Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/qpd4n4rrzsaA26B8vSZr6BByIoc.asa
File:                     qpd4n4rrzsaA26B8vSZr6BByIoc.asa (raw, json)
Hash identifier:          Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=
Subject key identifier:   AA:97:78:9F:8A:EB:CE:C6:80:DB:A0:7C:BD:26:6B:E8:10:72:22:87
Certificate issuer:       /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial:       019D72058F0C2D1280AE9974BEC989F99279
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/qpd4n4rrzsaA26B8vSZr6BByIoc.asa
Signing time:             Thu 09 Apr 2026 11:34:19 +0000
ASPA not before:          Thu 09 Apr 2026 11:34:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62248
Providers:                AS: 1299
                          AS: 2116
                          AS: 13335
                          AS: 50304
                          AS: 208367
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:72:05:8f:0c:2d:12:80:ae:99:74:be:c9:89:f9:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
        Validity
            Not Before: Apr  9 11:34:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa97789f8aebcec680dba07cbd266be810722287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:50:c7:0b:5a:fe:67:b6:8c:7a:f2:e6:4b:
                    3a:2d:20:b5:e5:ec:0b:e5:f5:70:77:47:36:d5:27:
                    65:8a:53:9c:64:df:bb:c8:82:2e:e5:d2:54:30:d7:
                    5a:8e:e9:8a:9f:31:fc:df:54:6f:fe:43:30:39:f1:
                    2b:43:bf:ae:fc:ed:da:59:93:f2:ad:17:5b:f3:de:
                    c6:4e:56:62:10:a6:28:39:44:43:68:f8:f3:3c:27:
                    5e:62:bb:3a:3d:33:0c:45:3a:17:c1:3b:ab:43:89:
                    52:e1:2f:ef:58:c4:e6:0b:1f:25:c7:25:64:a1:8c:
                    4f:20:6b:00:be:ed:8c:83:b0:14:f9:03:9e:07:eb:
                    c5:72:c6:a2:f9:c1:79:c2:03:a5:75:5d:20:96:a9:
                    9a:b7:62:6b:32:b1:30:b8:32:ce:a7:6d:5b:a1:4f:
                    a4:c0:7d:49:47:ef:0b:75:a7:b9:cf:64:0e:97:91:
                    2e:14:df:d1:6a:57:98:13:83:50:5b:19:d0:3b:d8:
                    5e:a4:56:28:16:b8:4a:7a:da:2a:0d:b5:4c:8d:0e:
                    60:ee:f3:eb:b4:7f:05:9d:a7:6d:cd:42:b7:51:27:
                    b2:01:db:bf:a7:39:c5:09:fb:02:ff:f1:ff:f0:fa:
                    9b:10:72:7b:31:e8:ea:13:67:83:5f:40:19:73:66:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:97:78:9F:8A:EB:CE:C6:80:DB:A0:7C:BD:26:6B:E8:10:72:22:87
            X509v3 Authority Key Identifier:
                keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/qpd4n4rrzsaA26B8vSZr6BByIoc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62248

    Signature Algorithm: sha256WithRSAEncryption
         48:74:9a:6a:ec:3c:16:6b:e1:1e:5e:a7:16:14:e0:40:be:0e:
         86:e4:90:67:42:c7:70:06:d2:75:67:96:1c:40:e7:fa:21:7e:
         21:4a:a4:d7:0c:60:a5:ff:81:8f:48:76:3c:a8:82:7f:ab:e0:
         bb:8d:13:c5:24:35:e6:d1:7f:5b:2c:42:02:e1:58:ea:8f:72:
         39:be:27:35:1d:ba:d4:ab:ac:b9:33:18:e6:24:8a:48:c2:99:
         b5:68:fd:3b:16:16:d5:c2:0c:a2:6e:ca:3a:a5:20:1b:31:e6:
         a9:01:5a:ac:d7:19:be:7b:fb:a9:00:50:87:42:8b:30:f1:98:
         d6:91:39:cd:1d:c5:f1:25:6d:9a:a1:c9:0c:5b:07:5b:cc:37:
         53:ca:c8:56:d2:8f:3b:c1:c5:53:46:35:d8:c0:fc:03:7f:4c:
         4f:d1:79:cf:98:b1:5b:20:e5:30:fb:05:f4:16:19:05:0c:97:
         0c:56:5c:3e:3f:78:92:41:01:1e:6c:da:76:5b:e0:5d:9e:37:
         b1:98:54:3b:75:cf:6d:df:63:1e:0d:5d:fe:8c:fd:1c:48:61:
         60:71:c6:cd:a2:05:1d:49:a7:03:36:8c:81:a5:0e:13:af:a5:
         5a:d2:f7:32:e5:18:35:b6:ce:7c:f2:b1:c7:b9:4e:8f:ee:c9:
         a7:3d:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:17 2026 by rpki-client