Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/JtxOMgCxIcJ8063ibiFRPahyjno.asa
File:                     JtxOMgCxIcJ8063ibiFRPahyjno.asa (raw, json)
Hash identifier:          +TvpXjZ0wFORbZZJKdEWxbp7qspbkU7cAvB5pkqzaHQ=
Subject key identifier:   26:DC:4E:32:00:B1:21:C2:7C:D3:AD:E2:6E:21:51:3D:A8:72:8E:7A
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019D8BCF8C7C47792DEBB057A819AF901D38
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/JtxOMgCxIcJ8063ibiFRPahyjno.asa
Signing time:             Tue 14 Apr 2026 11:45:28 +0000
ASPA not before:          Tue 14 Apr 2026 11:45:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204464
Providers:                AS: 11967
                          AS: 24381
                          AS: 34800
                          AS: 34927
                          AS: 41051
                          AS: 44393
                          AS: 49581
                          AS: 56755
                          AS: 58057
                          AS: 199746
                          AS: 205305
                          AS: 209874
                          AS: 212232
                          AS: 212895
                          AS: 213413
                          AS: 213449
                          AS: 214243
                          AS: 214420
                          AS: 214915
                          AS: 215569
                          AS: 215828
                          AS: 393577
                          AS: 400212
                          AS: 401753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8b:cf:8c:7c:47:79:2d:eb:b0:57:a8:19:af:90:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Apr 14 11:45:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26dc4e3200b121c27cd3ade26e21513da8728e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:82:ff:5a:7a:28:02:b0:09:de:41:d7:1a:
                    90:74:17:ed:b2:44:45:74:d5:b5:e6:9b:4a:8b:46:
                    ae:b9:e3:f7:75:c9:66:96:bc:89:b8:37:71:77:0c:
                    0a:33:85:2a:8b:78:f0:e0:22:74:34:43:11:ec:28:
                    d9:30:af:2e:91:1f:fb:40:60:1d:ec:65:ba:71:aa:
                    67:ba:31:03:9f:09:5b:c8:f1:46:c7:f2:25:28:a9:
                    14:99:30:64:6d:4f:76:14:36:34:64:5d:89:80:04:
                    f6:31:e8:65:78:bc:a0:2b:0f:61:2e:e3:c8:2f:56:
                    c5:f6:34:87:9c:5b:f7:d4:5e:21:51:f9:a6:94:d3:
                    ca:d3:54:d8:3f:f8:d1:95:10:ec:34:9a:e3:62:4f:
                    4f:8c:0a:e1:82:ff:b2:55:8f:12:5c:e6:85:e0:91:
                    2f:09:7b:77:ff:28:90:b2:f3:9b:b4:34:38:e2:8b:
                    44:4e:2b:a9:1d:a9:59:a4:ac:40:26:93:9e:1d:39:
                    6e:12:64:98:28:f1:e9:f1:7f:70:8c:93:cf:8a:c1:
                    10:27:49:46:c0:b0:5a:2e:02:be:1e:ef:23:24:88:
                    c1:b0:54:af:d8:8f:58:65:03:6f:9f:29:b1:31:4d:
                    fd:9a:36:49:41:51:73:54:a7:7a:72:76:aa:e2:11:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:4E:32:00:B1:21:C2:7C:D3:AD:E2:6E:21:51:3D:A8:72:8E:7A
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/JtxOMgCxIcJ8063ibiFRPahyjno.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         90:63:71:c1:81:be:31:7d:dc:2e:d6:13:48:d0:ba:a9:0d:2a:
         d7:8c:9b:0e:d9:d1:9e:be:37:98:40:80:a8:58:f1:3e:00:ec:
         69:fa:7a:f8:60:09:d3:45:cc:36:21:72:a6:e5:19:2e:59:57:
         3f:46:2c:f8:a3:dc:70:cd:aa:28:2c:ee:d6:5c:cf:86:d0:d9:
         3d:04:86:6f:b1:7b:c6:40:69:ba:5b:50:d7:06:52:82:27:37:
         31:9b:94:39:84:8b:6f:ed:a0:4f:55:76:57:a4:f6:1f:70:62:
         77:31:76:12:e8:d9:4f:93:ca:06:ba:72:df:b6:4a:43:bf:4c:
         3f:02:e6:cf:18:1f:07:68:05:b4:f0:31:3b:58:8d:52:2d:64:
         3b:c6:ef:10:94:49:86:67:ad:5a:dc:c4:3d:0e:18:5b:6a:a3:
         1c:d2:ef:c9:1a:01:09:23:27:cd:ff:86:2e:ab:84:c3:33:5b:
         9f:6c:bb:aa:e7:74:14:cb:12:2d:02:c8:22:a4:16:d0:03:ff:
         f8:07:9f:a8:b5:88:2f:70:7a:39:52:be:5d:d5:80:33:7e:9f:
         fd:57:b2:26:ce:42:d7:e4:ad:ca:38:63:2f:e5:5b:72:f0:82:
         fd:d6:f7:67:44:0e:7b:5e:16:8f:82:96:f3:89:87:b6:17:2f:
         4c:c5:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:46 2026 by rpki-client