Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/AhPH5Tgl0c0erZbQ41UBHqChXvM.asa
File:                     AhPH5Tgl0c0erZbQ41UBHqChXvM.asa (raw, json)
Hash identifier:          VLsiR2fO2EInnp5+SzZn2B8DlyrzWlf2oyjngstqi6E=
Subject key identifier:   02:13:C7:E5:38:25:D1:CD:1E:AD:96:D0:E3:55:01:1E:A0:A1:5E:F3
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019EADD13D10F316A87F106AB29C7D8FF830
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/AhPH5Tgl0c0erZbQ41UBHqChXvM.asa
Signing time:             Tue 09 Jun 2026 19:17:11 +0000
ASPA not before:          Tue 09 Jun 2026 19:17:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201178
Providers:                AS: 3223
                          AS: 4849
                          AS: 6939
                          AS: 9002
                          AS: 9121
                          AS: 15924
                          AS: 34984
                          AS: 43391
                          AS: 44901
                          AS: 204457
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ad:d1:3d:10:f3:16:a8:7f:10:6a:b2:9c:7d:8f:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Jun  9 19:17:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0213c7e53825d1cd1ead96d0e355011ea0a15ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:36:eb:42:16:26:e3:02:45:c1:4c:61:be:
                    c2:2f:78:d3:81:90:1f:cc:5e:af:dd:2f:1a:8f:90:
                    85:f5:a1:71:ce:dd:83:b8:0b:c5:92:6c:da:c0:fa:
                    cb:f1:61:84:e1:53:db:63:88:76:48:ce:bc:a3:2a:
                    cf:0d:06:cb:39:bc:99:31:97:0d:d2:44:1d:06:c0:
                    6f:2b:8e:07:7c:9b:4c:2f:5e:89:71:13:d5:47:d6:
                    c4:dc:fe:b2:c4:fd:0f:3f:2e:f0:ef:d1:37:3e:38:
                    28:36:95:09:fc:00:b5:db:8f:1d:d2:a2:35:27:ad:
                    dc:39:8f:cc:05:af:21:64:8b:fc:e8:ae:75:c3:8d:
                    2e:9e:cd:55:f2:75:71:a9:e0:40:56:2b:80:db:98:
                    a2:b5:cd:0b:af:32:ec:a8:5b:e6:1a:5f:08:3c:e8:
                    cb:b2:25:23:52:74:9c:1f:f4:38:6f:50:98:5a:af:
                    21:a3:d3:86:a8:47:ed:6f:1b:cd:30:6a:47:18:e1:
                    71:f0:0a:5e:c0:7a:1d:4a:06:03:eb:1a:f2:46:de:
                    8a:03:69:28:9b:c8:78:91:c6:57:ff:41:6f:83:28:
                    8e:77:01:5e:57:f7:bb:a1:0c:b1:6d:38:f0:51:1a:
                    04:4e:53:a3:5a:82:a2:28:99:ea:5a:43:d0:af:bc:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:13:C7:E5:38:25:D1:CD:1E:AD:96:D0:E3:55:01:1E:A0:A1:5E:F3
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/AhPH5Tgl0c0erZbQ41UBHqChXvM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201178

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:8e:a3:cd:86:0e:d8:78:2d:36:89:eb:7c:6d:f3:ee:83:
         3b:38:5d:04:a2:2e:b8:db:28:51:fe:53:bc:2b:78:81:88:af:
         c7:00:de:8f:33:74:6d:ed:ab:39:6f:b1:a1:bf:c2:bc:ad:19:
         9f:24:ae:9a:60:6f:11:69:f4:43:25:ef:55:70:da:ae:18:6d:
         3c:c6:32:72:f5:32:25:25:ae:fb:41:7f:ba:6f:77:9a:f2:15:
         a3:f1:2d:84:38:98:c3:a7:47:0a:c2:05:c3:58:f9:ba:e6:74:
         70:cb:49:54:ce:88:80:a3:33:48:23:ec:b9:ad:d3:d7:ec:f5:
         e2:ad:6f:35:85:d3:f2:dc:cc:de:4b:b0:cd:13:20:0c:2b:ce:
         a4:09:5d:d4:a9:0b:10:fa:76:4f:e9:00:4d:6a:e6:d9:eb:2d:
         78:0e:21:7e:20:76:fa:78:a3:d8:2b:67:0d:10:e4:21:07:dd:
         ef:94:e3:fa:ac:02:99:2d:8b:fa:65:99:90:d0:22:c5:94:90:
         c8:a2:ad:51:5a:aa:25:32:df:1f:4b:f5:03:1b:f3:32:1b:d3:
         a5:30:f0:3c:b2:77:40:20:89:d9:6e:ea:08:cb:f9:47:a2:d1:
         f0:14:b5:ef:b7:d2:ff:f6:1a:77:65:33:3b:23:c8:5d:4a:4c:
         33:04:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:35 2026 by rpki-client