Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/uwkS6pPoFd7q72FGsBj7Azj_-Cg.asa
File:                     uwkS6pPoFd7q72FGsBj7Azj_-Cg.asa (raw, json)
Hash identifier:          MNwZHF3bKVbSUvqwOgMk9Rxxl/g98lagbf3ifjpExY4=
Subject key identifier:   BB:09:12:EA:93:E8:15:DE:EA:EF:61:46:B0:18:FB:03:38:FF:F8:28
Certificate issuer:       /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Certificate serial:       01A101B5BF67B37DA38BBDE712B94250D879
Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/uwkS6pPoFd7q72FGsBj7Azj_-Cg.asa
Signing time:             Sat 03 Oct 2026 12:20:50 +0000
ASPA not before:          Sat 03 Oct 2026 12:20:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39753
Providers:                AS: 8772
                          AS: 8849
                          AS: 29632
                          AS: 35661
                          AS: 38074
                          AS: 53356
                          AS: 201398
                          AS: 205941
                          AS: 206628
                          AS: 214205
                          AS: 215685
                          AS: 218569
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:b5:bf:67:b3:7d:a3:8b:bd:e7:12:b9:42:50:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
        Validity
            Not Before: Oct  3 12:20:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb0912ea93e815deeaef6146b018fb0338fff828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:d8:1e:ef:12:91:5a:9c:2d:20:e2:95:86:
                    d5:b6:6c:17:e5:77:6d:24:2d:6d:16:fc:bf:54:d4:
                    5b:9e:f9:7c:ac:ae:f2:dd:97:90:42:72:98:88:77:
                    ae:13:0b:cb:92:9a:e0:e1:a0:2a:a9:20:73:56:5d:
                    d6:f0:87:e0:0b:cc:e8:11:cb:6a:26:ef:90:5f:3c:
                    d1:b6:71:f8:ff:71:9b:64:c7:39:78:fa:46:ea:50:
                    d6:b9:3c:c0:38:e8:f1:7d:85:9f:bf:e1:ca:e3:b8:
                    b2:d7:de:f8:3a:a3:12:26:b9:b7:44:6e:6e:91:d0:
                    0e:4c:95:ee:15:60:c5:a2:0c:00:52:2c:83:72:f4:
                    27:68:3a:b6:f8:db:61:c7:53:c0:a3:13:10:e4:58:
                    f5:98:b6:cf:eb:92:a6:45:a8:b4:48:4d:c5:d9:7a:
                    ac:00:27:09:ab:9d:32:c5:82:44:e5:37:00:a5:3e:
                    59:68:21:cc:0e:fe:ea:61:db:b9:5b:d7:17:de:97:
                    01:0d:b9:33:92:29:7d:8f:cb:50:32:95:7e:05:ec:
                    12:23:f2:4e:89:59:e8:59:e8:f6:b3:1c:84:90:23:
                    fa:51:a5:72:1f:76:79:d2:be:d7:ee:35:5e:95:5f:
                    33:0f:30:6d:2c:cf:51:0e:69:8d:df:66:8b:0c:df:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:12:EA:93:E8:15:DE:EA:EF:61:46:B0:18:FB:03:38:FF:F8:28
            X509v3 Authority Key Identifier:
                keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/uwkS6pPoFd7q72FGsBj7Azj_-Cg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39753

    Signature Algorithm: sha256WithRSAEncryption
         32:92:12:62:5d:2a:c2:e0:5b:06:70:70:ce:0c:4b:42:f6:58:
         86:49:b3:d4:f9:a5:3d:2b:83:92:8e:5a:97:31:d3:74:2e:8d:
         8c:c1:f3:c3:db:f8:13:a0:81:0b:41:03:d1:df:bb:2d:5d:a1:
         cd:d7:36:46:67:a5:e9:aa:50:fb:33:0f:9d:90:65:de:52:87:
         8b:f1:a1:dc:8c:97:c8:8b:e7:79:c5:ed:c7:2a:2c:05:66:98:
         a5:86:9f:06:26:d7:fa:f9:1e:ad:46:e0:a2:4f:61:8e:10:48:
         c3:bd:36:4b:c7:39:8d:d1:7f:51:12:80:91:32:2b:2c:e3:8e:
         6c:22:75:95:0b:95:ff:71:15:23:7d:3d:e6:82:e3:cc:92:d0:
         76:f3:2d:d1:57:84:dd:75:cd:fc:0f:39:0d:87:17:fa:47:96:
         21:49:c8:5f:9f:56:0c:72:f0:54:b0:fe:a8:b4:d8:00:f8:d9:
         4e:37:e8:1b:5d:a2:90:10:64:02:7b:27:86:3a:fe:11:be:e5:
         ac:44:98:a9:a5:59:a3:97:09:7e:70:d0:1b:42:78:c6:9d:48:
         6b:40:7d:1f:92:5f:ec:22:f1:8d:09:c3:1b:b5:fc:68:7c:e6:
         82:19:02:95:d8:28:96:96:f0:b7:67:e5:d2:2f:d3:1c:6d:c0:
         b1:26:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:29 2026 by rpki-client