Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/sk8j4ooIq_6310cgpT7JHgS__6Q.asa
File:                     sk8j4ooIq_6310cgpT7JHgS__6Q.asa (raw, json)
Hash identifier:          rnR8JO7Sl7gfRDV7P8yjIvScF3IAyOEjWduQgbXRoFM=
Subject key identifier:   B2:4F:23:E2:8A:08:AB:FE:B7:D7:47:20:A5:3E:C9:1E:04:BF:FF:A4
Certificate issuer:       /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial:       019D286A75B7565FD670213D2D3DC2D298DE
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/sk8j4ooIq_6310cgpT7JHgS__6Q.asa
Signing time:             Thu 26 Mar 2026 04:32:38 +0000
ASPA not before:          Thu 26 Mar 2026 04:32:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212316
Providers:                AS: 20473
                          AS: 24940
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:6a:75:b7:56:5f:d6:70:21:3d:2d:3d:c2:d2:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
        Validity
            Not Before: Mar 26 04:32:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b24f23e28a08abfeb7d74720a53ec91e04bfffa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:10:3b:9d:11:0b:59:c4:24:a5:41:ff:78:
                    30:7f:e1:53:b1:79:92:97:cb:57:0f:1a:28:f9:6e:
                    51:7f:8a:c4:5d:6d:02:92:73:ff:a1:66:4e:59:b1:
                    e5:d2:78:cd:49:d8:e0:2d:57:aa:f0:75:51:57:c7:
                    7e:bd:04:8c:c0:b8:33:8d:6b:fb:4e:cd:cc:48:02:
                    2d:0f:88:dc:8e:d4:25:fd:be:72:da:4f:1c:26:86:
                    d5:5f:2b:58:1f:d4:31:43:ed:21:38:61:f5:c9:8a:
                    7a:2a:d0:15:2c:8f:d3:70:27:8c:40:06:7d:9c:be:
                    56:0c:79:a6:a0:50:36:ff:81:bf:0d:14:58:71:1f:
                    56:72:08:da:18:46:1f:d1:7a:5d:a9:49:da:15:83:
                    b5:4c:31:41:9f:19:06:05:61:26:1f:3d:cd:d6:5f:
                    7a:83:ef:86:8e:14:f4:d1:d0:55:c8:db:fb:e7:42:
                    71:d6:c4:22:5c:b3:96:12:27:30:33:18:50:49:5a:
                    ce:7e:f0:18:f7:04:78:f0:05:a5:e0:43:fd:3e:b5:
                    c6:80:de:83:b1:9b:ec:a9:45:7c:0f:12:26:3f:bb:
                    b6:31:9e:6a:b0:87:3e:a8:c0:96:b2:8f:5a:91:3c:
                    77:6c:38:0d:2c:d8:9e:ce:f3:d5:29:1c:26:02:b3:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:23:E2:8A:08:AB:FE:B7:D7:47:20:A5:3E:C9:1E:04:BF:FF:A4
            X509v3 Authority Key Identifier:
                keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/sk8j4ooIq_6310cgpT7JHgS__6Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212316

    Signature Algorithm: sha256WithRSAEncryption
         d3:94:2a:d8:a4:55:19:e2:03:9e:61:d2:e1:5b:61:ab:95:76:
         70:7f:2b:2d:63:13:85:8c:62:f6:83:85:ef:0b:7e:b3:26:b4:
         cb:29:8a:f0:99:5e:c5:8b:6e:f2:14:9e:56:aa:af:5c:f3:60:
         e6:68:96:fb:ce:a3:1e:43:13:bf:e4:a5:c7:61:9d:9a:87:41:
         b4:a8:02:5f:32:07:02:34:9f:74:98:54:ae:34:36:f5:a6:03:
         2b:4a:10:84:0b:c8:89:a1:58:14:83:1a:d6:80:78:b0:0c:9e:
         5a:1c:f3:af:18:ab:d9:b0:0c:4e:e2:83:27:5d:1f:2c:43:6f:
         ab:f7:b5:a7:df:47:1e:92:7e:ca:58:43:2c:cd:1b:b3:1a:3b:
         c6:7a:32:21:0a:65:f4:54:80:b3:67:02:52:17:32:b9:0c:a5:
         32:fd:fb:75:4f:83:b4:af:9d:de:ff:c2:99:5b:51:33:af:8a:
         4a:19:42:65:4b:01:64:1e:6a:39:a1:68:52:c3:c9:e5:b5:21:
         d6:e9:89:cb:9a:32:4d:b5:76:f6:43:73:72:d7:86:b6:d7:31:
         ba:36:34:fe:2d:44:67:75:9f:d0:f7:79:82:86:8c:10:92:1f:
         a6:db:6d:74:a3:9c:75:65:73:5a:fc:a3:be:ed:19:06:7c:2b:
         96:f5:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:54 2026 by rpki-client