Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa
File:                     VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (raw, json)
Hash identifier:          erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=
Subject key identifier:   54:70:19:31:16:EE:27:2E:8A:E3:D6:61:ED:BB:EB:04:DB:3C:40:75
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019D7129D655207DE57914141FE4B88B9A11
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa
Signing time:             Thu 09 Apr 2026 07:34:20 +0000
ASPA not before:          Thu 09 Apr 2026 07:34:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            680
Providers:                AS: 1299
                          AS: 2914
                          AS: 3320
                          AS: 3356
                          AS: 20965
                          AS: 21320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:71:29:d6:55:20:7d:e5:79:14:14:1f:e4:b8:8b:9a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Apr  9 07:34:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5470193116ee272e8ae3d661edbbeb04db3c4075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:5a:29:4e:6a:d2:a3:0d:6b:a6:1c:80:5e:
                    8c:c3:43:3e:73:32:6c:61:ea:27:22:1f:69:25:6d:
                    70:a8:f0:9b:7e:a5:52:1c:9d:1c:91:10:4b:8f:23:
                    8b:e4:9e:7c:09:af:25:99:e6:3a:b2:43:7c:c3:54:
                    5e:1e:f3:82:b0:3a:03:4f:a1:4a:0f:53:ae:a9:2c:
                    72:ab:d1:a2:4d:ce:6e:90:f6:ec:15:05:f6:a0:99:
                    08:fd:41:fd:c7:b0:ef:28:17:fa:cd:42:8c:b7:0d:
                    92:4d:59:99:20:00:76:b1:cf:2f:25:86:7e:42:11:
                    51:8c:c1:b6:a2:e6:67:1c:9a:a9:b0:86:ac:df:b7:
                    a8:f5:f5:5f:c1:2d:c3:73:4c:b1:b3:33:36:f7:a1:
                    96:c5:fd:85:97:34:2f:0e:bf:71:1d:34:5f:3b:92:
                    1e:10:55:7e:1c:70:32:f1:3e:b8:bb:d9:5e:0f:4a:
                    e3:57:d6:b4:4c:33:ba:ec:ca:cd:cd:a7:e3:74:94:
                    73:3a:58:1e:e3:48:8d:79:82:0c:86:ff:30:ef:96:
                    9d:b2:49:32:fa:db:7e:88:90:38:37:16:67:a7:0d:
                    71:ee:6b:47:cf:5e:ca:80:59:a5:ea:64:05:ef:0d:
                    13:ac:eb:9c:7e:aa:c1:0a:a0:88:5f:02:b4:06:01:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:19:31:16:EE:27:2E:8A:E3:D6:61:ED:BB:EB:04:DB:3C:40:75
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  680

    Signature Algorithm: sha256WithRSAEncryption
         44:85:49:a4:d6:4b:2a:23:68:0e:03:f0:aa:4f:a6:14:ea:e3:
         87:b7:24:c0:f7:7f:3b:6e:db:ea:35:74:ed:b2:ec:c6:12:e6:
         c7:ce:45:84:18:f4:30:5d:90:e0:5d:99:bc:80:cf:cd:b8:fd:
         cb:5a:dc:36:a8:91:48:84:ae:eb:fa:45:c4:fa:6f:23:4a:1c:
         27:d7:06:06:e7:62:36:82:6c:73:b3:c1:6a:1d:5b:ec:25:93:
         02:bb:01:39:15:ec:a8:9b:85:dc:c7:24:78:1c:35:7b:dc:5b:
         21:de:3a:67:9f:69:74:44:6e:8c:df:6c:77:ad:cc:eb:95:75:
         75:fa:b9:2a:36:00:67:46:9b:0f:4e:69:12:7c:2b:fe:58:16:
         72:20:fb:03:04:45:65:da:e2:a6:90:4f:81:02:d3:29:a7:6e:
         71:5d:7e:59:51:b1:0f:03:50:d2:59:36:cb:a3:54:51:c2:a3:
         8a:ac:5d:ba:37:1e:f9:26:5a:dc:44:98:f4:b9:66:44:80:97:
         a7:8b:87:fc:90:4c:86:f5:6e:d3:ab:10:56:bb:be:fe:76:a8:
         77:9c:95:1a:5d:e1:76:1f:8b:5b:a2:79:39:84:be:e8:08:23:
         79:eb:b6:94:1e:ad:07:db:b2:55:82:54:fc:41:7b:23:74:d3:
         90:8b:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:12 2026 by rpki-client