Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/0KNUniDQStsUdfUD8P6wuTrljWE.asa
File:                     0KNUniDQStsUdfUD8P6wuTrljWE.asa (raw, json)
Hash identifier:          Ay/l3+X8KL3eUYgQa/GJ5xTQve680KWeN5LPXeHn6DE=
Subject key identifier:   D0:A3:54:9E:20:D0:4A:DB:14:75:F5:03:F0:FE:B0:B9:3A:E5:8D:61
Certificate issuer:       /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial:       019E07CC3C69803D46B1AA95CC01C4182AC8
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/0KNUniDQStsUdfUD8P6wuTrljWE.asa
Signing time:             Fri 08 May 2026 13:34:45 +0000
ASPA not before:          Fri 08 May 2026 13:34:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34428
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 3356
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:07:cc:3c:69:80:3d:46:b1:aa:95:cc:01:c4:18:2a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
        Validity
            Not Before: May  8 13:34:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d0a3549e20d04adb1475f503f0feb0b93ae58d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:76:d0:61:ff:fe:e4:8b:f2:3e:11:d9:e7:
                    23:a3:90:6e:27:4b:d3:a3:0a:1a:3f:b2:88:d8:26:
                    2d:42:a5:4e:8a:7c:c0:43:ad:03:67:c0:ab:9d:0d:
                    2f:62:09:a3:92:80:11:55:8e:e3:f7:a9:ff:31:7f:
                    3c:eb:e8:e1:08:9d:c6:1b:78:11:e9:ba:6f:7c:35:
                    dc:9b:82:20:00:a4:bd:4b:9c:f7:8d:b8:83:64:49:
                    52:b1:98:6b:c9:86:b0:6d:88:58:b4:a2:9b:e2:e1:
                    38:fc:35:50:b6:d3:25:bf:34:5b:c1:83:5b:e3:dc:
                    d1:e1:ad:0d:f0:94:8f:f5:14:6c:0d:1f:ed:8a:91:
                    f4:ea:75:db:4c:d0:ec:2a:61:07:29:a7:94:80:7a:
                    66:62:c9:e5:8e:12:24:e9:d5:a1:b1:fa:fb:90:f6:
                    e1:f6:e0:dd:b5:a6:2f:90:e5:b4:de:77:68:88:31:
                    0a:c0:1d:68:8c:72:97:d1:cd:58:6f:db:3f:e6:a6:
                    0f:df:1d:0f:d7:2e:cc:f8:0b:24:a1:7e:cb:3c:ef:
                    f3:22:13:69:7d:d1:a2:30:19:17:87:7c:67:ba:cb:
                    fd:45:83:03:e0:39:7c:f9:cf:81:e2:59:b1:64:95:
                    db:ee:cd:6a:8e:3b:62:7f:a4:e4:eb:b8:4d:1e:92:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:54:9E:20:D0:4A:DB:14:75:F5:03:F0:FE:B0:B9:3A:E5:8D:61
            X509v3 Authority Key Identifier:
                keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/0KNUniDQStsUdfUD8P6wuTrljWE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34428

    Signature Algorithm: sha256WithRSAEncryption
         02:69:6c:f3:a8:04:eb:e4:82:b2:2e:d2:86:e1:27:52:d1:cf:
         90:7d:6e:5d:54:a0:02:e6:3e:44:37:d7:86:f1:e4:85:03:70:
         98:43:e1:5c:6e:7d:95:7d:aa:2f:a1:4c:94:ef:e3:5c:f4:b0:
         34:6d:00:52:80:c6:22:63:93:fb:f0:39:95:c8:5b:0b:65:cb:
         60:b1:2b:1a:5b:2e:70:c1:3b:a2:08:d8:71:d1:8a:d7:fb:08:
         b1:9d:a2:59:ad:d7:1a:f8:22:cb:ed:57:dd:a6:75:3e:85:98:
         38:12:7a:5f:e0:80:45:ef:54:b3:3f:1c:8c:59:43:c7:0b:bd:
         13:25:8d:5e:cd:b4:e7:2d:c9:65:2d:48:15:70:5a:e8:1e:a6:
         c0:85:45:f0:11:1a:08:c9:93:27:ed:69:fd:e9:be:2b:6a:a6:
         97:d3:f7:bd:83:54:cf:67:8b:18:86:76:90:f8:b6:e0:a4:00:
         b2:eb:36:e8:2a:0a:0b:7c:6e:36:d5:2e:b0:4e:05:5b:50:66:
         24:6b:6b:55:19:af:1d:75:8b:a8:48:69:b6:b4:9a:f6:2e:1c:
         d1:c8:59:36:a8:72:2b:33:fb:f3:94:67:f9:7b:fe:28:b0:d3:
         8c:44:59:9f:a3:cf:a6:ae:c4:90:b6:c7:b8:da:fd:b2:8d:a2:
         94:f9:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:44 2026 by rpki-client