Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa
File:                     2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa (raw, json)
Hash identifier:          /NGaO6MowA9UsYK6RmgdYnGCN4zn2zTi6jLe3qk+mb4=
Subject key identifier:   DA:21:F4:BE:E8:78:3A:3E:94:F5:01:DE:25:70:F6:CE:1A:E4:13:91
Certificate issuer:       /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial:       019D6907EBD7F3BDC644B973A3ED2DD52F1D
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa
Signing time:             Tue 07 Apr 2026 17:40:19 +0000
ASPA not before:          Tue 07 Apr 2026 17:40:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201445
Providers:                AS: 8772
                          AS: 11967
                          AS: 29632
                          AS: 41051
                          AS: 199829
                          AS: 208753
                          AS: 209533
                          AS: 211358
                          AS: 212895
                          AS: 214757
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:69:07:eb:d7:f3:bd:c6:44:b9:73:a3:ed:2d:d5:2f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
        Validity
            Not Before: Apr  7 17:40:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da21f4bee8783a3e94f501de2570f6ce1ae41391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:65:ae:8b:b5:2f:bd:ae:a1:ae:1d:fd:15:
                    34:00:28:11:a1:40:5d:5a:7f:5d:11:9d:c7:17:a6:
                    0a:14:3e:34:c8:11:86:67:b2:61:0c:a3:c9:cc:d3:
                    68:ef:fb:f9:76:41:f0:b9:b2:b6:72:37:cb:3d:32:
                    3e:b6:57:a8:29:3e:7c:82:54:5a:21:e0:24:bc:74:
                    4b:3e:b6:3b:a9:47:87:06:c1:ec:ee:a6:20:9a:fe:
                    87:83:07:50:9b:82:e7:ee:21:7d:fe:a4:80:3b:da:
                    83:cb:e2:7e:5d:45:71:54:a4:f2:04:58:78:b8:59:
                    d0:e1:11:c0:1c:c0:46:d1:74:20:04:93:c1:d4:11:
                    65:2b:e8:e5:a9:74:c2:a9:28:82:8c:0d:2a:9d:ad:
                    15:26:18:19:83:4f:51:e3:17:56:2f:0b:bc:78:95:
                    76:66:65:b3:37:85:ee:c3:61:68:a1:1e:89:49:af:
                    f9:0e:b1:1a:95:fc:22:dd:9a:5b:20:b0:56:ec:a4:
                    da:99:7d:68:d8:df:95:72:9f:51:90:a1:e0:79:3a:
                    19:62:3b:33:ec:de:f3:af:b5:27:e6:31:f9:30:da:
                    d5:fe:47:e8:84:9e:36:15:24:d3:90:75:15:7c:15:
                    b9:22:98:57:5b:86:22:3f:b6:92:ce:6c:51:83:bd:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:F4:BE:E8:78:3A:3E:94:F5:01:DE:25:70:F6:CE:1A:E4:13:91
            X509v3 Authority Key Identifier:
                keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201445

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:cb:f1:16:5d:4a:25:fb:bb:6b:c7:db:eb:dd:c0:f7:a1:
         75:3e:ec:75:d5:f7:fe:e0:1f:aa:78:53:70:ec:d7:f5:3f:47:
         8f:34:36:07:b4:7a:f1:5b:d4:dc:07:4d:f8:e1:f4:6c:6a:97:
         c7:05:f7:48:ce:d3:b2:fe:6c:0e:ec:24:d2:0c:1f:81:f3:0f:
         97:1a:32:5e:36:ce:62:50:46:df:30:d1:cf:3a:be:f4:f8:b6:
         b7:4e:41:49:1f:a7:89:08:96:22:fa:d1:26:3c:b0:8d:db:e9:
         6c:0e:69:09:e3:c8:c8:a6:a0:74:da:29:ab:72:f6:26:84:42:
         8e:c6:0e:5d:77:04:d0:a9:5f:4c:e4:60:92:c0:cd:d2:d6:fb:
         46:89:f7:7f:72:3a:02:ec:63:83:61:c7:ee:a2:f0:e7:9e:91:
         75:60:71:3c:6e:79:2c:05:a1:00:34:75:24:4d:a0:87:a4:92:
         74:51:ba:6f:e0:b7:ed:62:90:1e:ea:fe:17:22:fb:ae:b4:4c:
         eb:a8:bd:e2:ef:17:ac:df:c7:8b:4b:69:8f:7c:c2:2f:af:2d:
         b3:9e:7c:a0:0e:6a:26:eb:23:86:ab:bb:41:1d:5d:f0:e4:15:
         3c:ea:87:1a:22:26:fa:63:15:61:3b:bd:b9:f3:74:54:5f:47:
         01:33:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:24 2026 by rpki-client