Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa
File:                     Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa (raw, json)
Hash identifier:          E2cO6SXyK9HZAexFchG/a5DBbHwX9fgWeihBGqBK40o=
Subject key identifier:   43:67:36:65:5C:43:D3:57:98:31:20:D0:6A:8D:58:A0:85:E3:5B:2D
Certificate issuer:       /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial:       019F19011027CF92EA60BA1D5FDB7B567422
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa
Signing time:             Tue 30 Jun 2026 14:48:47 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211453
Providers:                AS: 1257
                          AS: 12552
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:10:27:cf:92:ea:60:ba:1d:5f:db:7b:56:74:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
        Validity
            Not Before: Jun 30 14:48:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=436736655c43d357983120d06a8d58a085e35b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:03:b8:3e:4d:09:1b:28:be:00:fa:e8:bc:
                    8c:36:4e:f7:f8:cc:d1:13:1b:67:9c:fc:e3:6a:e1:
                    dd:36:8f:aa:37:02:ad:af:c3:7c:e2:20:5f:f3:9e:
                    aa:13:16:29:b6:30:50:90:73:20:f9:a7:37:cd:8f:
                    6d:52:25:41:40:f2:76:99:cc:72:da:b4:2a:49:01:
                    4c:df:f7:86:55:a0:dc:be:80:54:ff:a9:c7:5b:36:
                    62:3a:40:5e:d4:f4:28:72:25:ce:95:0b:04:68:f8:
                    0b:01:45:f3:c1:2b:d9:3e:4d:66:18:cd:2f:02:1b:
                    a8:66:bf:2a:27:8a:df:0b:a5:23:35:62:45:66:fa:
                    36:0a:b7:04:e0:1e:31:fc:bb:5a:46:14:e6:86:72:
                    2b:66:7b:ab:73:bf:00:84:76:e1:e5:a1:a4:e8:de:
                    05:af:b9:bb:d0:2a:60:73:eb:e9:e8:41:44:dd:66:
                    3f:60:44:ed:42:49:86:fc:dc:fe:cf:2b:2e:af:64:
                    22:9d:d3:fd:77:48:43:36:04:e0:66:9f:8d:3a:7a:
                    da:94:62:b8:a1:d2:5e:72:5c:a5:90:6d:2a:35:31:
                    e5:46:31:3b:5c:74:cf:32:fd:4a:94:31:d5:98:5f:
                    22:70:5d:ab:9f:ff:15:00:0f:dd:45:1e:04:87:b2:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:36:65:5C:43:D3:57:98:31:20:D0:6A:8D:58:A0:85:E3:5B:2D
            X509v3 Authority Key Identifier:
                keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211453

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:3d:2b:71:bc:7f:d5:cc:01:af:40:19:a1:91:8e:79:e4:
         9b:a8:c7:f5:76:23:68:f0:1b:1b:12:8a:a7:5a:2d:5c:f9:1f:
         13:2a:10:77:ae:39:c1:cd:0d:cc:7b:9e:18:09:9b:80:b8:0b:
         c1:40:26:e1:45:f5:29:93:62:8c:b7:3c:ba:62:bc:02:9a:9d:
         67:63:06:9b:31:c6:d0:fe:1e:68:f8:88:dd:b3:a2:8e:b2:bf:
         99:3a:fb:43:43:f7:9a:7d:57:f4:8b:d0:91:9e:da:d1:ad:e5:
         d4:10:c6:37:ce:2d:b8:f3:d9:f9:19:5b:55:9c:e0:96:6e:96:
         22:7d:78:0b:53:28:77:d1:b9:5e:b1:15:4e:90:fb:1e:33:35:
         78:80:12:24:9e:d1:c2:fd:04:71:53:f1:56:c3:e3:45:44:82:
         a4:0f:e1:2a:31:f7:a1:dc:78:f0:91:13:4c:d2:d7:e3:48:91:
         7f:29:81:fd:12:e9:5a:af:9b:f6:6c:d2:a4:56:9c:0a:13:ab:
         22:6b:fa:62:5f:43:fe:fa:eb:b7:93:73:04:b9:5d:ba:c5:71:
         bb:12:75:70:48:6b:dd:36:c7:a5:df:40:b6:35:90:9d:8c:99:
         19:c0:a6:64:7c:67:4b:a6:8c:33:40:2f:b7:3c:1f:31:de:ca:
         71:95:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:27 2026 by rpki-client