Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/zVSrTTqebRmSnsneDFxGS3_YpGc.asa
File:                     zVSrTTqebRmSnsneDFxGS3_YpGc.asa (raw, json)
Hash identifier:          fmf7CqwekntqfwrIibO6rpKxFjgw/RTj5EEUnDmjI/4=
Subject key identifier:   CD:54:AB:4D:3A:9E:6D:19:92:9E:C9:DE:0C:5C:46:4B:7F:D8:A4:67
Certificate issuer:       /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial:       01A0C3F4ADCFF2C73DA129B068A5E6BF4D4F
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/zVSrTTqebRmSnsneDFxGS3_YpGc.asa
Signing time:             Mon 21 Sep 2026 12:33:07 +0000
ASPA not before:          Mon 21 Sep 2026 12:33:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25330
Providers:                AS: 3252
                          AS: 9002
                          AS: 12963
                          AS: 31445
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:f4:ad:cf:f2:c7:3d:a1:29:b0:68:a5:e6:bf:4d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
        Validity
            Not Before: Sep 21 12:33:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd54ab4d3a9e6d19929ec9de0c5c464b7fd8a467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:69:25:9a:10:54:26:ba:c7:7c:c9:2b:25:
                    d9:8a:e3:6b:70:4f:85:c3:ac:4e:bc:02:48:2c:73:
                    9c:4f:8c:75:87:2d:71:1c:d9:7a:57:3c:ef:a1:8c:
                    d5:64:6e:0b:a1:ed:9a:8f:f7:ed:fc:eb:0a:9c:81:
                    72:39:7d:45:1c:79:04:65:3f:35:80:b0:da:aa:ec:
                    c2:0a:5b:7e:59:98:01:c7:ea:b9:4e:31:41:42:82:
                    de:28:ea:c4:c5:0f:00:0f:24:d0:85:3e:46:66:61:
                    eb:98:68:c1:f5:1f:d4:38:46:34:ff:65:12:a6:91:
                    0f:06:db:c0:01:2b:2c:df:02:8f:e0:3f:b7:59:8a:
                    8b:60:62:3c:a9:2f:71:59:bc:20:50:aa:bc:c0:0f:
                    15:03:d9:c9:95:b5:06:90:c3:36:f4:ae:79:40:bb:
                    01:51:7a:8e:8d:9f:e9:fe:51:09:1f:c3:90:a7:15:
                    68:60:f7:fb:a4:0e:32:01:4b:93:42:f6:41:7a:f3:
                    00:8a:63:09:04:c0:b8:e2:a6:2f:74:c2:6e:f1:0e:
                    de:a3:64:53:f2:9a:89:88:b4:fb:15:6f:8c:69:5c:
                    b3:c6:59:7f:2d:93:37:1c:c6:35:a0:1c:31:14:b0:
                    15:60:41:18:d0:37:8a:41:ff:ca:06:fa:d5:f7:8b:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:AB:4D:3A:9E:6D:19:92:9E:C9:DE:0C:5C:46:4B:7F:D8:A4:67
            X509v3 Authority Key Identifier:
                keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/zVSrTTqebRmSnsneDFxGS3_YpGc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25330

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:1a:79:ba:2e:3f:7b:21:4b:69:e8:36:5d:b1:fa:ca:29:
         41:ec:62:64:a2:8c:99:27:30:99:54:56:f6:e0:b2:34:9a:8b:
         22:fd:70:4b:30:c9:5c:19:0d:fa:79:f0:14:24:ef:03:9e:66:
         d3:a5:38:52:10:82:be:2a:b0:39:85:e0:8c:92:ab:ac:a3:c0:
         dd:5e:d7:e2:66:5e:9c:09:5e:f4:fb:b4:9a:88:e0:f1:e3:ab:
         53:52:8a:73:cd:76:5d:3b:c7:12:70:27:0b:5b:5f:86:ed:25:
         c1:4c:3b:cb:44:4e:e3:3f:34:07:a3:fa:28:0a:0b:e8:cd:74:
         2e:02:47:3e:45:ac:28:0f:75:5e:52:99:ef:13:55:0c:da:dd:
         c7:fe:90:2d:00:57:e1:e6:83:b8:3c:06:5c:12:f0:b6:4a:7f:
         2c:c9:d9:03:c7:d0:3a:8a:cf:1d:08:b1:27:61:87:92:0d:5f:
         c8:cd:ca:23:98:c5:16:5b:40:65:f4:08:58:22:80:2a:4f:67:
         30:b4:b5:6a:51:66:a5:3c:64:2e:21:62:ac:c4:9d:1c:cd:cf:
         83:d8:03:7f:69:27:c1:38:ba:e6:af:57:7b:85:ba:66:8a:7c:
         f0:f0:41:36:b0:fa:09:03:25:80:d9:8b:43:6e:b6:e0:fd:69:
         66:e5:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:05 2026 by rpki-client