Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa
File:                     7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa (raw, json)
Hash identifier:          qASt1tPeqwlwGXks2FNMyN+aJfbPnWYSXeXKrC2Yero=
Subject key identifier:   ED:CC:5E:56:0C:FC:4D:B7:C3:A2:8E:48:EF:ED:8D:2B:24:F3:5D:3A
Certificate issuer:       /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial:       01A0A051C0E91320E07C41774B66CE2A9C74
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa
Signing time:             Mon 14 Sep 2026 14:28:27 +0000
ASPA not before:          Mon 14 Sep 2026 14:28:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214642
Providers:                AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a0:51:c0:e9:13:20:e0:7c:41:77:4b:66:ce:2a:9c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
        Validity
            Not Before: Sep 14 14:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edcc5e560cfc4db7c3a28e48efed8d2b24f35d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:38:4f:18:68:30:57:9e:93:12:a2:02:a3:
                    1a:99:41:32:22:43:ea:b8:30:cb:cb:e1:b7:a2:cf:
                    65:c0:b2:df:d6:bf:5a:f1:b7:fb:14:82:fa:4f:fd:
                    9e:6e:a7:e9:93:5b:a4:37:0c:5f:00:f4:31:74:c3:
                    20:98:c8:df:65:26:ea:52:28:9f:68:59:09:01:69:
                    79:38:2a:63:87:ec:d2:4c:64:dd:ed:8e:0a:1b:e3:
                    91:5e:44:72:64:ee:43:39:4e:18:eb:5b:d2:79:57:
                    88:d9:1a:cb:22:54:23:55:fd:c5:b8:cb:0f:db:6e:
                    32:ab:f5:61:a4:8c:7e:43:6b:23:03:0e:0b:79:1d:
                    31:c3:7e:1b:83:e1:54:14:8c:6a:40:c4:35:a6:25:
                    ac:db:23:4c:9f:b0:b4:67:56:a6:67:ff:19:49:8c:
                    4d:b5:ee:fa:c6:02:d2:c4:ce:4c:d4:29:46:ab:7d:
                    b2:12:84:6a:fe:35:35:d8:c4:2e:99:73:bf:96:8a:
                    58:b6:ca:3b:04:d0:7b:61:b4:48:5e:b4:76:d8:6c:
                    8e:ca:94:11:28:4e:7e:95:6f:33:ac:34:f2:15:81:
                    43:52:88:e5:33:ed:57:81:69:12:64:a5:1e:28:b7:
                    cb:03:22:b6:ae:0a:2d:c0:41:b3:41:33:a3:f3:41:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:5E:56:0C:FC:4D:B7:C3:A2:8E:48:EF:ED:8D:2B:24:F3:5D:3A
            X509v3 Authority Key Identifier:
                keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/7cxeVgz8TbfDoo5I7-2NKyTzXTo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214642

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:56:38:22:21:46:61:e7:ee:41:09:8a:1a:50:31:55:88:
         74:72:2b:20:44:60:8f:41:db:30:bf:eb:85:8c:1f:4f:68:a5:
         d9:9a:5f:19:25:a4:ec:b9:0c:f2:35:5c:5c:91:87:f4:61:7a:
         d2:33:18:66:b3:3a:3a:52:a5:1c:14:82:f2:34:aa:37:e4:07:
         f4:88:0e:ff:fb:d0:bb:49:23:d8:62:3c:98:f0:40:eb:df:6e:
         22:d3:3d:b5:2a:c3:fe:53:a9:0b:31:5f:fa:e5:c1:97:e2:47:
         dd:22:92:16:63:cd:1c:16:b0:73:56:69:3d:18:8a:2d:51:d2:
         5b:8b:83:83:28:a3:03:1d:69:f3:16:7a:eb:1f:a5:01:15:b3:
         20:0b:82:6f:d4:4e:a8:d0:2b:94:13:f5:3b:05:9f:9d:46:42:
         39:b2:c8:48:ff:5b:b3:58:dc:25:93:63:8a:42:67:cc:14:fe:
         8f:94:0f:ef:b0:ec:49:35:d2:53:da:6a:b3:5c:51:9a:eb:9e:
         d3:13:76:77:df:26:df:e3:ef:c7:e4:1a:2a:cb:9d:28:57:bc:
         68:06:31:aa:07:46:86:16:ec:f8:15:bf:65:82:7b:94:49:72:
         00:b5:97:e8:50:34:84:3c:ba:97:3f:b5:a3:21:e1:cf:7c:18:
         57:68:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:56 2026 by rpki-client