Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/GV3rHMHaqZh85X7GW_djNwAYsOQ.asa
File:                     GV3rHMHaqZh85X7GW_djNwAYsOQ.asa (raw, json)
Hash identifier:          MrfqDCvqnvYb6uuxXgWmjLxPfmlym5eT0CjhOIOM+sw=
Subject key identifier:   19:5D:EB:1C:C1:DA:A9:98:7C:E5:7E:C6:5B:F7:63:37:00:18:B0:E4
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       019C8A1AA13BCA403B59B950CAD3A7A78CF5
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/GV3rHMHaqZh85X7GW_djNwAYsOQ.asa
Signing time:             Mon 23 Feb 2026 10:45:26 +0000
ASPA not before:          Mon 23 Feb 2026 10:45:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47200
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8a:1a:a1:3b:ca:40:3b:59:b9:50:ca:d3:a7:a7:8c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Feb 23 10:45:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=195deb1cc1daa9987ce57ec65bf763370018b0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:59:54:9e:30:78:e6:ad:d6:99:9d:36:d6:df:
                    68:1f:7b:7c:03:8d:48:66:59:e1:a2:04:f9:58:8c:
                    7a:ac:d6:23:12:05:c3:bd:8a:b1:b3:19:6a:39:56:
                    97:6f:60:7d:0c:fd:d8:e1:d0:40:d5:61:a0:e6:96:
                    cf:40:a6:e9:bd:64:8e:21:e6:18:da:c2:c7:5c:c5:
                    d5:bd:8a:71:1d:2a:eb:74:19:4b:0e:76:73:ac:03:
                    ba:0b:d2:9a:b9:29:b7:eb:d2:81:4e:be:2b:22:c0:
                    d3:9a:58:70:7f:81:f1:a5:7c:d1:a8:8f:1e:6a:96:
                    c1:b0:58:6d:67:6d:55:33:df:79:93:66:0a:25:24:
                    d7:62:b9:80:ee:4a:1c:0f:88:8d:bf:dc:59:c7:ee:
                    a0:aa:ce:bf:21:51:6a:1f:d6:94:72:b2:fd:bf:8d:
                    11:b0:84:66:d0:0a:42:5c:06:d1:10:c2:9a:d4:86:
                    12:5d:df:bb:74:7e:dc:45:22:bd:d2:f6:d2:77:b6:
                    1a:1a:c9:bb:a2:8a:72:3f:91:b1:74:87:4b:17:ee:
                    7e:98:8e:c2:63:16:ca:2b:be:ef:89:dc:88:ab:58:
                    aa:c5:22:18:54:43:86:c3:b1:e4:9d:21:b1:29:74:
                    68:8a:f2:d8:dc:11:0d:50:fa:02:c1:34:a6:d4:68:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:EB:1C:C1:DA:A9:98:7C:E5:7E:C6:5B:F7:63:37:00:18:B0:E4
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/GV3rHMHaqZh85X7GW_djNwAYsOQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47200

    Signature Algorithm: sha256WithRSAEncryption
         31:90:fd:a9:03:75:a5:3e:7e:6e:ef:08:1e:f5:b8:3c:f1:fc:
         eb:29:72:89:ab:91:bb:80:00:e5:eb:ed:f2:42:32:3d:fa:a7:
         e1:fe:42:d0:19:28:2e:bd:5e:51:fa:26:bc:08:13:6b:d8:9a:
         6c:9a:fc:0d:5e:03:36:c2:d0:c5:00:88:db:40:f1:71:2b:88:
         80:20:32:b1:9e:7f:97:86:93:63:d7:7a:03:f0:9c:ae:6c:cb:
         0d:92:87:20:54:34:bc:4c:fc:14:6c:fd:38:e5:ee:4a:f2:c1:
         8c:b3:5f:44:d2:ab:fa:ce:1c:b4:0d:78:08:bd:f8:28:1c:9c:
         96:5d:5c:25:60:4f:ba:cb:22:93:c0:a7:84:0c:eb:0c:40:f3:
         c5:c8:95:69:c3:aa:be:fd:20:6a:12:a7:02:0a:0b:02:00:b0:
         67:22:29:84:d4:21:02:79:a9:20:c9:c7:fa:a0:cf:1c:8d:d0:
         a3:0e:74:62:d9:ef:78:e3:b4:99:36:ae:1c:35:cc:b2:84:25:
         1f:56:61:da:2a:f7:00:87:e0:01:e3:47:88:d9:25:80:ec:14:
         00:a3:7d:ca:a8:9f:60:b7:58:f5:fa:fd:ff:bc:0f:bb:ff:5f:
         d2:99:26:22:14:bd:7b:da:00:b9:44:f0:c3:cb:47:25:cb:31:
         42:ff:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:15:39 2026 by rpki-client