Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/9WoXYCC1VJqnbGFNUpMF4rAgukA.asa
File:                     9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (raw, json)
Hash identifier:          4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=
Subject key identifier:   F5:6A:17:60:20:B5:54:9A:A7:6C:61:4D:52:93:05:E2:B0:20:BA:40
Certificate issuer:       /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial:       019C4C30CE04EFCA3C771A32B3875A5FD55D
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/9WoXYCC1VJqnbGFNUpMF4rAgukA.asa
Signing time:             Wed 11 Feb 2026 10:13:12 +0000
ASPA not before:          Wed 11 Feb 2026 10:13:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42195
Providers:                AS: 35320
                          AS: 51273
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:30:ce:04:ef:ca:3c:77:1a:32:b3:87:5a:5f:d5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e229b37eb630686b1328338471b52da95d204911
        Validity
            Not Before: Feb 11 10:13:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f56a176020b5549aa76c614d529305e2b020ba40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:39:79:b5:32:08:5b:c2:a2:35:ae:0e:b6:
                    ba:c0:03:a5:b1:1a:11:85:0c:83:d3:32:89:12:a2:
                    50:5e:d4:12:3a:da:d0:c4:24:e6:e3:c0:b3:62:16:
                    9e:41:83:59:52:38:24:15:87:cb:0e:83:da:48:a6:
                    0e:40:28:b5:5d:0c:f5:5c:5f:05:e0:a5:7d:4d:00:
                    58:30:3d:12:31:64:e8:99:68:69:3a:23:07:e1:fb:
                    82:64:6e:3d:73:6c:0e:62:b6:d3:e6:56:d1:51:4e:
                    54:c1:4f:cf:49:ff:13:bd:1c:06:22:a8:99:ef:a1:
                    d6:cd:c3:3c:03:23:7c:70:b6:4a:34:f4:d5:47:c5:
                    4f:8a:50:91:5a:76:d6:8a:cd:45:67:b5:9a:70:fa:
                    df:ee:a9:d4:39:14:1a:49:1e:aa:0d:e8:a2:ad:c2:
                    f5:fe:a6:2f:00:7e:bf:3d:86:f3:dc:1a:a6:31:95:
                    e7:fb:dd:c8:dd:1c:3f:d4:5f:dc:49:b8:d1:76:3a:
                    c0:b2:0d:fe:f5:f6:21:a0:2c:f9:11:ff:59:f7:01:
                    30:6d:c0:0d:a2:b5:02:41:42:13:0d:a9:fe:54:72:
                    25:a6:a9:82:a8:1b:92:a3:a6:3d:48:6e:6d:88:01:
                    8f:97:0d:fc:90:77:b8:e0:86:69:4c:8f:0b:a4:5b:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:17:60:20:B5:54:9A:A7:6C:61:4D:52:93:05:E2:B0:20:BA:40
            X509v3 Authority Key Identifier:
                keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/9WoXYCC1VJqnbGFNUpMF4rAgukA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42195

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:c6:a2:71:e7:ff:e2:c4:83:32:2d:51:22:c6:d7:93:5f:
         03:30:ac:02:49:55:5d:d7:b1:77:00:35:2e:6f:f5:67:db:73:
         a6:0c:3f:9c:a0:6e:d7:39:e0:3c:ec:94:88:4a:f2:eb:d8:49:
         a9:f5:74:91:9f:37:1c:98:ca:64:50:e5:b1:a0:52:22:1f:39:
         ab:b7:58:fc:7b:63:ac:89:29:22:cc:fd:32:bc:04:7f:ed:99:
         92:f1:77:ac:3a:4c:7f:8d:d5:2d:39:08:05:44:08:f2:6c:8b:
         29:6e:4e:aa:01:50:10:42:1f:d2:b1:8b:c7:ce:92:c3:b4:05:
         a4:84:7f:30:d0:14:d7:6e:01:85:04:c9:45:40:c2:83:9c:4f:
         c0:ea:d3:00:35:d7:9d:bb:a5:78:e9:7d:b9:56:f6:cb:c9:b0:
         4d:fd:62:a4:a9:7a:70:18:36:34:50:ea:e5:74:64:a5:14:7a:
         a7:38:a9:1b:54:88:95:3f:b2:d6:31:0b:a5:dd:cf:db:6d:a3:
         d9:cc:95:fa:4a:bc:bc:9f:d2:a7:3b:6a:f4:cc:1c:fa:96:fb:
         e7:04:3d:f6:4f:9d:a8:10:b6:0e:0c:39:fd:ba:df:5e:13:0a:
         82:27:46:cd:c0:b9:6c:df:5c:a2:91:0e:2d:1e:3e:71:ae:73:
         ec:6d:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:46 2026 by rpki-client