Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/QaPIopLuEp6Kuf7J9YNJD8hjYqg.asa
File:                     QaPIopLuEp6Kuf7J9YNJD8hjYqg.asa (raw, json)
Hash identifier:          rL3mEvSiXaribwijI5L6bEj56L+yV0EhSxzmATCigVM=
Subject key identifier:   41:A3:C8:A2:92:EE:12:9E:8A:B9:FE:C9:F5:83:49:0F:C8:63:62:A8
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019D8BF9527572E9AC79111199DC8C204141
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/QaPIopLuEp6Kuf7J9YNJD8hjYqg.asa
Signing time:             Tue 14 Apr 2026 12:31:05 +0000
ASPA not before:          Tue 14 Apr 2026 12:31:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199746
Providers:                AS: 11967
                          AS: 204464
                          AS: 212895
                          AS: 213413
                          AS: 213449
                          AS: 213465
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8b:f9:52:75:72:e9:ac:79:11:11:99:dc:8c:20:41:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Apr 14 12:31:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41a3c8a292ee129e8ab9fec9f583490fc86362a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:72:a2:86:11:ee:55:4b:bc:27:5d:10:e6:
                    c8:f6:7a:69:ec:da:5f:95:57:cc:6e:94:07:52:72:
                    0e:8b:7b:46:01:e8:9e:00:22:08:dd:8c:0b:ea:47:
                    19:58:ee:a1:48:6e:52:d2:1a:df:85:d0:2d:29:d3:
                    94:78:da:6f:1c:cb:eb:96:d9:2c:c3:a6:0b:ac:75:
                    33:b5:78:fe:c5:43:9a:65:86:2d:a5:e5:fc:e7:3e:
                    a9:30:e8:d0:e1:d7:60:00:27:b1:1a:4b:ed:b3:ed:
                    ec:a4:72:cb:9a:85:7c:16:2a:da:38:3f:c5:b2:a7:
                    a8:6c:83:f7:21:23:3c:7a:7b:a4:3a:b4:01:13:e2:
                    eb:77:b1:13:2d:48:03:b3:bb:14:69:d6:ea:9d:9c:
                    57:3b:de:2e:18:d7:2f:58:e3:90:42:d1:36:41:80:
                    00:4f:bd:45:cd:eb:9e:85:80:60:2a:25:a5:30:22:
                    f0:fb:21:fb:63:a9:ef:0b:7c:7d:35:07:84:96:67:
                    2e:e5:58:3a:76:b6:3a:a5:d2:43:2f:66:3d:ce:2f:
                    40:4b:c9:7b:e6:d8:ef:6f:b4:18:6b:ea:89:49:85:
                    f5:4d:59:2d:87:2e:a4:0b:3d:d2:e7:a0:f0:21:22:
                    02:5c:48:47:c9:72:d5:82:1c:b8:31:f4:16:05:a3:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:C8:A2:92:EE:12:9E:8A:B9:FE:C9:F5:83:49:0F:C8:63:62:A8
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/QaPIopLuEp6Kuf7J9YNJD8hjYqg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199746

    Signature Algorithm: sha256WithRSAEncryption
         51:02:51:25:2f:03:0f:e0:4c:f1:18:74:17:33:82:12:e4:5e:
         e9:6d:24:3e:76:6a:b6:96:7a:0a:1d:07:8e:58:14:0b:e9:94:
         20:74:d4:25:fd:50:0e:e7:ef:4b:d3:b3:20:92:32:e6:8a:9b:
         47:83:6d:7f:dd:b1:24:97:c2:65:a8:4f:bf:06:96:59:a1:77:
         69:a9:d2:f4:0c:e6:10:86:d3:ac:6f:17:9f:70:2c:57:e4:7b:
         bf:8b:bd:3d:f8:60:97:d2:67:65:18:cb:28:d2:6b:dc:59:33:
         bf:c7:35:44:0d:a7:36:5a:9f:65:c2:3a:7a:3d:ff:de:12:90:
         86:51:f5:99:ab:bc:77:20:b8:e8:f8:e6:c2:88:33:a6:4e:56:
         8e:9a:b8:8f:c4:c7:14:c9:15:22:e1:53:34:f8:e9:3b:e3:a0:
         9d:19:19:ab:f5:6d:c2:c5:9a:ce:9c:ca:ce:93:1e:7d:7f:32:
         1c:42:a4:8b:44:d8:7e:3d:19:10:c3:93:cd:3d:65:15:8d:bb:
         c5:77:0e:f7:76:f1:40:9d:1a:29:46:f0:c3:af:3b:54:e8:0c:
         1d:55:b2:1b:05:fa:43:1b:09:62:04:38:21:b1:ae:f6:3b:28:
         2d:c9:53:57:61:a0:bb:c0:8c:cf:96:d5:4e:47:99:d5:98:10:
         4c:a0:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:42 2026 by rpki-client