Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/uUrqBhh3OXly7eOQWNASPejUHp8.asa
File:                     uUrqBhh3OXly7eOQWNASPejUHp8.asa (raw, json)
Hash identifier:          RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=
Subject key identifier:   B9:4A:EA:06:18:77:39:79:72:ED:E3:90:58:D0:12:3D:E8:D4:1E:9F
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       019D432788828B68C795AC5DD4566531CF5D
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/uUrqBhh3OXly7eOQWNASPejUHp8.asa
Signing time:             Tue 31 Mar 2026 09:09:17 +0000
ASPA not before:          Tue 31 Mar 2026 09:09:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213609
Providers:                AS: 6830
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:27:88:82:8b:68:c7:95:ac:5d:d4:56:65:31:cf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Mar 31 09:09:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b94aea061877397972ede39058d0123de8d41e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:5e:a6:79:dd:ed:5b:41:4a:85:90:18:50:
                    e0:d1:34:9d:2f:35:8c:07:45:dd:d8:db:94:fb:a1:
                    bb:ac:bc:fc:8e:32:67:db:44:3a:7b:c6:59:cd:e0:
                    ec:bf:d8:8f:53:b9:e5:80:47:71:9a:fc:18:cc:3d:
                    cf:ec:a5:f4:9d:b8:76:d3:49:24:c1:63:a3:45:3b:
                    fb:40:d6:79:6b:92:57:7d:ed:fe:e2:18:b2:96:4d:
                    86:7f:3f:91:30:e7:4d:ce:d9:cf:d1:e9:d5:2b:3a:
                    65:fc:64:ee:89:c8:bc:54:d6:e9:21:9f:bf:f6:10:
                    04:48:1b:5d:a7:f3:63:ea:bd:01:d4:bd:34:66:a1:
                    67:bb:0e:9d:a0:fb:c8:12:6a:87:2a:bc:06:e5:b3:
                    5c:8a:6f:18:53:f2:a4:4c:af:fa:29:6e:1d:06:a9:
                    0b:11:16:ea:12:04:20:37:78:3d:f4:75:8a:22:4c:
                    a6:fb:24:85:d7:16:b0:d9:f7:58:f7:f4:ec:1a:35:
                    c2:37:c9:05:9d:a9:0d:eb:e4:93:76:82:e7:fa:67:
                    17:e9:90:8a:fa:68:2f:7e:4f:b8:48:b2:c1:a8:82:
                    90:7b:48:62:0d:83:2b:6b:85:25:31:0a:98:d0:6a:
                    2b:0a:1b:25:dc:07:56:f4:10:4e:2d:be:73:68:6a:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:EA:06:18:77:39:79:72:ED:E3:90:58:D0:12:3D:E8:D4:1E:9F
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/uUrqBhh3OXly7eOQWNASPejUHp8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213609

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:6c:f4:57:9f:e0:6c:03:01:ac:11:57:58:9e:04:2a:25:
         50:be:68:a2:8b:81:8b:86:af:35:fd:de:45:b8:07:1d:2f:65:
         fd:ca:77:6c:7d:0e:00:b2:fd:bc:61:91:28:07:fc:c9:d3:a0:
         11:00:73:d2:1c:43:a0:a6:3b:b5:30:a0:3b:14:98:79:b3:87:
         1e:71:17:d1:8d:1d:3e:47:1d:e9:f2:2e:aa:1b:fb:8b:f7:0f:
         b9:47:9e:63:d1:93:7c:fa:93:43:51:8b:1d:df:99:ca:a4:34:
         01:ac:c7:1b:25:5e:32:a5:fe:de:2f:fe:29:b0:e9:3c:3e:89:
         4d:12:b0:9a:79:56:e3:34:89:78:64:44:c8:d0:2b:96:a5:55:
         52:cc:8d:d0:d5:25:4b:57:f5:ce:8a:ee:24:8e:0f:2c:dd:28:
         b7:87:a5:3b:4b:66:fd:83:80:08:92:01:f0:93:21:7f:a5:99:
         ee:88:12:83:b9:ce:90:4f:79:f8:69:83:3c:74:aa:ed:d3:25:
         a4:c3:bb:cb:5e:6f:cc:79:b6:9c:6e:02:8f:57:4e:b6:6e:dd:
         78:ec:03:10:f8:2a:06:3b:cd:96:96:b6:ed:6f:21:3b:40:99:
         28:dc:aa:00:04:b4:25:a7:70:c0:f3:f9:69:28:a8:19:36:d1:
         5f:8c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:48 2026 by rpki-client