Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/NIKDJQF8JbqfVTqA1noObiOx-Eo.asa
File:                     NIKDJQF8JbqfVTqA1noObiOx-Eo.asa (raw, json)
Hash identifier:          UMnWgAWLwENoUzr9jwUQCzxce2UUZVyb7ZrbelUcUro=
Subject key identifier:   34:82:83:25:01:7C:25:BA:9F:55:3A:80:D6:7A:0E:6E:23:B1:F8:4A
Certificate issuer:       /CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Certificate serial:       019F23682CA0CB8E16E37C4CDD653512F91F
Authority key identifier: F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/NIKDJQF8JbqfVTqA1noObiOx-Eo.asa
Signing time:             Thu 02 Jul 2026 15:17:37 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213266
Providers:                AS: 8437
                          AS: 21013
                          AS: 44329
                          AS: 48339
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:2c:a0:cb:8e:16:e3:7c:4c:dd:65:35:12:f9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
        Validity
            Not Before: Jul  2 15:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34828325017c25ba9f553a80d67a0e6e23b1f84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:e2:16:64:34:84:07:da:bc:b5:05:d9:d3:
                    85:31:07:01:05:e2:86:7c:15:17:54:4a:da:7d:81:
                    39:1a:f8:91:48:11:cb:4a:e8:be:f5:3d:a9:25:17:
                    db:11:c1:c1:dd:a2:ca:55:b6:8f:bf:7c:06:62:4e:
                    cd:28:78:12:74:df:f7:90:2e:df:65:e5:74:70:fa:
                    f8:97:5d:10:27:35:3c:bf:74:18:b0:61:c7:e8:71:
                    74:0e:c2:5d:ca:d2:c5:45:cb:8d:38:ac:dc:ec:df:
                    d9:5d:70:37:9d:0c:6b:a7:8f:39:dd:90:91:5d:6f:
                    0c:37:f2:52:39:84:dc:88:f7:5a:56:d0:f2:f6:26:
                    ad:af:74:44:a8:f8:97:3f:b6:94:2d:b9:47:b3:54:
                    5e:44:43:70:ff:dd:a6:1a:1f:14:b1:24:6a:57:dc:
                    a8:c6:f9:4e:07:3d:fb:b2:12:d2:32:57:65:8e:46:
                    92:ae:90:b2:41:73:51:65:d7:6b:ce:02:34:07:15:
                    ec:bd:db:0d:16:fa:6b:95:86:f4:ca:7d:50:87:40:
                    52:db:cb:a7:22:e2:f3:19:d9:60:9b:50:bd:8e:61:
                    1e:56:6a:72:0c:14:56:60:1b:91:de:64:4d:f3:60:
                    8d:70:5e:39:6a:a6:be:72:d5:d7:97:a5:2b:93:ba:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:83:25:01:7C:25:BA:9F:55:3A:80:D6:7A:0E:6E:23:B1:F8:4A
            X509v3 Authority Key Identifier:
                keyid:F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/NIKDJQF8JbqfVTqA1noObiOx-Eo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213266

    Signature Algorithm: sha256WithRSAEncryption
         76:32:2c:3a:ea:10:0f:f3:6b:2e:4b:31:d7:aa:d0:84:49:c2:
         dc:55:cc:72:50:9f:43:d9:c7:56:57:7b:b2:86:57:02:dd:14:
         24:ca:e7:b5:25:00:93:7d:32:5b:c6:97:85:b7:00:5e:90:45:
         fb:98:45:c2:38:5a:b0:f0:34:13:c5:09:2c:8c:0b:a8:2e:aa:
         71:54:02:d0:bc:bd:2f:3f:f1:ec:14:dc:8a:eb:4d:b5:66:21:
         ee:06:0e:ef:b2:79:cf:72:63:00:cc:0e:85:7f:a3:8c:e5:8c:
         57:2b:3b:72:8c:4f:2f:80:0c:f0:15:0a:2e:fc:f0:d8:cc:1f:
         0f:86:f7:61:93:c0:d8:17:70:00:d5:03:1c:bb:9d:64:a6:18:
         84:de:6f:a8:6d:6a:8f:99:d8:f6:ee:4d:2c:6f:4c:99:f8:a0:
         f3:11:92:74:6d:d9:1d:d9:b7:fb:d2:62:d0:03:2b:1a:24:c6:
         dd:ec:21:91:be:99:d0:d6:38:87:cf:c3:3a:ee:bf:4c:20:00:
         46:9a:28:d6:cc:0d:d4:ba:01:b6:4c:9e:9e:5a:d8:61:a8:bf:
         0b:d2:59:2e:f6:64:48:02:31:3d:33:6c:41:da:81:d7:d3:b9:
         7a:17:c4:a9:e6:ea:29:2a:4d:62:dd:23:d0:16:da:e8:ea:a0:
         63:4d:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:58 2026 by rpki-client