Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/duPR63kqpScZ8MTOguIaKUgqa0I.asa
File:                     duPR63kqpScZ8MTOguIaKUgqa0I.asa (raw, json)
Hash identifier:          bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=
Subject key identifier:   76:E3:D1:EB:79:2A:A5:27:19:F0:C4:CE:82:E2:1A:29:48:2A:6B:42
Certificate issuer:       /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial:       019D4E786334A4985917E90A789EEA119EA8
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/duPR63kqpScZ8MTOguIaKUgqa0I.asa
Signing time:             Thu 02 Apr 2026 13:53:25 +0000
ASPA not before:          Thu 02 Apr 2026 13:53:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199714
Providers:                AS: 62206
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4e:78:63:34:a4:98:59:17:e9:0a:78:9e:ea:11:9e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
        Validity
            Not Before: Apr  2 13:53:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76e3d1eb792aa52719f0c4ce82e21a29482a6b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:2d:ee:9e:2e:b5:74:4b:6d:02:11:47:f2:
                    cc:40:a1:96:c1:01:48:a0:18:cf:18:76:f0:f1:8f:
                    2d:ee:e7:78:4a:15:e6:92:41:ad:6e:25:ce:40:81:
                    28:cb:5f:15:cb:03:97:f2:41:d3:e6:6f:e9:f1:93:
                    66:91:9c:d7:e4:5a:98:b8:43:c7:15:f6:dc:23:c6:
                    53:96:54:c6:f4:03:f2:e1:c1:24:a1:df:b1:fb:08:
                    07:98:e2:a8:cd:a4:f3:33:ec:00:b0:fd:22:01:a7:
                    21:a4:f4:6e:ee:e9:b9:cd:75:cc:17:26:5e:28:d7:
                    09:5b:6a:b7:c1:f8:46:42:83:2c:88:8a:ee:8c:40:
                    f8:ef:24:14:e2:7e:1b:56:9d:9e:bd:25:33:de:c6:
                    bc:49:f1:7c:55:e4:fe:f8:69:68:7e:ef:47:ac:42:
                    e4:8c:30:a9:e9:5c:4a:e4:31:55:fc:fb:93:4c:3e:
                    c3:2f:36:df:dd:08:b7:67:be:c8:5c:a8:7c:61:49:
                    dc:2a:51:88:63:2e:67:51:f2:09:60:9c:3f:9a:00:
                    17:9d:92:5f:d7:34:d3:b0:e5:db:57:da:18:a6:99:
                    af:bb:71:bd:ba:8a:0c:1d:37:fd:ef:8a:2f:b6:5f:
                    2c:03:ca:1a:18:c5:ba:28:bb:a3:b7:60:39:d2:ac:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:D1:EB:79:2A:A5:27:19:F0:C4:CE:82:E2:1A:29:48:2A:6B:42
            X509v3 Authority Key Identifier:
                keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/duPR63kqpScZ8MTOguIaKUgqa0I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199714

    Signature Algorithm: sha256WithRSAEncryption
         63:30:a9:75:bb:cf:45:14:0a:ee:fa:78:1c:9f:75:6a:de:59:
         e1:2c:bb:d2:21:9b:0d:c2:33:56:d6:0e:b6:27:4d:82:a3:e6:
         a2:7f:91:5c:c4:8c:dd:6e:b1:ba:5a:1c:4c:53:6c:ee:0d:ed:
         7a:10:95:8f:80:27:fc:46:69:96:51:dd:7a:aa:28:b2:66:d9:
         f6:ce:04:b0:f0:09:94:28:7d:1b:5f:f0:9e:3d:51:e9:6e:54:
         0d:fe:b4:f4:27:d4:fc:f8:cc:6d:eb:db:f8:05:ea:04:4e:c6:
         12:99:9c:78:d9:2e:45:1e:15:57:28:e2:4d:41:c4:17:2e:37:
         f5:21:dc:d2:ff:e3:da:66:4f:44:b5:fe:76:28:8b:3f:af:cc:
         ca:37:5b:fc:55:f3:1d:5e:44:52:f0:af:ae:a3:39:70:a2:64:
         82:dd:c1:0c:20:fb:18:5f:f5:98:ca:dd:f7:ee:64:f4:e8:25:
         d1:15:91:d9:67:97:c4:fc:04:ce:a9:6c:ea:b0:98:ef:7a:d7:
         c5:c4:59:35:1b:0f:cc:79:d0:71:85:de:0d:7d:38:72:0c:fc:
         55:11:8b:c6:fe:e9:fe:93:4d:84:25:7a:8e:18:3e:1c:80:8a:
         3b:15:41:88:3c:ee:52:7a:91:88:83:b3:40:95:09:d2:0f:31:
         0d:52:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:31 2026 by rpki-client