Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa
File:                     AS11967.asa (raw, json)
Hash identifier:          qrZnTIDpiG9un0qsZjyzIzrI+E4EXxLiTHN5tO2HHvI=
Subject key identifier:   2F:26:3A:F7:F9:36:4B:F3:9F:BE:C0:5D:16:CA:7B:92:2F:89:48:23
Certificate issuer:       /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial:       70EDF9E4BB1C78FC0626065341212614CEA835D0
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa
Signing time:             Mon 14 Sep 2026 08:00:27 +0000
ASPA not before:          Mon 14 Sep 2026 07:55:27 +0000
ASPA not after:           Mon 13 Sep 2027 08:00:27 +0000
Customer ASID:            11967
Providers:                AS: 835
                          AS: 1299
                          AS: 6939
                          AS: 34927
                          AS: 213753
                          AS: 214809
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:f9:e4:bb:1c:78:fc:06:26:06:53:41:21:26:14:ce:a8:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
        Validity
            Not Before: Sep 14 07:55:27 2026 GMT
            Not After : Sep 13 08:00:27 2027 GMT
        Subject: CN=2F263AF7F9364BF39FBEC05D16CA7B922F894823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:3d:52:6b:57:cd:93:9c:83:44:00:de:05:
                    09:ee:7b:f0:dd:31:d9:d2:5d:98:d7:e7:22:a5:3d:
                    02:d8:14:53:2a:4d:ea:88:c8:d5:08:6a:5d:45:0e:
                    75:3d:8c:5e:e0:2d:f0:d3:0d:fd:2c:71:34:0d:5f:
                    11:ad:9c:95:18:a9:0a:8f:f8:ad:3a:86:bc:98:7e:
                    05:66:6a:65:e0:31:a9:e6:de:ef:12:d9:9e:dd:a0:
                    c2:50:36:14:4c:d7:c6:99:f1:81:a4:39:90:31:87:
                    7e:08:8f:2e:ba:ae:14:b9:40:4f:42:dd:d4:e2:c3:
                    32:9a:45:16:6f:bf:28:8a:18:f2:b3:f4:37:13:67:
                    78:8d:b8:c9:5e:8f:2f:63:bb:18:b3:18:fc:59:a4:
                    8f:51:72:fe:b6:10:db:17:07:b2:64:e0:a0:ca:22:
                    cd:f8:7e:04:03:3f:57:49:8a:8d:c9:d8:34:5a:0e:
                    3e:5d:5a:2a:2d:09:6d:a1:97:03:0b:13:a5:c3:aa:
                    85:7e:1d:32:f5:7f:d8:33:2c:cd:da:b9:16:ec:76:
                    b7:d7:2e:2a:98:0b:f2:2a:c1:49:52:87:dc:30:5d:
                    56:8c:80:1a:99:b6:10:fc:74:2c:55:64:cd:aa:30:
                    58:7b:b1:81:5b:2f:c5:03:28:28:89:3d:77:0a:ea:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:3A:F7:F9:36:4B:F3:9F:BE:C0:5D:16:CA:7B:92:2F:89:48:23
            X509v3 Authority Key Identifier:
                keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/AS11967.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11967

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:a8:8d:ff:9e:e8:63:e2:3c:29:14:a4:06:78:0c:fa:71:
         18:70:36:31:df:f3:1f:9f:32:06:15:12:77:dd:2f:9f:b5:6f:
         d2:f2:51:da:3b:3e:be:24:69:78:47:ae:73:e1:12:1f:0d:75:
         f9:3f:69:9c:3d:49:80:2b:05:f7:56:b9:ce:5a:e0:cd:7b:60:
         71:81:8b:24:a1:c4:6c:80:ce:ca:c2:1d:85:c7:3e:e0:bc:4c:
         36:ac:84:a5:b3:20:8e:3c:48:06:6d:3a:be:1c:2b:b2:f8:a6:
         f1:50:c9:50:c8:20:41:8a:e1:bf:6c:05:b8:29:3f:7c:ff:ae:
         cf:0d:db:1a:92:04:1f:28:dd:28:4e:ac:e0:ea:45:02:75:d6:
         bb:39:57:d2:e7:82:48:02:fb:45:3c:02:af:57:73:49:5d:d6:
         57:b1:cc:7a:a1:f9:62:50:59:8f:ce:0a:d7:92:87:6f:74:eb:
         04:bf:af:49:77:23:e5:b1:01:76:ca:16:fe:7a:6b:68:dc:0a:
         bd:35:06:4b:1f:31:6b:d0:aa:fa:ea:28:71:ef:f7:48:d0:80:
         2b:6f:06:87:f4:fd:29:6c:40:af:2d:e7:4c:14:f4:d0:cd:14:
         43:e3:83:bc:bf:3f:51:a4:9e:9c:56:ae:b4:87:72:09:63:b6:
         2d:59:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:48:35 2026 by rpki-client