Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa
File:                     ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (raw, json)
Hash identifier:          pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=
Subject key identifier:   12:5B:DC:A5:4D:D3:32:C9:8C:33:0C:66:50:3A:41:23:D8:FC:6B:E5
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       019EA609F1B40839796120F90D3D0E279B6A
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa
Signing time:             Mon 08 Jun 2026 07:02:09 +0000
ASPA not before:          Mon 08 Jun 2026 07:02:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200852
Providers:                AS: 25019
                          AS: 39386
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a6:09:f1:b4:08:39:79:61:20:f9:0d:3d:0e:27:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Jun  8 07:02:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=125bdca54dd332c98c330c66503a4123d8fc6be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:a3:be:a0:9a:41:b2:a9:85:d8:7e:e0:aa:
                    11:3b:38:3f:1c:ba:e6:31:6a:da:5c:b2:15:18:be:
                    cd:5a:58:f3:15:e5:67:66:67:a2:4c:7f:83:44:34:
                    52:0b:1a:39:ea:96:df:63:2a:d1:3a:0b:9a:97:46:
                    a0:b2:9c:66:6e:f0:5d:a6:73:3f:17:17:ea:8e:56:
                    30:dc:f7:4e:33:75:4d:97:63:63:66:87:8b:75:87:
                    43:49:84:bd:68:68:5a:5f:06:4c:4e:36:f8:d5:c1:
                    1c:87:6e:dd:ca:ec:25:b3:26:08:1b:76:7a:9c:33:
                    b2:5d:9f:66:26:ba:d2:27:82:b9:b5:32:44:51:d9:
                    2d:e7:f7:a6:1a:3b:0e:18:93:80:be:d4:26:cf:66:
                    74:eb:b2:c5:bd:e1:4d:50:54:1b:8f:2b:64:e7:d4:
                    02:0f:c8:d9:73:59:b5:52:6e:48:78:bf:45:b9:0c:
                    9b:64:29:96:c0:41:3a:bf:5f:0d:9e:83:e2:d4:99:
                    66:9c:20:54:57:5c:cf:59:8a:be:bb:7e:00:3d:f6:
                    fd:2d:9f:cc:a1:57:c8:bb:58:6b:22:59:2a:a3:e8:
                    9f:f3:5f:ea:7f:f8:e4:b8:90:ce:d7:92:80:5a:59:
                    a3:13:d4:f5:5c:74:87:ef:69:ff:57:f4:70:17:8c:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:DC:A5:4D:D3:32:C9:8C:33:0C:66:50:3A:41:23:D8:FC:6B:E5
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200852

    Signature Algorithm: sha256WithRSAEncryption
         12:84:39:1e:4b:22:25:0f:37:d6:44:ba:20:40:e5:a9:5b:7b:
         b1:3b:29:93:b1:1f:d8:29:d4:95:ae:16:48:7c:cf:e4:23:4c:
         c4:39:12:e1:8b:eb:c8:16:27:e8:94:ed:09:3f:59:2a:b2:37:
         c7:45:c5:ba:a2:76:c3:ef:7a:bf:0e:13:f9:96:fc:10:ec:b0:
         a1:cc:46:aa:bc:cc:2c:78:ca:ac:b5:bc:c4:67:ea:19:fa:76:
         a9:f8:d3:45:59:7e:07:72:f3:74:7b:86:34:b6:25:29:5d:bb:
         cd:f7:6a:54:9c:da:f4:92:83:d6:a9:f3:cc:21:2a:fc:f6:d1:
         c3:55:5a:e1:65:35:67:b6:35:59:05:d7:48:b5:19:99:3a:29:
         7d:8e:08:fc:26:85:d2:04:14:77:60:25:e4:0f:71:3e:c1:a4:
         40:e4:96:b3:c0:60:ce:c6:1c:49:56:58:62:f1:f3:7a:c2:ee:
         d2:10:9a:08:db:8a:5a:72:15:72:f0:30:bc:75:09:88:4a:6c:
         e3:dc:1d:52:0c:0f:fa:7b:2a:9c:7c:55:09:4a:e8:fc:5e:d6:
         4c:9b:d8:5b:65:84:c1:94:15:1b:2f:5a:ca:23:49:5c:9f:88:
         1e:d2:7f:d4:28:2b:1c:43:be:c7:65:1e:f4:5c:0d:f9:1d:b1:
         5d:29:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:21 2026 by rpki-client