Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa
File:                     46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (raw, json)
Hash identifier:          cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=
Subject key identifier:   E3:A7:49:EF:48:AF:63:90:8D:1C:DD:C7:10:51:89:29:F2:CF:4B:B4
Certificate issuer:       /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial:       019D304DCB7B96703DD74A8FBD448540C97F
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa
Signing time:             Fri 27 Mar 2026 17:18:17 +0000
ASPA not before:          Fri 27 Mar 2026 17:18:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200240
Providers:                AS: 42831
                          AS: 59796
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:4d:cb:7b:96:70:3d:d7:4a:8f:bd:44:85:40:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
        Validity
            Not Before: Mar 27 17:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3a749ef48af63908d1cddc710518929f2cf4bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:9a:90:e7:36:66:ab:3c:fd:e3:af:b6:ba:
                    06:94:f4:d4:b8:f6:cc:c8:03:b3:23:ac:b1:f7:27:
                    9f:db:be:2b:46:c0:bf:3b:f2:47:a3:0f:ab:c6:d6:
                    95:20:22:62:5b:4c:b7:18:4a:ca:a3:3e:e3:bf:25:
                    ac:1c:61:1c:79:c1:6e:72:0d:16:0d:ed:69:d0:66:
                    a7:08:60:df:0e:64:ea:2d:f1:4f:9c:d7:a6:b0:2d:
                    70:dd:85:ec:13:57:d9:10:e2:0b:fa:4d:8f:5f:a8:
                    04:f1:3f:d5:8b:20:fe:5a:de:ae:af:a3:71:be:45:
                    3e:27:24:32:d9:d7:20:d0:38:ab:71:5b:19:1d:95:
                    df:55:29:3c:c1:31:a6:89:5a:64:97:12:60:5f:1b:
                    b4:b2:aa:9d:22:f7:4a:ad:1e:71:c5:d2:09:a1:d7:
                    12:0b:7e:d1:fd:77:09:6e:4d:ea:fb:09:cd:12:ff:
                    1e:71:4c:32:ac:21:dd:e6:a2:23:ee:50:fe:96:d8:
                    87:9f:60:74:ae:5a:38:cf:a5:df:8a:60:46:e5:31:
                    9c:74:bf:98:7d:10:bc:2f:8f:93:a0:dd:65:38:56:
                    8e:e8:7f:52:6a:f1:e4:35:81:d8:2f:c3:1b:3a:44:
                    d6:14:fc:93:74:fd:f8:3c:67:6f:a6:0b:0e:44:de:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:49:EF:48:AF:63:90:8D:1C:DD:C7:10:51:89:29:F2:CF:4B:B4
            X509v3 Authority Key Identifier:
                keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200240

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:6a:b4:a0:f9:df:fd:1c:8f:5f:d8:3d:6d:32:07:47:5f:
         9c:73:d7:12:af:7f:57:ef:c2:a6:be:34:83:22:05:99:16:4a:
         15:b4:dc:7e:83:dd:97:9c:e1:7f:89:6b:65:4c:09:75:dc:81:
         e5:d3:22:bc:61:70:e6:e2:f0:97:17:b9:a3:bb:27:f2:c5:a0:
         04:1a:d7:68:c3:34:bc:67:c5:d8:01:fa:82:bc:05:5a:96:8d:
         59:0f:fc:a8:d0:36:61:3d:21:6a:2f:fc:53:2b:f2:c5:c8:de:
         6f:4b:4a:84:74:09:59:ed:f4:72:3f:57:c4:ff:40:b0:de:44:
         3e:b0:0a:12:98:47:ad:88:a1:b8:24:f6:5a:8e:e3:42:37:9c:
         69:63:94:a8:fa:47:21:f0:da:fd:66:81:c8:92:92:b4:26:6f:
         c9:a9:88:c1:07:2d:20:f5:e5:fa:06:1a:68:9a:1e:41:b4:50:
         9e:d0:dc:2f:61:f9:34:3e:7b:26:98:71:0c:1f:82:24:b4:10:
         2a:e2:10:c0:b8:65:12:04:15:5b:7c:b3:73:8f:cb:f1:7f:ff:
         64:c0:c6:76:a8:57:1a:17:3e:fd:f9:40:b9:df:af:7d:b3:c9:
         f9:b3:42:a2:f0:08:7c:4b:39:ac:40:83:d2:0e:87:f2:f3:d4:
         b1:f3:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:55 2026 by rpki-client