Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/67H4O3u42i3kdzgA_rephn7HtOI.asa
File:                     67H4O3u42i3kdzgA_rephn7HtOI.asa (raw, json)
Hash identifier:          H8IEM88SP6cl8KTzisA3Hfz9mjuQ8MRmme20jIFQ3JQ=
Subject key identifier:   EB:B1:F8:3B:7B:B8:DA:2D:E4:77:38:00:FE:B7:A9:86:7E:C7:B4:E2
Certificate issuer:       /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial:       019F19013425682B27C7D325FD0122B2378C
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/67H4O3u42i3kdzgA_rephn7HtOI.asa
Signing time:             Tue 30 Jun 2026 14:48:56 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205235
Providers:                AS: 42541
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:34:25:68:2b:27:c7:d3:25:fd:01:22:b2:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
        Validity
            Not Before: Jun 30 14:48:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebb1f83b7bb8da2de4773800feb7a9867ec7b4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:b9:d1:29:83:21:a0:a3:6e:9c:f4:f8:94:
                    59:c5:37:93:da:9e:db:ea:59:3c:b8:07:e8:f9:22:
                    ce:97:c9:03:4f:27:c4:0b:93:f4:23:bd:52:00:ae:
                    2e:50:1b:87:86:b3:b9:39:29:f9:ba:da:49:42:20:
                    f6:3e:ac:cd:3a:70:e7:8d:62:db:7d:61:30:60:c2:
                    f9:f1:c3:49:69:df:ed:a7:01:d7:7e:e1:84:6d:0d:
                    9a:f6:4a:23:1d:23:3a:45:89:50:a3:7e:2d:2f:fe:
                    f8:c3:d4:cd:ad:bc:36:dc:dd:6f:56:00:d8:a9:e5:
                    f4:8e:6c:6c:d5:01:78:67:54:96:61:59:c5:b7:85:
                    7f:db:67:38:c4:62:92:98:73:52:a5:97:a7:09:16:
                    47:89:28:85:52:60:a8:75:76:33:4a:52:92:d5:10:
                    a3:87:ee:d9:ca:f3:51:12:18:3e:ac:aa:b5:29:ad:
                    93:ae:74:97:80:53:54:be:8a:15:08:2c:d7:e2:9e:
                    7a:62:1e:e9:85:92:38:4a:5d:0e:14:99:85:29:e7:
                    84:2b:72:e7:eb:aa:ac:f7:33:38:6e:8d:75:88:b8:
                    6d:f2:0c:10:54:4e:d8:ef:bc:c3:73:0c:51:d2:31:
                    96:99:a6:82:e8:0f:e8:f0:18:da:4b:a5:e7:a3:dd:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:F8:3B:7B:B8:DA:2D:E4:77:38:00:FE:B7:A9:86:7E:C7:B4:E2
            X509v3 Authority Key Identifier:
                keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/67H4O3u42i3kdzgA_rephn7HtOI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205235

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:f5:95:c6:d6:e8:99:89:7b:2f:52:66:5b:54:61:5d:ce:
         19:75:be:52:9b:75:27:03:a3:8b:96:29:85:33:f0:5f:35:82:
         0d:fb:70:b4:61:41:ca:c5:81:31:fd:02:84:e4:87:bd:80:99:
         8f:12:67:db:6d:f9:7e:1e:9e:89:62:04:63:8a:ba:73:2a:1c:
         be:77:1b:8a:e4:18:bb:63:49:ea:0e:65:f0:9a:49:9d:db:75:
         26:31:93:20:c5:42:0d:38:f2:36:de:53:24:3b:cd:07:6b:b3:
         15:59:7c:ed:c6:6c:ea:3a:e2:3c:80:95:2b:9b:3d:3d:2a:b0:
         f8:0f:ea:cb:f6:4e:a7:e0:e5:43:7f:7e:89:25:4b:1d:dc:42:
         eb:44:f4:31:5c:48:36:af:15:f5:4b:8e:0b:a7:50:25:c3:8e:
         8d:44:dc:69:fb:3d:a4:f8:d1:56:ad:54:8d:07:5c:10:78:1e:
         20:10:15:1a:ee:c4:ff:5e:83:d7:88:29:fd:68:52:85:c3:fb:
         1b:39:0b:99:10:8a:57:54:90:15:d9:bc:ea:4f:22:2d:75:ba:
         59:ff:3f:2a:e1:3e:09:56:97:60:0c:11:f4:a7:7c:10:82:0f:
         11:1c:d6:b8:87:15:c1:1d:4a:b3:e1:66:7a:d5:e0:91:39:00:
         f7:69:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:11 2026 by rpki-client