Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/4cK2toKGStLvtVpJDp0UztrPgH0.asa
File:                     4cK2toKGStLvtVpJDp0UztrPgH0.asa (raw, json)
Hash identifier:          ZNY72R7qVZc/Zu94pUGocbYyKhf7trhy+TL1EY5kc7Y=
Subject key identifier:   E1:C2:B6:B6:82:86:4A:D2:EF:B5:5A:49:0E:9D:14:CE:DA:CF:80:7D
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019D2A40B75C9BEC0DBC36CFB3A3822BCB21
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/4cK2toKGStLvtVpJDp0UztrPgH0.asa
Signing time:             Thu 26 Mar 2026 13:06:17 +0000
ASPA not before:          Thu 26 Mar 2026 13:06:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34136
Providers:                AS: 1820
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:40:b7:5c:9b:ec:0d:bc:36:cf:b3:a3:82:2b:cb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Mar 26 13:06:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e1c2b6b682864ad2efb55a490e9d14cedacf807d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:d4:36:b3:f4:3b:a6:6a:ce:b8:e0:e1:42:
                    e1:51:33:6c:cf:ee:32:0c:47:90:3a:12:b2:b8:cf:
                    a3:01:9a:0f:23:cd:21:47:5d:2d:ee:0b:7c:4d:98:
                    5f:b6:01:1f:cc:0b:87:c0:40:6c:16:42:8f:7e:7a:
                    a6:06:a6:8d:67:d4:94:e0:e4:5e:84:c0:40:28:a4:
                    28:bd:8f:f2:8b:7e:76:dd:8c:74:3c:57:3a:5d:be:
                    81:a2:ce:da:21:c9:33:1b:00:9d:bd:bb:e5:62:0e:
                    2e:7c:32:f5:83:f6:0d:85:45:d6:c8:6a:de:10:c1:
                    92:f6:73:00:3d:ff:19:72:0c:0e:26:91:b6:6e:2c:
                    d9:e6:d2:6e:cd:ae:ce:de:46:e2:8e:0b:60:c4:b7:
                    be:72:f3:6d:c1:46:02:a6:64:e8:74:93:40:9b:93:
                    e5:fe:e1:82:c8:c5:32:7b:87:72:cd:51:00:7c:f9:
                    24:54:61:f0:ae:c3:f2:5c:a0:5a:8a:fc:88:23:88:
                    19:94:a8:6f:e7:1e:68:8f:33:9e:38:82:57:64:34:
                    94:b1:da:b9:c6:84:35:d7:b8:7f:28:45:cc:91:ba:
                    75:4b:a0:3e:7e:b0:d8:c3:69:cb:85:31:54:d4:67:
                    15:21:00:aa:44:b1:57:a3:5a:09:56:ef:2b:ea:c4:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C2:B6:B6:82:86:4A:D2:EF:B5:5A:49:0E:9D:14:CE:DA:CF:80:7D
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/4cK2toKGStLvtVpJDp0UztrPgH0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34136

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:9b:99:1a:00:04:df:47:f6:c5:5d:56:38:3c:20:b5:af:
         f7:ad:fe:59:bb:b8:79:05:7a:5b:c1:f6:03:c4:80:b9:16:01:
         a9:92:3f:72:00:0a:d9:af:51:00:3c:8b:2c:e7:68:79:15:3b:
         b4:9f:6e:ad:3a:fb:94:63:bf:60:d4:2f:37:bf:da:2b:b1:dc:
         4f:7b:de:bf:ee:e2:f5:93:66:9a:ae:69:72:98:9c:a3:bd:b4:
         c5:c3:32:4f:d5:61:e2:b7:c3:25:64:c2:c2:e0:6a:45:53:c5:
         a6:33:91:9b:15:5d:2d:af:d7:04:ff:24:e6:3c:85:76:73:5a:
         8c:5f:63:15:44:15:74:d9:56:36:be:12:15:a7:8f:a5:62:17:
         ee:a3:41:1d:53:6c:a2:2a:2a:64:1e:da:8a:59:9f:21:08:13:
         f2:31:83:e0:6d:c1:15:78:78:c9:65:5a:29:31:98:98:32:35:
         09:aa:c9:47:a5:86:ec:97:32:d8:33:48:95:b7:87:5b:66:6a:
         d1:a1:ac:be:de:9b:24:cf:72:f0:b7:30:4a:e1:5b:21:fa:e1:
         bd:1c:23:54:92:aa:42:04:91:c2:88:38:7a:ae:cf:53:0e:5d:
         8b:94:1a:2e:91:73:99:8d:f4:0d:eb:ab:2f:7e:06:2f:71:03:
         34:95:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:53 2026 by rpki-client