Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/sZBRvlZC1OkuQ0Da72LmwToJ-OA.asa
File:                     sZBRvlZC1OkuQ0Da72LmwToJ-OA.asa (raw, json)
Hash identifier:          pJCRTb6/26ji13HkOpo8IhDm2Akt/F1rL40tL3XecDw=
Subject key identifier:   B1:90:51:BE:56:42:D4:E9:2E:43:40:DA:EF:62:E6:C1:3A:09:F8:E0
Certificate issuer:       /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial:       01A1A2CDAB416CA8293F5BC2C2ABEF8AE89A
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/sZBRvlZC1OkuQ0Da72LmwToJ-OA.asa
Signing time:             Tue 03 Nov 2026 19:05:50 +0000
ASPA not before:          Tue 03 Nov 2026 19:05:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31451
Providers:                AS: 6939
                          AS: 8804
                          AS: 15562
                          AS: 29632
                          AS: 48200
                          AS: 49009
                          AS: 196610
                          AS: 209533
                          AS: 211358
                          AS: 212635
                          AS: 212895
                          AS: 395089
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a2:cd:ab:41:6c:a8:29:3f:5b:c2:c2:ab:ef:8a:e8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
        Validity
            Not Before: Nov  3 19:05:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b19051be5642d4e92e4340daef62e6c13a09f8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5b:18:e2:1c:76:aa:a4:f9:ca:88:42:71:68:
                    fc:12:7c:25:da:27:66:44:6e:ff:2e:48:88:58:8d:
                    26:97:63:fd:18:d8:a1:fb:8d:5f:e6:cb:cc:3a:bd:
                    ce:29:12:45:0c:a0:37:25:b9:bf:41:5e:02:7c:17:
                    c2:62:9b:ae:88:bd:2f:33:47:3d:28:fc:13:30:db:
                    6f:1f:9c:10:64:36:da:5e:87:38:d6:36:ef:64:67:
                    b0:40:c6:a6:ea:56:0d:19:19:a1:b1:bf:7c:a4:fc:
                    b9:eb:47:80:fc:d7:89:53:51:7e:d4:15:5d:ed:c2:
                    70:34:9f:a3:51:1e:ea:c3:8b:85:0a:fd:e9:d0:c0:
                    82:23:dc:aa:10:cb:80:2f:51:da:8f:0a:4b:d0:52:
                    d2:d8:25:a0:cf:c0:0b:07:d8:ab:4a:28:f4:8e:f1:
                    49:2b:5e:ad:a9:a7:17:52:54:18:7a:fb:05:0e:8e:
                    06:00:90:bd:b7:41:c1:06:4a:26:26:d5:a6:e8:59:
                    9d:03:37:78:82:57:0e:60:20:9d:fc:a9:bb:a0:c6:
                    ee:ff:71:09:71:6c:94:0a:09:c2:a7:86:d1:c8:b9:
                    d3:6d:1e:e1:30:c9:89:03:59:19:1c:d8:81:7d:8a:
                    d4:62:75:11:b5:ed:31:34:22:cb:24:d1:57:a4:fc:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:51:BE:56:42:D4:E9:2E:43:40:DA:EF:62:E6:C1:3A:09:F8:E0
            X509v3 Authority Key Identifier:
                keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/sZBRvlZC1OkuQ0Da72LmwToJ-OA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31451

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:35:3a:95:0d:e2:de:f9:88:1a:5e:36:10:bf:cc:fa:91:
         d9:b7:48:f7:70:ec:b4:54:30:1b:78:8c:cd:cb:a2:d0:49:6a:
         56:3a:b0:d3:bc:47:ab:66:7b:40:9f:79:2a:cb:a9:82:3a:2d:
         22:72:ee:fc:53:cd:d4:8c:87:2a:2d:60:01:12:b2:80:6d:1f:
         96:7e:b9:c5:95:af:3c:af:9f:7b:81:39:74:dd:62:12:4a:01:
         05:cd:d4:7c:50:ea:58:4b:59:dc:d0:88:1c:f4:90:a0:d3:73:
         50:a1:61:2f:fd:f4:9f:9a:26:23:52:46:ed:f3:e8:60:c1:49:
         43:47:71:91:a1:17:f0:d3:84:94:08:15:73:3e:c5:49:b2:c4:
         b3:db:19:40:14:8f:45:2f:51:c1:22:70:69:12:3d:88:1f:76:
         45:14:27:46:88:3e:27:c5:b7:b5:a2:f0:bf:15:fc:04:79:98:
         fd:76:1e:6d:6b:3c:b9:31:b9:1d:df:78:8d:57:fb:95:1c:1b:
         6e:82:0a:f3:ae:9c:2e:16:ed:e0:b5:c0:93:aa:b6:75:22:15:
         61:8d:90:69:0b:97:97:0c:45:a3:92:27:c0:81:cd:49:74:8e:
         ea:6e:6c:86:a6:5d:a9:fe:09:3d:23:48:f9:6e:b0:fe:42:2d:
         a5:cf:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:05 2026 by rpki-client