Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/iE4PQgRjpLQVuICAA3DM5HMD4dA.asa
File:                     iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (raw, json)
Hash identifier:          7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=
Subject key identifier:   88:4E:0F:42:04:63:A4:B4:15:B8:80:80:03:70:CC:E4:73:03:E1:D0
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       019EA282515F5FDFAF1297F8B32264974BD2
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/iE4PQgRjpLQVuICAA3DM5HMD4dA.asa
Signing time:             Sun 07 Jun 2026 14:35:09 +0000
ASPA not before:          Sun 07 Jun 2026 14:35:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212033
Providers:                AS: 714
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a2:82:51:5f:5f:df:af:12:97:f8:b3:22:64:97:4b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Jun  7 14:35:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=884e0f420463a4b415b880800370cce47303e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:2b:21:df:99:0b:81:12:3e:67:10:1e:31:
                    f6:ec:a6:0d:8b:00:68:2e:f5:83:56:e4:b8:f1:89:
                    4c:ff:7f:4e:ba:5b:b2:a7:cd:f0:15:9f:b9:b9:47:
                    dc:e7:e8:2e:c5:09:4a:3d:2e:a1:2e:07:3e:43:80:
                    0a:c3:7d:8a:fc:f5:f5:16:5e:b0:7a:69:87:a5:c8:
                    d4:80:4e:03:e8:1a:12:91:55:76:81:dc:89:0d:b3:
                    73:8c:27:f8:e1:66:eb:99:08:27:78:5a:d9:58:a1:
                    0e:34:48:b8:0a:a5:55:36:f2:a1:ff:b0:e7:54:74:
                    26:5a:83:43:fb:e1:82:21:c6:01:1e:8e:e5:5f:c2:
                    ef:a6:0d:cd:4e:19:74:f0:32:74:65:56:e8:04:18:
                    2d:49:44:8c:f5:26:de:f5:7a:24:f0:9e:09:a1:de:
                    40:3b:f0:ec:13:b0:d2:6f:0a:29:97:71:47:eb:51:
                    3f:00:ac:b9:09:eb:51:af:38:ff:ac:03:16:28:0c:
                    3c:3b:eb:98:4e:5d:ca:8f:bc:7c:0e:2b:a9:40:21:
                    b3:2b:20:ed:8d:ba:25:9a:a3:51:5c:f6:de:28:9c:
                    1a:f8:ba:5c:28:9b:5c:3a:c4:89:c1:fb:c6:24:2a:
                    44:72:4e:22:d3:b2:78:f3:3d:11:65:77:15:2a:45:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:0F:42:04:63:A4:B4:15:B8:80:80:03:70:CC:E4:73:03:E1:D0
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/iE4PQgRjpLQVuICAA3DM5HMD4dA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212033

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:50:ad:d4:5e:86:e3:82:14:ec:a5:a7:bb:99:90:b7:b7:
         83:39:fb:b4:49:79:b1:80:de:87:c1:59:cd:d7:ac:da:8f:fe:
         53:62:2a:12:12:e2:31:3b:d9:f4:7e:3c:d4:ec:11:64:2e:3f:
         5a:89:cd:98:51:b5:9a:fd:95:f3:00:2c:6c:8f:fa:09:f2:b1:
         ec:04:75:68:66:19:3d:cb:c0:aa:ed:40:51:6f:5f:c7:73:7d:
         f2:7b:71:6c:09:6a:04:a1:d2:35:17:ca:44:f4:01:ce:d6:0b:
         03:b3:89:e2:1e:93:53:c0:95:57:71:19:9c:d2:eb:8c:7a:9d:
         78:52:e6:03:5f:40:a4:35:e8:c0:6a:0a:d3:41:64:91:cc:72:
         8f:b3:36:67:6f:6c:99:b4:84:b3:9c:2b:96:3c:aa:e1:60:ba:
         9b:ce:68:60:82:bb:6a:6f:e5:a5:37:09:0d:cb:40:6c:c5:58:
         b0:f6:fd:a7:1f:de:64:60:60:d8:69:7b:c1:3d:ba:64:7a:21:
         d1:4e:d2:51:13:04:01:5d:86:98:e5:69:c7:00:32:79:23:b0:
         8f:ec:af:ee:14:b0:d4:b7:86:4d:d0:8f:8e:22:15:ab:7c:3c:
         f2:6c:20:07:32:09:19:c9:25:e6:ca:97:a0:8d:ae:98:8d:8c:
         cb:74:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:01 2026 by rpki-client