Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/ZXBqmIJ8MCd2GLv-QmXQK6XxBmQ.asa
File:                     ZXBqmIJ8MCd2GLv-QmXQK6XxBmQ.asa (raw, json)
Hash identifier:          HxQHQf0TZV7ddusSSpVB4Ixe3kKC7uFqkts0lnECfRk=
Subject key identifier:   65:70:6A:98:82:7C:30:27:76:18:BB:FE:42:65:D0:2B:A5:F1:06:64
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019F19013A36954D496FD661C9A27FD8C64A
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/ZXBqmIJ8MCd2GLv-QmXQK6XxBmQ.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213031
Providers:                AS: 13287
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3a:36:95:4d:49:6f:d6:61:c9:a2:7f:d8:c6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65706a98827c30277618bbfe4265d02ba5f10664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:d5:2e:8a:81:32:9e:01:98:c3:00:31:55:
                    9a:ff:15:af:5a:89:7e:f2:8a:90:64:85:a6:07:f4:
                    a1:e5:44:2f:5a:55:10:4e:d1:60:4c:42:5c:d8:67:
                    80:c9:d2:68:bd:b4:f5:8c:bc:0d:3a:55:d7:8f:25:
                    1e:93:d5:0c:1c:8a:f6:f8:93:ec:4c:2c:ce:20:6d:
                    ff:56:90:f4:de:f0:3e:84:62:0b:ca:a2:81:e0:9c:
                    b5:7a:43:85:6b:2c:cc:bf:ab:87:d1:e1:60:8e:61:
                    f0:6f:91:ce:da:e4:63:56:da:66:2b:0f:fe:6a:9b:
                    00:52:a6:7e:4d:d0:73:ba:4b:f2:16:86:fd:16:aa:
                    c2:90:2c:ca:49:89:49:17:c2:55:ee:a2:59:9f:d4:
                    28:05:42:e9:23:b6:55:53:52:a3:21:11:1d:22:64:
                    f9:bc:88:c5:63:d8:f4:ef:c4:dd:c4:ca:50:39:05:
                    03:f9:6d:bb:db:38:99:73:d4:ce:f0:ba:9c:e5:90:
                    1b:7a:2e:8d:13:6c:9b:70:00:8d:42:bf:ec:ff:98:
                    4a:24:d0:dd:13:c0:f4:81:b9:8e:8d:5d:1f:70:df:
                    d2:1f:e6:1f:ce:d6:07:6f:e3:93:d1:40:fa:8f:43:
                    ae:e2:a5:80:de:ee:94:84:59:d5:1d:94:d5:9a:85:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:6A:98:82:7C:30:27:76:18:BB:FE:42:65:D0:2B:A5:F1:06:64
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/ZXBqmIJ8MCd2GLv-QmXQK6XxBmQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213031

    Signature Algorithm: sha256WithRSAEncryption
         77:18:8a:33:a0:f7:8f:ff:1f:8b:fc:d9:c2:59:51:cb:c3:5b:
         30:94:2c:3b:23:d3:8f:e0:96:d2:ca:e5:13:cb:38:91:db:62:
         f5:f5:cf:f3:7c:24:89:ef:86:4d:8d:bd:62:4e:0b:c9:46:1d:
         d5:2f:c9:7c:d6:44:50:6b:91:8e:17:d5:7a:7f:e9:2a:be:1a:
         9b:ad:bd:be:d7:c8:5f:49:b7:3f:89:60:41:55:b8:5e:0b:ed:
         16:e6:d7:7e:ad:71:97:0c:6b:20:43:21:79:f6:1c:0e:6e:70:
         ed:f7:23:b8:12:b1:e9:fd:1c:22:a0:08:ad:c5:ee:46:2d:e0:
         ae:a6:2d:02:b9:15:c0:4e:3a:85:35:2a:bb:10:db:3f:6f:36:
         cd:8d:8e:a8:14:49:3d:8d:2e:56:fa:ae:6d:06:e2:26:26:f5:
         e6:31:41:03:69:91:23:a1:1d:de:41:6f:7b:72:7b:a8:bb:4a:
         02:c8:04:4c:0b:73:83:23:f3:62:96:4d:88:26:77:06:c2:cf:
         77:69:ec:d3:dc:e0:c9:b5:5b:db:5c:9e:8e:6d:3d:91:97:9a:
         ae:6c:e6:fa:fd:b4:50:5a:33:eb:e6:8a:0a:4e:33:82:80:c5:
         76:c5:2d:42:ca:36:7f:ec:ee:4b:10:59:e3:a3:e0:76:06:c1:
         0b:e9:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:28 2026 by rpki-client