Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Dv3KZYdu5waqli9OHwbfNLsm1-w.asa
File:                     Dv3KZYdu5waqli9OHwbfNLsm1-w.asa (raw, json)
Hash identifier:          0JCADoaSayhKJcTjJwIBVvTlqp1OlBxFMWr11L68sJc=
Subject key identifier:   0E:FD:CA:65:87:6E:E7:06:AA:96:2F:4E:1F:06:DF:34:BB:26:D7:EC
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       01A0593D6AD24DC238B770ED5AD96088D7BC
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Dv3KZYdu5waqli9OHwbfNLsm1-w.asa
Signing time:             Mon 31 Aug 2026 19:13:12 +0000
ASPA not before:          Mon 31 Aug 2026 19:13:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209505
Providers:                AS: 1299
                          AS: 2914
                          AS: 6762
                          AS: 35200
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:59:3d:6a:d2:4d:c2:38:b7:70:ed:5a:d9:60:88:d7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Aug 31 19:13:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0efdca65876ee706aa962f4e1f06df34bb26d7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:37:84:d4:2f:88:02:09:23:2c:36:cc:f6:
                    0c:bf:3b:e6:90:0c:cd:6e:27:1c:91:fd:cc:c6:68:
                    fe:04:9d:3a:99:f5:1d:fa:6b:bf:48:a6:a1:9e:aa:
                    94:10:ac:6a:c0:a1:a2:73:a0:9c:69:07:6f:fc:80:
                    ce:48:36:b9:76:f6:6a:dc:0f:92:24:bf:37:c6:fa:
                    d1:71:be:46:8a:4f:96:38:23:6d:95:78:e7:04:58:
                    cf:18:2e:bc:d4:26:a5:65:ba:be:6d:8a:f6:cb:0b:
                    bd:99:ac:69:2a:dc:3a:db:9c:d1:5a:a7:16:c9:06:
                    15:99:d9:89:52:b6:0b:6d:3d:9b:3a:37:87:4c:de:
                    78:4e:07:14:95:b1:44:41:12:9a:e9:02:9a:9c:69:
                    6b:0d:65:6f:c2:e1:6b:e2:01:fc:82:f0:3b:6d:8b:
                    d7:9c:15:7f:7c:9c:50:75:34:22:bb:91:5f:45:11:
                    f4:17:38:c1:13:ec:de:ab:5a:e0:ed:2d:59:89:4b:
                    8a:40:70:77:e2:b8:9d:39:95:d3:2e:21:f9:6b:3e:
                    46:38:5e:1e:5a:ef:0f:33:6e:a0:7c:0f:bc:6a:d9:
                    f9:bc:ca:96:ad:76:e6:6a:de:43:df:0d:5d:8d:b3:
                    a3:19:bb:f2:89:6f:72:5a:03:47:b2:7a:2b:a5:47:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:CA:65:87:6E:E7:06:AA:96:2F:4E:1F:06:DF:34:BB:26:D7:EC
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Dv3KZYdu5waqli9OHwbfNLsm1-w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209505

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:c8:7d:a1:f5:b5:c1:e3:3d:42:b1:80:b6:87:21:51:33:
         2c:d9:11:90:d6:f7:24:0b:de:a9:a5:bc:f7:0b:7c:82:42:47:
         e8:c2:d3:8b:0f:6d:c5:19:8e:2f:df:63:45:4e:a0:85:7e:93:
         38:a0:0d:d3:4f:4f:19:71:6e:ba:a9:8a:6b:40:7e:07:2c:75:
         9d:33:d2:a6:4d:dd:f4:73:5a:9d:c0:d4:6e:3e:8c:18:83:ce:
         fd:78:0f:0c:4f:cc:ab:52:e5:e1:12:bb:66:aa:53:d6:61:49:
         89:41:88:59:94:d7:27:69:0a:b2:5b:5f:f9:84:ff:08:f6:22:
         f7:34:36:16:fb:e0:a0:f3:e5:f4:6b:3f:3c:9f:5a:72:69:fb:
         f5:cd:cd:08:2b:c4:5c:ad:44:03:d2:2c:f5:71:55:f0:1e:96:
         e3:fe:54:07:bb:9a:37:9b:4d:ae:a7:55:eb:b5:be:5a:e4:71:
         06:3d:a8:77:ae:ac:59:c7:c3:85:1a:80:ca:9b:b0:ba:47:66:
         49:1c:fb:28:b1:cf:86:1a:c3:29:e5:f8:a0:50:ae:ed:39:d8:
         bc:f8:1f:62:d0:bf:53:7e:79:9b:19:ab:9d:c4:f7:42:59:9b:
         9a:91:bd:41:3e:51:14:cd:f5:a8:ab:b1:b9:c3:c5:f2:cc:ee:
         40:e1:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:45 2026 by rpki-client