Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YrZcQqizcm-6Ws7265yR5ro3QoE.asa
File:                     YrZcQqizcm-6Ws7265yR5ro3QoE.asa (raw, json)
Hash identifier:          MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=
Subject key identifier:   62:B6:5C:42:A8:B3:72:6F:BA:5A:CE:F6:EB:9C:91:E6:BA:37:42:81
Certificate issuer:       /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial:       019D6D897CA7896BBF94727563BB23630163
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YrZcQqizcm-6Ws7265yR5ro3QoE.asa
Signing time:             Wed 08 Apr 2026 14:40:20 +0000
ASPA not before:          Wed 08 Apr 2026 14:40:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61333
Providers:                AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6d:89:7c:a7:89:6b:bf:94:72:75:63:bb:23:63:01:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
        Validity
            Not Before: Apr  8 14:40:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=62b65c42a8b3726fba5acef6eb9c91e6ba374281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:69:99:da:bf:6b:f4:72:a4:29:ad:11:2c:ba:
                    6f:bf:44:1d:53:8e:ac:4f:47:e5:2d:ec:30:33:d0:
                    c4:ca:c8:81:65:a2:95:02:7b:9d:b1:77:8a:4e:dc:
                    85:99:33:46:c9:ea:b0:da:a3:d7:db:f5:07:73:70:
                    16:42:11:4b:fd:f0:bb:a5:02:19:2a:69:a3:53:60:
                    94:32:56:42:cb:bf:a3:79:d0:9f:28:eb:1c:2a:81:
                    e1:88:39:04:a4:d6:17:8d:d4:24:fa:c5:61:4e:f9:
                    e0:a5:22:8f:1e:74:67:9a:1b:9b:ab:30:a3:94:f0:
                    bf:75:14:4b:3e:ef:42:22:2b:1b:5d:75:4b:88:bb:
                    3e:4f:b7:2d:51:29:34:d2:46:a5:4e:d4:81:a7:6b:
                    40:5e:6f:b0:27:fe:99:3c:0b:82:9e:da:23:83:16:
                    fd:80:6b:8c:5b:50:99:c2:77:0e:2b:b0:3a:7c:ab:
                    6c:09:0e:f9:84:56:f2:2d:d3:0b:be:4f:ca:d4:37:
                    66:3c:6e:54:7c:67:f2:7b:64:e2:23:5d:97:b2:72:
                    f3:78:d0:b4:9f:05:22:a7:1a:b4:54:20:8c:f5:1c:
                    19:32:d8:b2:2d:09:7a:c8:37:8d:25:65:68:2d:d0:
                    54:d2:db:26:02:a6:78:56:50:fd:6e:c2:58:f0:2d:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:5C:42:A8:B3:72:6F:BA:5A:CE:F6:EB:9C:91:E6:BA:37:42:81
            X509v3 Authority Key Identifier:
                keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YrZcQqizcm-6Ws7265yR5ro3QoE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61333

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:fe:9c:12:f6:43:86:6b:32:5c:e3:13:c0:ef:47:16:bf:
         28:d0:8d:6f:6b:48:0e:e9:12:92:11:c8:60:44:0b:13:ab:bb:
         e0:84:ec:a2:5e:06:3d:f5:b0:90:04:8c:be:d1:5a:d0:4d:af:
         7e:65:7a:7e:d7:e0:93:fb:52:25:17:10:5b:0f:bb:a3:1f:5a:
         6b:e7:a9:cd:e9:45:45:92:1b:42:21:9e:20:aa:e5:de:29:50:
         b1:07:97:7a:34:9a:2b:09:4d:97:76:5a:ee:41:0b:93:65:bf:
         fe:96:cb:0a:4a:46:ce:20:aa:3e:6d:eb:c8:2a:05:90:85:13:
         a2:af:64:aa:4d:17:a3:bc:3f:9d:dd:e8:ab:aa:51:7f:9e:63:
         df:b0:8b:e0:66:64:9e:ef:0e:65:e8:4f:38:86:c8:60:19:57:
         a7:a6:70:4c:09:cb:23:37:3d:0b:75:91:51:87:dc:6a:38:15:
         6d:b3:ab:54:d4:81:72:2f:33:be:4f:29:f3:27:e9:6b:a5:f4:
         c3:29:98:d3:0d:bb:53:e1:fa:1d:70:d5:7f:d2:16:2e:bd:ef:
         93:7f:40:8b:29:c0:10:48:2c:fd:76:77:6d:22:b7:32:95:9b:
         44:70:94:0e:83:0b:37:a6:ab:0d:5a:c9:13:c1:e6:63:2f:7b:
         26:b0:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:53 2026 by rpki-client