Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/neH0ynm-9_WfGLcRwlNHULD4ons.asa
File:                     neH0ynm-9_WfGLcRwlNHULD4ons.asa (raw, json)
Hash identifier:          hATUAyHrF7u0nM6hFtbEJpofhSi3SzzTsiFp4CpEf8o=
Subject key identifier:   9D:E1:F4:CA:79:BE:F7:F5:9F:18:B7:11:C2:53:47:50:B0:F8:A2:7B
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       019C7D38E6A875740D12FC5D860BF6E9720F
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/neH0ynm-9_WfGLcRwlNHULD4ons.asa
Signing time:             Fri 20 Feb 2026 22:43:26 +0000
ASPA not before:          Fri 20 Feb 2026 22:43:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200993
Providers:                AS: 6939
                          AS: 30893
                          AS: 35598
                          AS: 56584
                          AS: 56740
                          AS: 61400
                          AS: 62255
                          AS: 62379
                          AS: 213753
                          AS: 215551
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7d:38:e6:a8:75:74:0d:12:fc:5d:86:0b:f6:e9:72:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Feb 20 22:43:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9de1f4ca79bef7f59f18b711c2534750b0f8a27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:ed:cc:b4:b0:4d:ca:fd:df:6b:4b:1c:44:
                    d0:84:46:dd:24:89:8c:24:e6:32:8f:b2:ae:a4:90:
                    dc:84:6a:dc:80:19:db:4f:19:7d:aa:03:f7:db:ab:
                    89:d9:e5:9b:88:4b:7a:4f:2c:0f:e2:7c:99:a8:8c:
                    d0:b9:12:9d:5d:2a:3c:66:cd:cb:dc:33:8b:b6:fa:
                    1f:56:10:9a:82:c8:31:57:57:eb:15:62:56:eb:11:
                    37:d8:eb:71:7a:17:58:c3:a7:72:04:b5:33:b5:fe:
                    fb:3e:da:db:01:89:48:63:73:8e:f3:38:8e:3b:96:
                    31:eb:18:ff:43:40:39:0c:5e:f2:d5:7a:ff:3d:d4:
                    cb:2d:b6:aa:82:17:7a:ce:5a:3b:92:42:39:8e:a5:
                    50:b3:4d:30:e3:af:a1:ea:cb:9f:30:63:bf:cc:26:
                    41:52:e9:1a:ef:fc:ca:d9:aa:71:d0:95:38:14:4b:
                    3f:8d:20:0b:6a:09:6b:1e:79:ab:25:92:36:12:d2:
                    bd:9b:c4:33:06:37:52:ba:b9:9d:12:ba:99:84:d0:
                    3d:22:68:13:65:ce:d7:e7:98:67:be:1a:2c:62:e4:
                    d6:f4:a4:d0:f9:1a:98:fd:83:0c:31:d4:51:3a:3e:
                    fc:08:4b:e2:7a:8c:ad:82:58:9f:3e:b2:bf:30:ad:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:F4:CA:79:BE:F7:F5:9F:18:B7:11:C2:53:47:50:B0:F8:A2:7B
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/neH0ynm-9_WfGLcRwlNHULD4ons.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200993

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:ba:89:09:aa:b5:fb:12:3f:b9:ae:ac:75:f7:11:12:31:
         34:87:26:eb:e0:78:c2:0f:c4:36:e0:0a:d3:d9:84:b0:a5:73:
         dc:e4:51:70:63:48:c6:f3:fd:1b:b3:f2:be:57:fa:52:97:a8:
         4b:33:55:c1:fa:e8:7b:57:12:d0:b7:8e:40:f6:4b:6e:a5:79:
         aa:fa:95:c2:f6:a7:8a:68:ee:78:54:18:d2:aa:29:76:fc:27:
         51:1a:ab:41:a2:6c:9e:e2:5d:0f:e8:eb:5d:02:3c:6a:38:b8:
         91:4d:a3:e6:eb:4d:6a:78:14:c8:17:6f:15:9b:42:c8:fc:a0:
         19:1c:eb:56:e1:c0:a4:e2:2f:33:1d:78:14:59:22:18:c1:4b:
         3b:1e:15:ec:d8:1c:1d:d8:33:78:6b:14:87:d3:21:d3:16:16:
         a9:0e:97:cd:81:5e:fd:08:ef:9a:a1:03:df:e9:a8:e0:bb:0a:
         be:a5:dd:51:3f:a4:d0:19:ce:62:e8:bc:48:d8:2c:b8:89:26:
         f3:7e:15:99:68:86:39:df:b4:6b:8a:8b:58:6f:18:91:e5:1e:
         36:d8:c5:ef:b5:94:a7:1c:ec:58:de:ec:26:5c:ee:ca:f8:4b:
         88:e1:05:cb:00:81:a1:19:41:81:cf:3e:0e:cc:7b:07:7b:b6:
         3d:d3:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:42 2026 by rpki-client