Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa
File:                     1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (raw, json)
Hash identifier:          JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=
Subject key identifier:   D6:0A:42:E9:96:4E:CA:DD:A6:3A:45:C8:61:BB:79:2B:F9:73:5E:9B
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       019D0686C8B4B6D80D79725C38C208A18837
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa
Signing time:             Thu 19 Mar 2026 14:36:29 +0000
ASPA not before:          Thu 19 Mar 2026 14:36:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198704
Providers:                AS: 6778
                          AS: 20804
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:86:c8:b4:b6:d8:0d:79:72:5c:38:c2:08:a1:88:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: Mar 19 14:36:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d60a42e9964ecadda63a45c861bb792bf9735e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:93:e2:e2:47:ce:65:8c:8e:50:04:7c:05:
                    59:62:fe:bc:35:6f:42:93:c2:53:0f:2c:82:ae:3b:
                    1b:d2:53:2b:eb:d8:f7:b5:9d:01:3b:a8:89:5c:a6:
                    fa:5e:a4:f1:79:ef:4f:11:b2:ae:41:99:2b:11:c4:
                    1b:ad:95:59:61:42:1a:ee:7a:02:32:5f:b9:f4:26:
                    df:c3:44:9d:94:fd:40:6f:31:cf:6e:28:a6:4f:cc:
                    4e:4d:bc:58:c7:56:91:87:0b:1d:d5:d3:5a:39:ac:
                    85:9f:c9:94:77:f2:b1:6c:33:79:98:da:a7:69:5c:
                    e7:02:6a:af:d5:55:c6:ed:7a:2b:03:1d:37:85:12:
                    69:08:d6:c6:0b:af:f2:e7:a0:ea:2c:7a:7d:21:cd:
                    bd:40:9d:16:c7:1e:49:7c:dd:df:85:2d:7c:d5:c8:
                    2d:47:e1:e3:4b:29:99:96:3e:ed:73:2d:eb:65:a9:
                    b4:0f:1c:38:fc:7d:55:09:a0:f0:d9:54:e9:15:ee:
                    5a:e2:9d:ed:e9:f3:93:c5:c7:55:79:35:58:d0:d1:
                    be:d2:8e:23:e0:76:43:78:c3:74:f1:ae:39:7f:b6:
                    df:48:36:7d:c5:84:e7:79:66:fa:7f:d6:12:76:c9:
                    8b:19:41:7b:cd:4c:6b:28:19:95:e2:0e:db:da:3a:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0A:42:E9:96:4E:CA:DD:A6:3A:45:C8:61:BB:79:2B:F9:73:5E:9B
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198704

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:63:dc:e1:ed:c0:df:9f:0d:6e:b5:59:83:69:be:fd:f9:
         06:65:e0:60:40:1a:5f:c8:f5:26:d0:8f:b5:dd:65:49:15:59:
         2e:e8:30:28:f1:74:88:a4:07:d2:44:9f:c4:8c:4f:a9:a6:87:
         6a:07:d8:d6:3b:23:81:04:0f:b8:63:b4:76:f4:aa:d3:dc:5e:
         83:42:be:da:89:56:29:cd:07:b6:d2:b8:56:57:63:3d:0b:04:
         29:68:fa:b2:76:58:16:f7:46:84:5e:a3:f9:81:c9:22:ca:34:
         8a:da:91:53:3f:e3:26:77:90:96:fd:49:3b:a5:77:18:db:19:
         6a:ab:88:d8:3f:7f:3e:5a:fe:a8:88:cd:74:a3:d7:8c:44:90:
         fc:03:1d:95:dc:15:e7:8b:2d:ba:2e:00:f3:b4:a1:e4:fd:f0:
         a9:48:18:d3:d3:ae:b7:01:22:47:7c:19:91:1a:a8:e2:94:f5:
         c3:a5:f0:fc:61:6d:a9:5c:4c:3a:47:fe:ed:08:d5:e0:0c:79:
         44:2e:62:9f:4d:21:7e:b6:02:7b:9d:05:b4:8c:97:d9:ee:f8:
         8c:68:b7:86:8b:14:13:5a:10:fe:c1:8f:7f:54:55:da:2c:49:
         c6:b0:bb:52:57:34:09:b0:22:dc:3d:8c:b2:a1:77:62:dd:09:
         15:34:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:31 2026 by rpki-client