Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/UKAb3BOkisRzJDu0FgnxiUVPR9A.asa
File:                     UKAb3BOkisRzJDu0FgnxiUVPR9A.asa (raw, json)
Hash identifier:          hk13PA/WmxBs2h/rKn7+UjZx+iuBVhstVL8L2PDABiA=
Subject key identifier:   50:A0:1B:DC:13:A4:8A:C4:73:24:3B:B4:16:09:F1:89:45:4F:47:D0
Certificate issuer:       /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial:       01A023D6149238B93F1EB74D974D74532B33
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/UKAb3BOkisRzJDu0FgnxiUVPR9A.asa
Signing time:             Fri 21 Aug 2026 10:20:27 +0000
ASPA not before:          Fri 21 Aug 2026 10:20:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197133
Providers:                AS: 174
                          AS: 3215
                          AS: 8218
                          AS: 35280
                          AS: 44530
                          AS: 60132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:d6:14:92:38:b9:3f:1e:b7:4d:97:4d:74:53:2b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
        Validity
            Not Before: Aug 21 10:20:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50a01bdc13a48ac473243bb41609f189454f47d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:5a:bb:0f:15:b2:61:d5:6e:d2:9a:47:bd:
                    c1:0b:20:6e:92:68:0f:5a:1c:00:04:ae:88:fd:3b:
                    78:cc:ab:3e:bd:11:c7:b1:9c:50:c5:9a:b9:60:84:
                    92:a8:73:97:5a:f4:5b:fb:5b:dc:ba:90:09:ca:13:
                    04:14:ab:4b:91:a4:30:3e:f6:ba:5e:c2:f9:29:a7:
                    f0:2c:35:d9:6e:7e:3f:5a:8d:6d:a7:f9:04:be:2b:
                    be:d7:b9:74:f7:e7:c4:c1:ca:c2:dd:8e:d5:10:e9:
                    5a:22:2d:43:42:54:c4:d6:8b:5a:88:7f:ce:d7:0b:
                    6e:a4:0c:1a:a6:8e:d2:0a:d3:b0:1c:ca:ee:d9:c1:
                    b5:c3:5c:bd:ed:f4:fd:43:24:5f:31:74:6e:9b:6a:
                    13:5b:89:13:81:9e:1e:02:34:98:39:e6:24:65:cc:
                    e9:58:1f:ea:ab:29:4b:74:f9:a1:46:c6:52:f7:b0:
                    21:3c:cc:87:85:70:0d:52:a0:49:d6:3f:18:07:42:
                    3d:b5:71:1e:5b:f5:4a:1b:c9:64:53:e9:0c:b1:bf:
                    3c:84:e6:39:1e:3f:cf:84:69:8f:64:40:b2:82:23:
                    80:61:79:61:ba:c9:ee:86:5d:9d:3c:43:bb:9c:62:
                    8d:a3:95:d0:de:0b:76:31:cc:52:3e:f9:cd:45:55:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A0:1B:DC:13:A4:8A:C4:73:24:3B:B4:16:09:F1:89:45:4F:47:D0
            X509v3 Authority Key Identifier:
                keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/UKAb3BOkisRzJDu0FgnxiUVPR9A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197133

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:32:44:99:7c:2f:ab:20:27:35:80:2d:0b:c5:ab:88:55:
         f1:2f:82:3f:e8:87:10:7e:1f:59:f4:1f:39:88:23:0c:dc:9c:
         5c:28:f5:2d:d2:9b:8e:7b:d8:98:fb:5f:09:ab:0b:53:40:b7:
         96:3c:88:5f:5f:d4:ba:2a:5b:15:fb:ef:e3:69:f2:c5:e9:0b:
         4f:38:f0:3c:b7:06:59:84:04:80:82:8d:df:7c:2a:8c:e0:cc:
         67:27:f1:48:cc:ac:a8:ff:53:8f:2c:1d:4b:a3:ce:4d:18:b2:
         a5:ae:a0:41:13:8e:4e:73:f1:a9:72:70:ed:d2:19:b3:53:3b:
         d8:eb:17:83:e3:2b:fe:c3:3b:e3:9d:16:b3:80:b4:e4:72:bc:
         79:8d:43:3d:9b:f9:9f:45:73:0f:31:c7:f3:12:a3:98:cb:ad:
         0c:5f:46:ac:6a:46:7b:91:41:8d:da:b3:10:d8:ac:de:8e:d0:
         f3:e2:d2:a7:27:b0:10:38:e6:88:b9:45:23:68:df:c1:6f:d2:
         11:16:b8:9a:c0:4c:c2:95:be:70:9e:23:07:a4:d9:ce:57:67:
         3e:cf:b3:68:ba:0a:10:9c:5f:ab:bc:ab:0b:a8:fc:c0:b3:31:
         3c:38:1f:6b:8b:11:64:a6:fc:52:5d:34:da:c7:04:bd:bd:a4:
         80:95:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:48 2026 by rpki-client