Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/IXCdnsQ5KjeUkUnSpriHda-Y9Sk.asa
File:                     IXCdnsQ5KjeUkUnSpriHda-Y9Sk.asa (raw, json)
Hash identifier:          FgTuyydB1xVR5kRQsuY82j6aVXmXGNbSeHA1XGn9rpQ=
Subject key identifier:   21:70:9D:9E:C4:39:2A:37:94:91:49:D2:A6:B8:87:75:AF:98:F5:29
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019E69927769937DC794F8FB19B7AC452DF5
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/IXCdnsQ5KjeUkUnSpriHda-Y9Sk.asa
Signing time:             Wed 27 May 2026 13:14:26 +0000
ASPA not before:          Wed 27 May 2026 13:14:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            20764
Providers:                AS: 3356
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:69:92:77:69:93:7d:c7:94:f8:fb:19:b7:ac:45:2d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: May 27 13:14:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21709d9ec4392a37949149d2a6b88775af98f529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:7a:f6:3b:5a:8d:dd:5d:f7:09:fa:48:0f:
                    fa:71:56:dc:54:f1:89:e7:6e:e6:b1:7e:ca:1c:22:
                    f5:96:b7:63:af:78:0d:bf:da:ff:04:60:af:1e:37:
                    66:1e:16:0f:2a:8c:e8:c7:e7:34:71:10:ac:13:7f:
                    e5:a7:e9:6a:82:31:3a:fa:26:c1:5f:0b:26:f2:8a:
                    9f:2b:cc:bb:99:cf:8a:f8:82:50:eb:30:76:bb:dd:
                    59:f0:df:bb:f7:85:55:cb:9d:1a:5a:82:a4:94:b4:
                    44:94:fd:45:6e:4f:71:14:8e:c7:19:c6:b6:cf:06:
                    66:3c:c5:24:c5:ac:97:f4:36:53:4e:bf:55:3b:dc:
                    af:60:90:08:5d:c5:94:e5:7c:f7:56:a1:9b:1b:99:
                    db:73:2c:35:8e:59:b9:88:78:e7:b5:89:2e:98:09:
                    b2:fd:44:3b:ad:3d:96:f7:6c:5f:cb:d3:9d:ed:c5:
                    7e:3e:0d:4b:28:66:02:d4:4c:0f:dd:0c:a6:33:3e:
                    8a:d1:a1:fa:5a:c0:c3:1c:60:3f:5f:6d:78:fd:b6:
                    61:2c:4a:d7:eb:27:44:e8:8b:22:47:52:a3:12:71:
                    bc:97:e4:20:0a:46:51:59:8e:87:14:05:db:2c:e9:
                    a1:58:d0:fd:ce:8d:c6:4e:bf:06:d2:9e:6e:51:18:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:9D:9E:C4:39:2A:37:94:91:49:D2:A6:B8:87:75:AF:98:F5:29
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/IXCdnsQ5KjeUkUnSpriHda-Y9Sk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20764

    Signature Algorithm: sha256WithRSAEncryption
         cb:66:bf:30:7c:07:eb:1e:9b:9e:cc:c6:b4:2d:12:65:73:a0:
         2c:c9:83:0a:de:7d:0a:3f:b6:f0:ae:05:cb:c6:be:9a:25:77:
         05:0f:37:7d:81:e9:f2:5b:a6:2d:bb:73:7b:fb:e3:62:25:68:
         21:ab:12:2f:e4:00:f2:bf:d8:d5:e8:c3:66:10:1e:f1:22:30:
         ed:13:ff:9b:84:fb:42:9e:ae:e9:f4:58:fd:ad:46:bb:a7:b0:
         54:91:4f:f0:78:84:04:66:59:11:b8:89:d7:2e:df:d1:08:a2:
         10:f7:36:36:43:97:f6:41:a7:14:bf:71:04:d0:94:42:4a:ad:
         ad:d5:e7:fb:5c:2b:2e:1b:fa:c3:9c:1d:f2:72:23:a0:5f:e7:
         9d:c7:25:4d:d5:33:b6:c7:6b:e2:a0:e7:f2:41:3e:d9:ef:c0:
         53:30:5a:ca:0f:9a:00:73:09:96:70:6c:89:bd:f8:a5:19:d0:
         07:6e:7a:3f:2b:b9:e1:4d:b8:c9:ee:29:de:21:a5:bb:64:67:
         23:75:8f:45:2b:29:0b:c7:38:9d:28:59:db:d4:e1:bf:bc:89:
         03:e8:e4:20:c2:8d:e9:77:6a:6f:4b:90:bc:01:2d:c7:a0:b5:
         3b:8f:91:bf:5f:1a:bb:58:e1:27:19:fb:8e:81:c5:8f:b7:ad:
         20:ae:69:48
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ5pkndpk33HlPj7GbesRS31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh
OWMwZjYwHhcNMjYwNTI3MTMxNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTcwOWQ5ZWM0MzkyYTM3OTQ5MTQ5ZDJhNmI4ODc3NWFmOThmNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/V69jtajd1d9wn6SA/6cVbcVPGJ
527msX7KHCL1lrdjr3gNv9r/BGCvHjdmHhYPKozox+c0cRCsE3/lp+lqgjE6+ibB
Xwsm8oqfK8y7mc+K+IJQ6zB2u91Z8N+794VVy50aWoKklLRElP1Fbk9xFI7HGca2
zwZmPMUkxayX9DZTTr9VO9yvYJAIXcWU5Xz3VqGbG5nbcyw1jlm5iHjntYkumAmy
/UQ7rT2W92xfy9Od7cV+Pg1LKGYC1EwP3QymMz6K0aH6WsDDHGA/X214/bZhLErX
6ydE6IsiR1KjEnG8l+QgCkZRWY6HFAXbLOmhWND9zo3GTr8G0p5uURhADwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFCFwnZ7EOSo3lJFJ0qa4h3WvmPUpMB8GA1UdIwQY
MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt
OGVhZThiNzVlOWNhLzEvSVhDZG5zUTVLamVVa1VuU3ByaUhkYS1ZOVNrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh
LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlEcMA0GCSqGSIb3
DQEBCwUAA4IBAQDLZr8wfAfrHpuezMa0LRJlc6AsyYMK3n0KP7bwrgXLxr6aJXcF
Dzd9genyW6Ytu3N7++NiJWghqxIv5ADyv9jV6MNmEB7xIjDtE/+bhPtCnq7p9Fj9
rUa7p7BUkU/weIQEZlkRuInXLt/RCKIQ9zY2Q5f2QacUv3EE0JRCSq2t1ef7XCsu
G/rDnB3yciOgX+edxyVN1TO2x2vioOfyQT7Z78BTMFrKD5oAcwmWcGyJvfilGdAH
bno/K7nhTbjJ7ineIaW7ZGcjdY9FKykLxzidKFnb1OG/vIkD6OQgwo3pd2pvS5C8
AS3HoLU7j5G/Xxq7WOEnGfuOgcWPt60grmlI
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:19 2026 by rpki-client