Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/zj42VqHXAHeZD-aQh282IC0Wa4E.asa
File:                     zj42VqHXAHeZD-aQh282IC0Wa4E.asa (raw, json)
Hash identifier:          k5/yCPHuauShTA5Y9+JwkWv2aEcgloD9LxkHT8lsxmc=
Subject key identifier:   CE:3E:36:56:A1:D7:00:77:99:0F:E6:90:87:6F:36:20:2D:16:6B:81
Certificate issuer:       /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Certificate serial:       019EB74B6BDD22B34D212A058F5250E48E2D
Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/zj42VqHXAHeZD-aQh282IC0Wa4E.asa
Signing time:             Thu 11 Jun 2026 15:27:13 +0000
ASPA not before:          Thu 11 Jun 2026 15:27:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216432
Providers:                AS: 20473
                          AS: 204844
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:4b:6b:dd:22:b3:4d:21:2a:05:8f:52:50:e4:8e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
        Validity
            Not Before: Jun 11 15:27:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce3e3656a1d70077990fe690876f36202d166b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:c0:e1:4a:ef:56:a8:55:f3:20:1a:89:31:
                    5d:aa:bf:8c:ab:6c:1c:54:e7:bf:1f:f7:72:e8:55:
                    39:47:2f:75:18:b7:56:4b:69:89:a7:ee:30:a9:77:
                    48:b5:3e:37:23:51:ca:7b:b9:00:d7:1a:79:d2:bc:
                    65:9b:d8:3a:bf:dd:66:7c:68:fb:6e:cc:56:14:1f:
                    0e:f5:59:5b:eb:04:05:73:d3:41:37:70:42:e5:07:
                    a5:79:e1:49:5e:fd:d8:1f:86:8f:09:fe:8f:62:bf:
                    06:a5:19:f3:08:49:fa:16:db:f6:97:58:3b:c6:19:
                    f3:1a:e8:41:2e:15:82:c5:bd:20:92:e3:fc:65:df:
                    ba:11:70:5c:72:0d:df:05:34:94:18:b0:25:9d:a8:
                    27:2d:70:cd:75:e5:60:1a:d4:13:10:28:1c:49:cc:
                    8e:96:84:13:c7:50:ee:1b:0c:cc:d7:f1:97:e1:f7:
                    74:b9:ce:6d:f3:f2:52:1b:f3:99:05:bc:e3:26:15:
                    8c:85:ef:09:17:61:40:0e:d8:17:51:23:de:35:0e:
                    aa:30:16:a6:51:4f:6f:d0:ba:bb:21:44:36:fc:bc:
                    f2:e9:d6:3f:da:bd:26:36:4f:7a:fe:da:70:3c:b0:
                    0c:f1:c0:9a:dd:e8:94:0b:38:fe:93:98:c6:9c:f2:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:36:56:A1:D7:00:77:99:0F:E6:90:87:6F:36:20:2D:16:6B:81
            X509v3 Authority Key Identifier:
                keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/zj42VqHXAHeZD-aQh282IC0Wa4E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216432

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:0d:82:0e:b8:60:7c:76:cb:fc:f8:3f:e2:00:0f:0d:43:
         db:0c:12:91:15:dc:47:7a:0f:97:ee:22:45:d7:4f:97:97:ad:
         98:36:01:ec:df:73:0b:94:09:9f:10:75:63:b8:1b:5d:13:db:
         93:2d:36:93:bc:42:fb:05:e6:8b:ca:7b:ed:51:08:b3:71:7f:
         de:1c:de:c5:0b:21:71:9a:95:58:90:c4:9c:6a:4c:b9:52:0d:
         f6:0a:cc:3c:77:e8:c4:45:f2:8d:6f:04:27:da:d7:67:4c:dd:
         fd:a9:f7:20:ec:65:31:8d:9e:b7:3b:e0:e1:c8:d0:74:00:f8:
         13:49:87:b2:c4:b2:73:8f:9f:8e:60:09:75:61:b4:0c:1f:1d:
         2d:5d:8a:5f:d3:c7:b9:d9:19:59:ed:85:fd:84:52:e6:a6:7e:
         c1:da:8a:98:bf:9e:f9:a2:ce:e6:e9:09:10:68:01:0c:13:7d:
         1d:3c:4b:03:53:c5:67:76:fb:9b:73:e3:a3:ed:a9:3e:5a:54:
         1e:b7:4b:29:49:90:bd:04:7d:7e:6b:7a:ec:84:0b:10:3c:a6:
         d4:0d:05:43:d1:b7:57:25:26:49:a5:23:f4:a5:89:45:39:d0:
         1e:81:47:fc:a6:93:2a:bf:f0:f8:54:31:e0:c0:19:be:b7:42:
         72:5c:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:14:21 2026 by rpki-client