Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/eLtqqzfmHaENjrYjDWaZNiVaiNM.asa
File:                     eLtqqzfmHaENjrYjDWaZNiVaiNM.asa (raw, json)
Hash identifier:          3qdH7YILG+mohvpaVfJujhp0nSwMuCtR0l4DOroE8fE=
Subject key identifier:   78:BB:6A:AB:37:E6:1D:A1:0D:8E:B6:23:0D:66:99:36:25:5A:88:D3
Certificate issuer:       /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial:       019D6C9160CC5ECBEE79D72CF19C66C54B1A
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/eLtqqzfmHaENjrYjDWaZNiVaiNM.asa
Signing time:             Wed 08 Apr 2026 10:09:19 +0000
ASPA not before:          Wed 08 Apr 2026 10:09:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3252
Providers:                AS: 174
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6c:91:60:cc:5e:cb:ee:79:d7:2c:f1:9c:66:c5:4b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
        Validity
            Not Before: Apr  8 10:09:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78bb6aab37e61da10d8eb6230d669936255a88d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:30:f9:98:e7:06:f9:b8:6b:2b:0f:cf:f1:
                    0f:b0:f6:78:7a:a7:6b:5a:23:12:e7:2f:83:42:6e:
                    a6:0e:0f:45:a5:c5:8b:a6:76:29:0f:3f:60:7b:2b:
                    7f:85:21:24:ad:08:0e:b9:44:69:8a:d0:5b:70:32:
                    25:6d:0c:a5:f9:17:be:d1:c9:6b:d9:42:49:8a:7c:
                    35:9d:4a:b2:38:9e:83:f8:43:46:6a:51:7b:d8:e4:
                    39:02:64:15:5e:26:4c:bd:6c:a4:3b:8b:dd:00:25:
                    a1:57:11:91:17:a3:f7:6a:e3:ae:cf:96:5a:b1:ac:
                    95:24:07:bd:50:83:84:a3:b7:74:99:53:b9:d8:03:
                    39:c9:24:e6:80:35:80:38:89:f8:70:bd:fa:23:13:
                    80:ea:ce:80:32:08:08:dc:ee:fe:f1:ca:94:6b:10:
                    7a:9c:03:f5:07:21:79:47:30:75:db:da:b7:3c:d6:
                    22:4d:ea:3d:fc:b3:b5:6a:b1:46:8e:ba:82:98:43:
                    27:40:3c:c9:5e:8d:50:eb:ca:b5:5d:81:c3:0c:87:
                    fd:bd:89:a5:04:a3:d5:44:4b:93:af:8d:87:b9:ba:
                    d3:0c:e1:59:65:d8:86:56:1d:75:58:b7:3c:92:07:
                    4c:b7:7b:f6:59:70:72:83:6b:ac:02:a8:bc:24:37:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:6A:AB:37:E6:1D:A1:0D:8E:B6:23:0D:66:99:36:25:5A:88:D3
            X509v3 Authority Key Identifier:
                keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/eLtqqzfmHaENjrYjDWaZNiVaiNM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3252

    Signature Algorithm: sha256WithRSAEncryption
         66:27:4f:55:d8:89:b3:af:72:16:ca:02:46:c0:bb:22:5b:80:
         7f:cd:3a:59:47:6e:79:0b:d4:88:ef:93:04:6c:79:d6:f7:6e:
         a0:42:79:97:45:8f:6f:31:df:78:1c:31:20:57:b4:27:11:94:
         5d:d8:7e:af:40:78:49:9c:d8:35:31:fb:cd:c6:21:6a:a7:55:
         1e:83:ee:ac:b9:c5:ad:2d:60:0f:b2:be:44:a0:1d:c5:85:99:
         82:a4:1c:6c:8b:c9:7d:e3:92:a7:ef:a6:08:f7:93:a4:7d:fc:
         da:8c:0b:83:7d:26:78:b3:96:b5:ee:38:68:40:18:e0:76:69:
         49:a3:1f:45:51:3d:6d:7d:a2:65:57:11:24:9e:d5:ba:5c:2e:
         a2:ae:30:c5:c3:25:2a:3a:35:44:c9:03:3b:f3:63:18:24:5c:
         21:fc:4f:b0:0d:bc:98:e7:1b:37:67:2d:89:e3:0f:8b:a4:b8:
         a6:f2:67:c7:ba:df:18:57:01:06:d0:59:8b:48:21:9e:96:d3:
         95:59:6f:a1:10:c9:28:cc:57:9b:28:e2:41:e1:51:38:00:4f:
         49:19:fa:0a:50:3d:68:9b:df:16:02:30:53:dd:2c:b3:a1:3c:
         39:a6:16:5e:76:da:15:78:30:f6:b1:2e:f0:50:ba:a8:83:17:
         98:6b:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:28:31 2026 by rpki-client