Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LT5U7UOPqMR9dxspYlni6B2_-ok.asa
File:                     LT5U7UOPqMR9dxspYlni6B2_-ok.asa (raw, json)
Hash identifier:          4R46tr0UVWf5j/XthdbsjaI9PbEJ5C8W2vS24mxosWQ=
Subject key identifier:   2D:3E:54:ED:43:8F:A8:C4:7D:77:1B:29:62:59:E2:E8:1D:BF:FA:89
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       01A0238844034321278FC9EAA6A3DE39C75A
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LT5U7UOPqMR9dxspYlni6B2_-ok.asa
Signing time:             Fri 21 Aug 2026 08:55:27 +0000
ASPA not before:          Fri 21 Aug 2026 08:55:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207217
Providers:                AS: 42739
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:88:44:03:43:21:27:8f:c9:ea:a6:a3:de:39:c7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Aug 21 08:55:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d3e54ed438fa8c47d771b296259e2e81dbffa89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:0a:38:41:a0:ee:72:98:e5:e0:4c:11:e5:
                    3d:b7:57:f6:b6:9e:bb:ff:0a:20:a3:e6:61:ca:2a:
                    75:9c:08:80:b1:1c:ec:92:5f:90:f7:03:c4:35:a1:
                    2e:e4:25:f8:44:69:34:cb:d7:6a:bf:5e:f5:e2:54:
                    04:64:16:b4:9b:f9:ef:c7:c7:6c:54:ab:b9:a6:57:
                    a5:8d:a6:8b:ff:b2:55:9e:a2:5b:eb:38:28:c5:fc:
                    62:5f:34:c1:91:14:ba:a9:61:c4:02:a8:f6:a5:45:
                    3c:80:3c:9e:b3:7c:5f:6e:02:c9:f4:fb:1a:eb:c8:
                    d1:49:9e:a6:b2:99:72:cb:85:f2:8d:61:31:9d:72:
                    07:f2:c8:c8:e6:4a:21:c6:d7:61:76:b2:fa:8f:36:
                    96:44:fd:13:ec:42:81:ed:86:cc:a2:98:1a:31:24:
                    4b:2b:b0:89:65:53:a7:d3:4e:47:0b:3b:16:94:23:
                    2d:fc:a2:ea:03:74:73:20:2d:e6:b0:4f:40:fe:f7:
                    fa:03:7d:49:17:4d:92:50:ba:a5:d7:ab:92:a6:01:
                    ce:d2:76:ed:66:79:b2:10:08:19:5d:2f:2f:1e:8e:
                    6c:c1:95:13:fb:5e:ff:da:2c:b1:bb:e0:21:1c:29:
                    e4:dc:c4:59:0c:61:12:df:53:93:d7:fa:18:bc:f3:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3E:54:ED:43:8F:A8:C4:7D:77:1B:29:62:59:E2:E8:1D:BF:FA:89
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LT5U7UOPqMR9dxspYlni6B2_-ok.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207217

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:fe:d0:cd:18:33:8d:8b:48:b2:eb:63:b2:39:0b:c6:aa:
         cd:76:1c:df:3e:aa:2d:9b:0e:a0:b8:74:1e:53:7a:2d:6f:6d:
         00:9f:67:42:77:d4:c9:45:f5:cb:2b:b2:21:92:89:96:c9:93:
         be:c1:2f:be:fe:76:f3:e5:d7:d2:de:06:ac:12:d7:fe:0f:18:
         85:fc:fb:14:81:26:39:9b:99:ba:c4:ac:53:44:46:90:89:20:
         fd:4f:e6:03:da:7a:30:30:af:63:74:64:27:41:9b:aa:ea:f5:
         db:59:e6:50:36:1b:82:3d:14:cb:3e:21:dc:cf:8a:54:db:f5:
         7b:e1:19:f2:1b:ba:bc:12:54:19:d5:f0:93:4e:ea:a5:c5:99:
         e0:57:fc:fe:96:e6:80:49:12:75:33:13:c2:88:f7:e1:88:81:
         f3:df:44:a3:5f:9c:35:c1:fd:b5:c2:31:3f:14:4d:1b:a2:b4:
         dc:95:b6:0e:f8:7c:58:0c:9b:2e:f9:bf:1a:88:aa:f4:69:f7:
         a7:db:ce:18:ad:6e:4a:b2:06:4e:00:63:40:e9:2c:38:8c:f0:
         a2:46:f2:a6:6a:42:1d:b8:26:77:32:8a:ac:ac:59:8b:4f:d6:
         aa:05:99:76:69:69:e2:50:d9:64:3b:b2:48:83:af:b1:c6:c1:
         5a:97:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:12 2026 by rpki-client