Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/7PC27OPKTmB0TCcSiVXYJK9WFIs.asa
File:                     7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (raw, json)
Hash identifier:          yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=
Subject key identifier:   EC:F0:B6:EC:E3:CA:4E:60:74:4C:27:12:89:55:D8:24:AF:56:14:8B
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       019E7D5118230926A28E018CF2BAAE572235
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/7PC27OPKTmB0TCcSiVXYJK9WFIs.asa
Signing time:             Sun 31 May 2026 09:15:26 +0000
ASPA not before:          Sun 31 May 2026 09:15:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215820
Providers:                AS: 34927
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:51:18:23:09:26:a2:8e:01:8c:f2:ba:ae:57:22:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: May 31 09:15:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ecf0b6ece3ca4e60744c27128955d824af56148b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:0f:23:a3:53:72:82:22:0e:fd:8b:6d:67:
                    da:4f:2e:83:c1:d1:55:b1:54:9d:50:9c:39:50:01:
                    01:c2:f3:8e:22:16:11:52:57:13:16:7c:c0:4e:93:
                    bb:f3:28:1e:4e:3f:a2:01:df:fb:78:46:e2:49:9f:
                    81:23:2e:12:07:46:59:a3:89:8b:ed:b1:91:c7:ea:
                    97:56:18:4a:f7:37:77:7e:80:24:4e:fc:8d:b6:4b:
                    db:0b:1e:0b:0f:eb:f6:eb:97:07:59:7d:2d:ba:fb:
                    85:5b:a6:1c:61:dd:c1:08:c5:f3:57:a4:66:8c:9c:
                    3e:a2:26:47:44:e0:fb:0f:a2:6d:b3:1d:0a:51:c0:
                    f6:ea:fc:92:af:8e:46:fa:1c:70:21:82:d0:b2:5a:
                    41:da:db:cc:8a:fb:68:c6:3f:34:d1:34:9e:ef:e3:
                    48:ea:0c:ae:6f:a7:66:f5:3e:71:5c:0e:7a:2c:6a:
                    c8:21:ce:c1:bf:33:f4:e5:e0:95:dd:f9:b7:cd:6e:
                    d9:b3:5b:80:29:85:f1:a4:a1:71:93:05:37:f4:b1:
                    80:53:51:63:7b:86:13:21:81:02:d2:8d:e8:30:ba:
                    2a:5b:6a:52:32:0c:92:06:3b:09:57:a8:b9:2d:1d:
                    b4:b7:66:17:d1:49:f0:2a:a3:a1:7c:2a:7c:31:4d:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:B6:EC:E3:CA:4E:60:74:4C:27:12:89:55:D8:24:AF:56:14:8B
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/7PC27OPKTmB0TCcSiVXYJK9WFIs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215820

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:f1:fa:8c:08:ff:c6:50:81:42:a6:e5:13:2e:7d:0a:c2:
         3b:2a:2f:ed:69:aa:0e:06:c4:82:32:3c:36:ec:e7:25:aa:77:
         74:b5:a9:de:9e:33:8b:d2:77:1c:21:65:44:4f:18:84:fb:d0:
         6f:1c:ce:5a:7a:59:d6:25:50:0f:80:32:6e:6f:e4:cd:cc:1a:
         bb:3c:91:fa:5b:95:52:1c:61:0a:38:46:fc:83:0a:92:ea:22:
         9b:b2:7e:7d:0a:db:a9:1c:5a:73:d5:f6:62:ee:fd:b5:e7:ae:
         f1:aa:2d:ac:ed:63:a0:f9:18:ff:2a:d5:bd:7a:73:70:0a:c5:
         e9:79:33:23:3d:d4:75:03:82:7f:9b:0a:d0:f8:9e:43:01:9c:
         e9:b8:d0:9a:01:38:a3:d4:e9:f7:16:b3:cc:fe:60:ee:9c:33:
         8f:5e:b3:1f:9e:27:57:51:06:19:03:3b:5e:c3:47:8e:52:a4:
         a3:c9:c6:0b:7f:83:75:0e:17:af:a6:b8:73:78:21:87:ef:36:
         ff:cd:28:ac:10:db:56:10:24:42:d8:ab:8f:33:f7:04:8f:0b:
         e6:00:bc:16:bc:93:64:fa:c3:12:b3:56:a6:82:19:62:ce:78:
         9d:37:80:09:97:cf:63:69:d7:6f:27:52:c2:cc:f8:78:d9:cb:
         41:47:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:13 2026 by rpki-client