Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/gkTf7nQTsreRRFr_69F3-1CTYmo.asa
File:                     gkTf7nQTsreRRFr_69F3-1CTYmo.asa (raw, json)
Hash identifier:          6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=
Subject key identifier:   82:44:DF:EE:74:13:B2:B7:91:44:5A:FF:EB:D1:77:FB:50:93:62:6A
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       019E44EBAFFF72ED1935CF84BC0AFA1297CF
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/gkTf7nQTsreRRFr_69F3-1CTYmo.asa
Signing time:             Wed 20 May 2026 10:25:57 +0000
ASPA not before:          Wed 20 May 2026 10:25:57 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199656
Providers:                AS: 39351
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:44:eb:af:ff:72:ed:19:35:cf:84:bc:0a:fa:12:97:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: May 20 10:25:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8244dfee7413b2b791445affebd177fb5093626a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:e2:aa:68:5f:88:50:04:1c:1c:5a:94:fe:
                    f4:d9:ec:26:52:30:9b:b3:8c:7d:16:ee:34:33:4a:
                    ea:ae:ae:9e:f0:6b:b8:84:b9:0f:e1:81:24:ac:e2:
                    96:5c:a5:4f:f6:49:20:59:f8:9e:06:a4:11:0f:5a:
                    9c:7f:b2:96:cf:5e:eb:fd:b3:53:67:c6:e6:dc:71:
                    44:80:53:d4:c5:9f:42:8b:e0:fe:dd:08:45:c9:30:
                    71:fe:2a:cc:b0:55:d3:e9:e1:45:0b:5f:09:80:32:
                    0c:3d:02:d6:1a:be:44:7a:3f:1f:ab:d5:69:1d:bf:
                    79:16:0b:3d:29:31:22:3b:55:01:38:3e:7a:f7:93:
                    88:60:82:77:ce:a1:3c:62:96:23:be:7b:43:ae:71:
                    da:72:ab:28:c4:c2:75:d7:f0:0d:bb:15:c4:d9:18:
                    d4:60:f6:93:29:f0:6f:90:18:6b:17:49:3d:4d:66:
                    96:ea:87:1e:8f:6b:9a:26:8e:c8:9f:6b:84:c1:55:
                    3f:4d:13:ca:d6:50:45:5f:5a:27:41:68:c3:fc:c1:
                    62:e2:40:63:e0:b2:52:1c:97:64:b5:f7:6a:ef:6a:
                    b1:3e:a3:ca:20:d6:a1:d5:65:07:a7:ce:80:00:38:
                    d3:50:7f:31:93:3b:8a:78:7a:6a:16:aa:51:c5:a1:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:44:DF:EE:74:13:B2:B7:91:44:5A:FF:EB:D1:77:FB:50:93:62:6A
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/gkTf7nQTsreRRFr_69F3-1CTYmo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199656

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:2e:d0:ea:dd:87:d1:f3:14:19:04:1f:99:47:c3:6e:e8:
         55:c0:9f:b8:97:e2:44:bd:a4:23:03:62:da:37:58:ce:1d:22:
         b4:b5:43:13:22:4a:a8:7a:a7:fb:01:a5:b8:93:1a:e4:f6:dd:
         0b:5b:bd:b0:b7:b1:72:e1:f3:5c:be:85:bf:94:44:07:68:15:
         0e:e1:80:7f:e1:e3:f4:62:55:fd:78:c9:65:9f:62:d4:cd:4d:
         27:80:3b:9e:8b:f6:27:5f:e0:27:83:49:e8:69:48:c0:c9:4b:
         92:a9:8f:23:e1:22:fa:52:49:8d:99:0f:0b:e9:49:a0:c0:30:
         af:c2:c7:d9:9a:d7:30:f9:ad:8d:89:c0:d3:49:5f:b0:88:3d:
         ac:ca:b4:6c:50:7a:68:d5:ae:be:2d:75:47:51:7b:ef:aa:5e:
         4c:3e:6c:59:bc:b2:2f:c5:21:bd:00:b4:b8:8a:ef:f2:76:45:
         05:01:75:7d:85:58:c1:05:fb:d8:0a:a2:c7:e1:f6:bf:47:7a:
         64:7e:b1:c3:e4:2b:57:08:5d:79:8b:c9:27:e4:77:c9:22:8d:
         61:ba:ed:f7:03:8b:e6:4a:93:e9:ac:9e:3c:1d:4e:3a:28:88:
         8e:35:ff:7b:59:9c:58:97:77:00:2b:db:77:3f:8d:90:18:70:
         cd:aa:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:53 2026 by rpki-client