Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/X0jUAB4rZIbvLvSG1Zue9LFNYkE.asa
File:                     X0jUAB4rZIbvLvSG1Zue9LFNYkE.asa (raw, json)
Hash identifier:          y8wglmB6yZ2r562Z6/bhoRtTKJEX+2K9JKbgfLKo6xQ=
Subject key identifier:   5F:48:D4:00:1E:2B:64:86:EF:2E:F4:86:D5:9B:9E:F4:B1:4D:62:41
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       019E69864E97B1B0BC4B6FA3C3D9A6F72E95
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/X0jUAB4rZIbvLvSG1Zue9LFNYkE.asa
Signing time:             Wed 27 May 2026 13:01:10 +0000
ASPA not before:          Wed 27 May 2026 13:01:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210258
Providers:                AS: 174
                          AS: 6461
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:69:86:4e:97:b1:b0:bc:4b:6f:a3:c3:d9:a6:f7:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: May 27 13:01:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f48d4001e2b6486ef2ef486d59b9ef4b14d6241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:90:05:86:5b:21:ca:3f:22:68:ca:5d:6d:
                    33:b6:37:8b:72:9f:0b:e7:04:8f:85:33:0c:d6:9b:
                    37:b2:41:45:90:7a:a2:fa:e5:84:fb:45:d2:97:b1:
                    bf:8d:e3:1e:88:a1:3d:7e:b2:82:42:3b:27:aa:89:
                    6a:42:88:13:02:bc:52:5c:03:28:59:bd:cd:64:32:
                    17:67:7a:f9:37:fe:e5:06:34:82:89:54:88:5d:8e:
                    8a:4b:97:4b:55:3f:47:08:f1:da:ca:47:93:bf:1d:
                    0f:5f:fe:ba:42:44:58:7e:89:b9:02:17:d5:8f:b4:
                    45:86:dc:9b:81:88:ed:4b:12:e5:70:58:10:53:69:
                    3f:4e:2b:7b:31:8a:44:50:36:ce:51:9b:a1:99:67:
                    4c:2b:8f:24:03:ea:9f:4b:2b:6d:8c:c2:52:f0:9e:
                    87:51:83:ab:7a:e3:30:50:06:88:eb:7d:d3:b1:4f:
                    2f:d4:dc:e9:80:8c:6c:dc:54:d6:93:02:15:d6:b0:
                    ee:a0:92:72:63:a3:dd:cb:38:08:d8:8c:ab:94:77:
                    e9:f1:62:38:4c:24:7d:63:d0:5a:1e:b0:35:fd:fc:
                    44:bf:df:90:21:c7:a3:0f:ca:9a:72:b9:b8:9d:f9:
                    3b:55:52:36:a7:82:db:2c:80:b4:19:c5:04:c7:bc:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:D4:00:1E:2B:64:86:EF:2E:F4:86:D5:9B:9E:F4:B1:4D:62:41
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/X0jUAB4rZIbvLvSG1Zue9LFNYkE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210258

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:0e:3a:4a:aa:b9:8d:5f:45:e8:e7:29:af:ee:28:94:af:
         d0:69:df:9e:77:0f:c4:0c:fd:17:7e:ea:48:94:cd:c6:cc:a0:
         cc:7f:9c:99:0f:bd:bd:63:e8:e9:3f:f2:26:36:11:4a:73:bc:
         fe:96:96:00:a6:65:d0:38:98:f9:a3:08:e8:2d:c3:dc:9d:9e:
         0a:eb:93:2d:40:f1:56:11:13:7e:32:e2:89:fc:99:b5:a2:3a:
         0a:8e:8e:2e:83:ba:ff:61:d8:01:a0:67:28:81:b7:60:e2:07:
         aa:43:71:bc:89:b6:2f:da:ef:f5:6f:dd:4b:cf:91:70:b5:a1:
         5e:6a:6b:ce:9f:45:a9:30:e5:e7:72:e9:42:43:16:72:97:06:
         e3:85:83:8e:ec:72:15:e4:d1:70:24:5f:89:8a:e4:49:81:4a:
         a0:43:34:cf:0d:b4:5a:e9:d7:4a:e3:57:3d:71:4b:7b:ee:03:
         40:aa:c9:83:6f:ef:26:d4:08:15:44:97:3f:12:51:dd:01:30:
         7d:40:99:85:04:f3:71:bc:2a:c0:78:aa:1c:8a:4a:b1:9f:31:
         27:2a:cb:a5:69:c4:64:aa:62:d4:ad:c8:f3:98:de:b3:e9:84:
         a5:40:af:ab:bb:3f:84:a8:31:35:e2:46:af:b0:b5:91:27:a4:
         0d:6f:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:31 2026 by rpki-client