Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa
File:                     AS11967.asa (raw, json)
Hash identifier:          3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=
Subject key identifier:   CB:AA:34:40:4F:05:B5:5C:03:86:08:35:EC:95:00:D7:71:CB:B0:99
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       46F1C8CC48320A5F1FC9C26F275125D7FBFF568D
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa
Signing time:             Tue 07 Apr 2026 21:19:17 +0000
ASPA not before:          Tue 07 Apr 2026 21:14:17 +0000
ASPA not after:           Tue 06 Apr 2027 21:19:17 +0000
Customer ASID:            11967
Providers:                AS: 835
                          AS: 1299
                          AS: 6939
                          AS: 34927
                          AS: 213449
                          AS: 213753
                          AS: 214809
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f1:c8:cc:48:32:0a:5f:1f:c9:c2:6f:27:51:25:d7:fb:ff:56:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Apr  7 21:14:17 2026 GMT
            Not After : Apr  6 21:19:17 2027 GMT
        Subject: CN=CBAA34404F05B55C03860835EC9500D771CBB099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:3b:19:7b:e6:71:bc:5c:0e:06:49:af:f0:
                    1e:39:e3:12:8e:fe:3e:27:bd:83:8b:97:e6:d1:d2:
                    05:94:84:4e:c5:43:86:52:de:34:f7:a3:54:c1:9f:
                    b9:99:29:e3:ac:f8:7f:f9:d4:8b:41:76:0e:fd:1a:
                    8f:95:6a:29:31:15:89:b0:47:ec:96:97:60:35:49:
                    b1:23:81:50:91:6f:2e:bd:1f:bc:9a:bc:be:25:44:
                    aa:98:c9:00:6a:2a:99:99:8b:73:39:f1:e6:52:57:
                    04:9f:0f:27:33:b4:10:aa:86:c5:fd:65:e6:20:5e:
                    10:1c:83:8c:d3:0a:18:3b:20:33:df:31:89:fd:d5:
                    1b:47:86:69:4d:8e:10:d8:01:0f:3b:20:2f:f4:c1:
                    92:0e:84:8d:48:46:0f:38:76:40:aa:4c:d6:ae:e5:
                    cf:f3:44:27:5f:d0:fe:23:d7:79:b3:f0:66:4a:4c:
                    49:50:cf:b0:90:03:21:84:10:32:8b:82:a9:b0:c9:
                    4e:07:d1:4f:17:e7:e3:b6:a8:a3:5a:e7:42:0f:bb:
                    f2:f6:52:50:bc:f5:8a:44:8b:10:6c:e6:b4:c4:55:
                    83:df:bf:ee:c9:c9:05:c9:d9:39:12:55:dd:f0:8c:
                    57:46:1d:7a:ef:cb:d6:d7:e9:5f:7d:da:38:c4:f7:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AA:34:40:4F:05:B5:5C:03:86:08:35:EC:95:00:D7:71:CB:B0:99
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11967

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:c5:33:92:ba:c4:f6:79:ef:1c:db:a6:39:63:ad:ea:6d:
         1a:cc:c1:da:97:c9:e8:86:e1:81:5f:dd:82:17:fe:89:5e:8f:
         4f:cd:e3:55:aa:89:68:6b:71:93:b2:ba:98:d1:fa:b9:7f:49:
         a8:8c:a5:51:62:2e:24:30:c8:40:5d:11:50:84:4a:79:c3:fb:
         39:5d:7e:9f:05:48:62:73:de:2d:41:a8:1f:dd:7e:c2:77:0d:
         bb:95:50:d8:25:b7:97:f4:5e:b8:a6:73:af:fa:04:47:81:11:
         5f:52:f6:b7:8e:df:58:4e:f1:02:d1:1b:5d:2b:74:a7:b1:4c:
         89:b7:75:89:ea:2f:4a:77:8b:a3:2a:c4:22:59:c8:bd:bf:b4:
         56:e3:6e:3d:23:25:e3:1a:f9:85:6e:cf:59:ca:d0:2a:b1:21:
         2a:01:d4:e1:24:5d:50:4e:f4:10:c0:54:90:2d:11:2b:d7:0b:
         fb:1a:0e:ad:15:98:18:0f:86:49:de:e1:35:ed:cc:cc:71:bb:
         d1:81:7b:79:e0:84:28:98:ad:8e:de:86:26:c0:d2:30:81:9f:
         74:08:1f:38:6c:e5:d1:1b:20:8e:5a:7e:93:da:c3:0c:95:73:
         1a:70:48:e0:bb:eb:e2:b7:b7:fd:fa:8f:fb:7a:e9:99:8d:74:
         e1:35:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:58 2026 by rpki-client