Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JgOZ0B6kGENlyzqwBYmWTZ0eqeA.asa
File:                     JgOZ0B6kGENlyzqwBYmWTZ0eqeA.asa (raw, json)
Hash identifier:          MnLzIjpYn5ytA57TMiMqdC+VomZRxdxgoPU6s8lAhVI=
Subject key identifier:   26:03:99:D0:1E:A4:18:43:65:CB:3A:B0:05:89:96:4D:9D:1E:A9:E0
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       019F90D43593BF0A94D2DB725EFF7E8D8B5C
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JgOZ0B6kGENlyzqwBYmWTZ0eqeA.asa
Signing time:             Thu 23 Jul 2026 21:14:14 +0000
ASPA not before:          Thu 23 Jul 2026 21:14:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207155
Providers:                AS: 212683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:d4:35:93:bf:0a:94:d2:db:72:5e:ff:7e:8d:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Jul 23 21:14:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=260399d01ea4184365cb3ab00589964d9d1ea9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:67:85:be:d0:8a:e3:26:30:3d:cc:75:9e:
                    d2:f6:af:ae:c3:f9:d0:5c:6c:0d:f0:ea:27:4d:b0:
                    dd:e0:22:0a:eb:88:a9:d7:3b:f2:f1:cf:38:b1:c2:
                    87:cf:e3:6d:9f:b8:70:73:df:24:9e:74:21:ff:df:
                    fb:77:5d:05:1c:ff:5a:a8:1c:e4:35:9b:c7:6a:6d:
                    2e:c4:0f:b4:91:ac:80:67:79:dc:9c:13:e2:f2:b1:
                    06:10:93:62:b7:fd:26:41:20:14:ee:bf:4d:e0:bc:
                    16:03:de:02:27:4b:a5:cc:91:08:f8:67:5b:f9:96:
                    10:8e:04:11:82:a7:35:7a:50:77:05:95:62:d1:5d:
                    1e:d6:99:50:f0:cd:71:af:dd:56:22:ce:e0:d8:7a:
                    ef:4f:9b:65:f6:cf:bf:99:48:c6:1d:43:07:58:d3:
                    de:ac:1e:26:1f:4a:52:ed:a9:30:a1:31:79:32:d0:
                    7e:95:f3:cc:d5:f8:62:04:59:15:33:d5:75:68:01:
                    d6:be:56:fc:ea:b4:83:ee:c2:43:26:53:38:85:84:
                    9d:cb:4b:cf:6c:7c:fb:30:9b:bc:6f:b6:3f:d5:38:
                    68:7a:13:e2:c1:b6:e7:56:1f:ed:dd:1b:ba:42:7a:
                    0b:48:93:5a:d4:da:6b:0c:9f:12:aa:a5:0e:83:93:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:99:D0:1E:A4:18:43:65:CB:3A:B0:05:89:96:4D:9D:1E:A9:E0
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JgOZ0B6kGENlyzqwBYmWTZ0eqeA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207155

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:a5:c3:d9:54:3b:51:37:5c:60:08:04:01:de:fd:2c:47:
         2f:8d:16:47:30:e8:38:06:1b:73:ee:a9:3a:c4:65:60:9e:e2:
         e5:e6:94:64:94:7d:6a:b4:3d:f0:02:3d:08:f8:06:45:24:d0:
         ae:82:4f:88:7d:90:d3:ae:81:df:a1:54:fc:5f:bb:5d:f4:eb:
         38:79:10:14:cb:8c:4e:a8:f4:b9:0d:05:77:d5:6e:89:76:08:
         99:13:65:86:14:45:50:70:c7:09:43:e7:76:9d:c8:e7:ff:fa:
         c8:9e:62:4e:be:ea:5d:d7:36:a8:c1:eb:cd:12:e3:8d:6a:e9:
         cd:a9:56:b9:16:92:ce:8f:4b:60:7a:4a:e8:a6:2e:fa:00:8e:
         58:b8:b0:68:67:0d:a6:75:9f:dc:41:69:e4:c9:ce:16:bf:c4:
         6f:bc:1b:41:20:a0:09:6c:aa:ad:e7:83:0f:b5:97:7b:fe:27:
         f2:1e:c2:a9:18:b1:f6:e1:76:ff:27:55:fc:f1:fe:25:83:82:
         c3:30:98:d0:1c:ab:03:18:f1:7b:60:c3:c5:4e:b0:5a:5d:ff:
         57:9c:21:c0:d5:24:7a:ee:a0:d3:eb:58:d3:9a:b6:9e:25:d6:
         51:4a:7a:73:c7:8e:31:f8:37:bb:67:c1:d5:a1:0d:e6:35:09:
         00:ff:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:07 2026 by rpki-client