Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/dLk4w45q8Owa8GDVR2RUTXOe0Co.asa
File:                     dLk4w45q8Owa8GDVR2RUTXOe0Co.asa (raw, json)
Hash identifier:          nBWLBlLdoR8D7y1wJlZ6nlGbY1sTEjeLaxtL/KKtDcE=
Subject key identifier:   74:B9:38:C3:8E:6A:F0:EC:1A:F0:60:D5:47:64:54:4D:73:9E:D0:2A
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       019DDE3DDD4DD07B606397A7485A000D3115
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/dLk4w45q8Owa8GDVR2RUTXOe0Co.asa
Signing time:             Thu 30 Apr 2026 11:54:49 +0000
ASPA not before:          Thu 30 Apr 2026 11:54:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29691
Providers:                AS: 1299
                          AS: 6730
                          AS: 6939
                          AS: 8758
                          AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:3d:dd:4d:d0:7b:60:63:97:a7:48:5a:00:0d:31:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Apr 30 11:54:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=74b938c38e6af0ec1af060d54764544d739ed02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:e5:4d:84:8f:1a:29:b6:cc:f0:38:77:87:
                    4a:5d:77:0d:fa:89:75:13:c8:d3:49:b0:2b:85:67:
                    3c:9d:2d:e6:e6:c7:0e:88:b3:ec:04:09:7e:7e:56:
                    1e:26:4a:5f:0f:30:7d:d8:88:30:c7:b7:76:cd:64:
                    ec:22:d9:8e:a8:f8:7f:08:f6:8d:ad:d9:71:59:da:
                    9a:fa:75:f3:80:65:9a:e7:10:e0:06:55:94:ca:0a:
                    c0:1b:d7:49:d9:f1:c3:0b:3b:20:fa:da:98:35:81:
                    98:7b:42:fe:28:c7:d9:c3:89:bc:06:4f:aa:51:84:
                    6a:21:55:c6:d8:82:99:d1:26:f7:43:e3:b8:e8:35:
                    b2:a6:5d:24:9f:63:67:18:bc:eb:13:5a:d6:1b:e9:
                    00:75:fc:8b:a9:c2:5c:cf:82:d6:70:b1:0a:f1:26:
                    b9:81:14:4b:1a:33:4c:f9:91:24:ad:cd:7c:9b:7a:
                    82:f2:23:0a:68:ef:2b:a6:d1:6a:f2:f3:7c:a9:84:
                    c6:4a:4a:1b:70:4f:48:8a:e4:3d:98:10:81:76:df:
                    0e:33:5a:52:b6:42:83:c1:a4:57:31:3d:f5:4c:ad:
                    f5:e0:34:85:98:85:c2:df:1e:e6:94:91:f7:5b:a5:
                    fa:10:e7:11:b8:89:11:87:92:22:93:cb:8e:ce:1d:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:38:C3:8E:6A:F0:EC:1A:F0:60:D5:47:64:54:4D:73:9E:D0:2A
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/dLk4w45q8Owa8GDVR2RUTXOe0Co.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29691

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:04:ee:52:c3:30:43:71:35:0c:35:4b:a3:1a:73:de:1f:
         7c:21:f2:18:2f:e7:2c:a5:61:f5:69:c5:24:25:a8:2e:1e:1e:
         0e:96:4e:92:0e:c4:5d:ef:df:36:eb:12:57:9c:72:22:39:c7:
         cd:36:34:be:59:00:0e:b0:38:10:8c:65:10:79:6d:57:f2:5e:
         b0:f6:87:cb:15:ff:66:0f:22:1d:64:1b:bf:3b:9c:34:5e:6a:
         c7:0c:be:0f:e5:6b:cd:0e:2c:a8:43:6d:0a:c0:27:b2:66:16:
         b1:d8:a7:c3:98:5d:05:ae:43:db:97:ab:6e:ee:cb:48:3a:66:
         91:7d:7e:73:1b:6f:1c:a1:3a:74:4e:1b:ef:97:38:2f:24:e2:
         a6:0b:a5:97:6c:3c:82:fb:3b:5a:8f:b9:f2:e7:5d:1b:82:64:
         da:02:c7:43:b0:c1:58:1e:f1:38:fd:b1:4f:4a:92:9d:ba:9f:
         5a:35:11:74:f1:88:65:d7:b6:75:2e:70:66:aa:a1:40:2e:1b:
         b0:bb:1a:18:ca:d1:26:56:49:09:8a:27:85:30:45:2f:46:b8:
         03:ef:56:65:de:ac:b0:b0:90:50:88:17:c9:ab:8f:01:8c:02:
         f6:c5:ea:03:9a:d7:08:61:59:15:e1:d2:ae:da:30:b6:2b:b2:
         1f:14:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:06 2026 by rpki-client