Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/ReF7sbHY1B07QZVzgRIRapYeTB8.asa
File:                     ReF7sbHY1B07QZVzgRIRapYeTB8.asa (raw, json)
Hash identifier:          CQtda0ci+sDMyX7f9klbApj5ykJisXrQDZEktVCqEUI=
Subject key identifier:   45:E1:7B:B1:B1:D8:D4:1D:3B:41:95:73:81:12:11:6A:96:1E:4C:1F
Certificate issuer:       /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial:       01A0A7FF648E720DD9FB0DB5BF494A70EAA2
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/ReF7sbHY1B07QZVzgRIRapYeTB8.asa
Signing time:             Wed 16 Sep 2026 02:15:27 +0000
ASPA not before:          Wed 16 Sep 2026 02:15:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201423
Providers:                AS: 20473
                          AS: 41051
                          AS: 47272
                          AS: 52025
                          AS: 209533
                          AS: 209735
                          AS: 212895
                          AS: 218822
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a7:ff:64:8e:72:0d:d9:fb:0d:b5:bf:49:4a:70:ea:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
        Validity
            Not Before: Sep 16 02:15:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45e17bb1b1d8d41d3b4195738112116a961e4c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:50:d1:d4:ed:cd:83:96:76:58:d8:07:22:
                    a2:00:d9:6f:12:49:72:a5:25:80:8d:4a:46:b1:df:
                    77:56:08:5b:24:dc:d3:6a:37:1e:67:1b:93:d3:ec:
                    6c:4f:36:04:ec:00:73:43:0a:80:c9:53:34:b5:60:
                    4e:cb:0c:22:ec:8d:fd:1a:6b:50:b5:61:7a:c5:a9:
                    b9:d4:2e:90:14:76:4c:fe:4a:83:9a:af:3c:d1:87:
                    8b:6d:5b:15:e0:a4:cf:36:2b:14:bf:88:75:4d:d2:
                    24:4f:da:55:87:b1:74:fe:ad:56:b4:c2:d9:43:26:
                    85:5b:cd:a0:c4:03:0b:db:97:02:73:14:a5:6b:a1:
                    07:78:e3:04:65:37:f4:b3:de:3b:e0:63:62:19:44:
                    bc:50:12:de:52:70:e3:74:da:3d:a1:f5:74:28:a5:
                    77:94:4b:2a:3a:8d:8b:e7:4d:1c:32:bb:21:ef:38:
                    a4:23:ac:2e:3d:09:50:63:34:29:5c:2e:1e:be:3d:
                    bd:d5:4e:b4:98:e0:fc:26:9e:cd:84:f4:89:81:96:
                    2c:2e:d6:0f:bf:ab:d2:d2:0c:7b:f6:1b:59:9c:d6:
                    7d:73:6e:62:4d:9b:3e:19:33:12:25:e5:97:67:93:
                    f0:b2:30:11:cc:81:76:14:ae:4c:eb:68:48:ff:12:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:7B:B1:B1:D8:D4:1D:3B:41:95:73:81:12:11:6A:96:1E:4C:1F
            X509v3 Authority Key Identifier:
                keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/ReF7sbHY1B07QZVzgRIRapYeTB8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201423

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:33:e8:af:1a:58:70:79:2d:16:ae:b1:b6:e5:9b:a1:ea:
         9e:7f:7e:0a:72:11:0e:d6:b7:73:d5:bd:06:f8:dd:17:ae:87:
         85:32:55:d3:f8:5b:5a:3e:eb:77:a4:9f:e2:0f:87:17:93:3d:
         c1:06:b0:2b:6d:b6:3a:ae:cd:85:bb:3c:b1:6b:7e:35:d6:48:
         1b:b6:97:d1:46:7a:e1:61:fc:e4:3d:31:9c:41:d1:0d:58:0c:
         cb:af:35:cc:2d:52:ef:cb:47:13:f5:c6:49:8b:ab:e0:49:8f:
         54:ff:bd:ef:85:12:2a:c0:11:65:8f:23:ef:47:1b:80:05:80:
         4f:87:68:c4:f1:de:46:41:84:89:d0:61:72:23:18:e0:5a:1b:
         0f:7a:46:2b:d7:a7:2b:b8:35:95:8f:23:be:0a:88:80:22:c5:
         c3:7e:6f:4c:64:a5:3c:7e:85:b0:dc:50:6e:70:4e:5c:48:8b:
         31:67:1a:aa:ac:51:83:0b:e5:68:4b:54:93:ed:97:5f:b5:78:
         fa:28:e8:0e:93:53:64:30:67:25:f3:27:82:c4:6e:0f:de:52:
         81:c4:35:43:cb:02:3a:1b:b9:c5:80:78:43:57:74:25:d8:f9:
         d1:a4:01:d5:2e:01:36:71:d0:93:37:55:90:e1:e4:c0:a5:b8:
         b8:a0:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:10:01 2026 by rpki-client