Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wRhtCAAx7zEpmI40CBpFB6CppGU.asa
File:                     wRhtCAAx7zEpmI40CBpFB6CppGU.asa (raw, json)
Hash identifier:          A0EP5dqJF7oVrfX3OmMuR2spKNhblMpR/3OKbRM6pT4=
Subject key identifier:   C1:18:6D:08:00:31:EF:31:29:98:8E:34:08:1A:45:07:A0:A9:A4:65
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019F19011AB8114A4820FAF68E4F5EC5199E
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wRhtCAAx7zEpmI40CBpFB6CppGU.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47865
Providers:                AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1a:b8:11:4a:48:20:fa:f6:8e:4f:5e:c5:19:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1186d080031ef3129988e34081a4507a0a9a465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:75:8b:f8:51:b8:81:30:1c:d8:53:ae:64:
                    c9:73:08:8f:80:40:53:10:5a:8f:a8:b4:92:55:25:
                    ab:ba:f3:eb:ea:a0:c8:ea:35:7c:9e:e4:2e:92:d8:
                    39:fc:f5:d4:10:97:67:4c:f3:de:e6:4a:b8:1c:da:
                    eb:90:fa:58:ac:a2:f7:ca:ab:b6:0f:c1:73:99:4b:
                    f0:6e:e2:a5:91:cf:51:69:a2:e4:a0:e5:9f:97:f0:
                    c2:26:4e:cc:24:11:c6:8c:76:d5:f7:55:37:0e:d9:
                    86:56:85:60:dc:69:d4:9f:22:77:7e:53:da:4e:70:
                    3b:5e:ac:a0:fa:65:65:9d:78:f6:a2:03:4c:ba:33:
                    82:70:73:b6:1f:14:83:c3:0e:ad:e1:50:f9:48:18:
                    99:b0:e8:f8:31:0f:a2:c2:12:eb:d0:2d:40:ec:07:
                    2f:38:70:0b:89:4c:e3:ab:69:51:f1:3a:f8:44:03:
                    e9:b4:b6:70:c5:b2:a7:b7:93:be:c4:76:cc:16:4f:
                    c5:5c:c3:9d:99:86:e0:f7:77:d3:df:5d:9b:64:49:
                    59:3d:d3:68:75:d9:b5:ec:54:ee:8e:ce:81:ef:77:
                    84:fc:67:1b:e9:43:d1:ed:99:d3:72:b3:2d:46:f8:
                    40:0b:76:66:e9:2d:21:f8:d8:fe:cb:da:a7:43:05:
                    ac:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:18:6D:08:00:31:EF:31:29:98:8E:34:08:1A:45:07:A0:A9:A4:65
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wRhtCAAx7zEpmI40CBpFB6CppGU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47865

    Signature Algorithm: sha256WithRSAEncryption
         38:66:83:fd:39:99:2c:a2:fa:92:42:c2:c8:55:00:62:d8:ce:
         88:ad:c2:bd:86:7a:a4:cd:20:96:bf:72:95:92:9f:d2:80:e4:
         b3:66:3b:f8:77:c9:df:ab:b7:98:de:54:a5:51:fb:af:48:97:
         fc:d6:d3:50:cd:ed:8e:82:39:4f:24:63:49:e1:10:a7:03:4f:
         33:17:83:64:21:2e:b8:e8:69:bc:ec:78:e9:de:5b:fd:68:ba:
         59:90:da:72:86:ce:11:b9:3a:b1:18:36:5f:9f:02:0d:54:01:
         02:67:3d:10:09:f3:5a:bd:e4:5b:29:bd:98:a7:43:f7:e7:7f:
         77:46:ce:c9:85:35:ed:a8:14:8d:ac:01:64:a9:99:20:27:29:
         cd:a1:9b:9d:3e:45:87:72:a7:84:fb:e2:12:28:17:ad:2c:b0:
         e8:61:2a:33:19:90:1a:62:55:73:f8:f9:0e:b8:e2:2b:be:14:
         9f:58:4c:c8:89:57:00:de:a6:b9:c8:d5:e1:9c:59:7a:46:83:
         1a:5d:fc:57:0a:92:70:bf:97:b4:0f:da:42:de:13:2e:fb:85:
         a3:69:7a:66:00:f1:4c:84:e0:b6:e8:f9:d2:91:4a:4d:24:dd:
         44:82:f8:f7:0d:57:ef:e2:e7:ec:b8:2d:e3:b4:00:18:56:c2:
         11:dc:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:04 2026 by rpki-client