:c2:a9:79:8e:90:cb:26:e0:b4:a7:c7:38:5d:
                    2b:25:0f:e8:d6:bb:00:f0:6d:d9:ff:5b:d2:1d:19:
                    11:a6:94:ed:b2:9e:05:1f:05:70:76:3e:f9:61:15:
                    ad:a2:f0:77:75:4d:a5:18:d6:d6:16:34:7a:85:54:
                    58:62:6f:10:66:d1:9f:28:22:80:59:e0:75:a2:a7:
                    65:c0:68:e0:1d:c2:87:70:fd:70:f9:65:d3:e4:04:
                    81:eb:c5:58:c3:91:b9:fc:fe:82:88:5a:03:dd:95:
                    4b:d4:1e:5d:6b:ca:0d:ba:4a:af:4f:1c:98:67:ee:
                    1b:3a:8e:1e:c0:35:7b:6a:b0:ba:d9:d9:6f:94:d5:
                    a1:e6:06:5a:b2:b5:55:f2:f4:4d:36:12:f4:44:21:
                    1d:ff:ce:92:4d:e4:c3:04:5d:19:a1:79:de:a4:52:
                    82:9d:be:10:45:85:c8:72:6d:bf:7d:79:57:ee:e7:
                    f0:51:2c:f9:53:06:10:7d:68:af:ef:3a:12:3a:e4:
                    45:d9:0d:28:cc:b4:26:1e:48:8d:20:9f:b5:54:de:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:72:20:9C:92:E6:DD:A0:8B:71:B4:02:A6:BA:C6:7C:3C:5A:55
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199133

    Signature Algorithm: sha256WithRSAEncryption
         ac:59:a0:4f:59:cd:92:ec:25:d9:bd:73:5d:9d:7b:02:0a:a9:
         bc:d1:00:ae:31:32:56:e7:56:b3:e5:3f:b8:a9:db:b0:9f:c9:
         a8:a8:85:3f:61:8e:9e:1b:02:25:4b:7b:67:d8:c4:79:6b:44:
         59:a6:4d:01:e7:64:7d:ce:ac:3e:e3:80:a6:63:ed:8b:44:da:
         08:47:d9:82:7e:de:d4:3b:c1:c2:65:68:f4:b3:4c:9f:6c:9f:
         fa:c3:4a:70:a4:57:33:55:fb:c8:77:86:72:01:6d:06:9a:96:
         7d:35:4a:64:2b:9c:26:d9:c9:ee:6c:7b:0f:60:13:6d:75:7a:
         1c:46:b8:57:4c:ec:a0:d3:fc:8e:3d:63:95:67:ab:31:2a:11:
         ce:bc:94:c1:99:12:11:70:2f:ed:db:42:6f:30:0d:e5:91:05:
         3a:35:6c:9e:a8:fe:5d:a4:fe:16:4b:9d:c2:2f:a3:8e:80:34:
         bb:d3:91:64:86:48:e8:7a:4a:ad:be:73:a2:e7:73:f2:51:bb:
         fc:d7:c4:c9:85:96:9e:00:0a:f7:0b:10:62:f6:3f:e3:6f:13:
         7e:5d:bc:5a:68:ff:1a:9c:60:31:89:33:05:8f:30:0a:27:a3:
         60:8f:2d:0b:e5:fa:c7:59:32:67:2c:55:aa:a1:84:7c:09:3c:
         1b:0d:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:36 2026 by rpki-client