Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/nE4BIyT7Hzt-8_AbWkweiKyHyPc.asa
File:                     nE4BIyT7Hzt-8_AbWkweiKyHyPc.asa (raw, json)
Hash identifier:          7PkWdlc/z9MEKZ2al4HQq8xTSzcpAQSGf61N6r1GcZA=
Subject key identifier:   9C:4E:01:23:24:FB:1F:3B:7E:F3:F0:1B:5A:4C:1E:88:AC:87:C8:F7
Certificate issuer:       /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial:       019CFB40701B8FA3CFEFABD0D424F0F63BE1
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/nE4BIyT7Hzt-8_AbWkweiKyHyPc.asa
Signing time:             Tue 17 Mar 2026 10:03:50 +0000
ASPA not before:          Tue 17 Mar 2026 10:03:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214786
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fb:40:70:1b:8f:a3:cf:ef:ab:d0:d4:24:f0:f6:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
        Validity
            Not Before: Mar 17 10:03:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c4e012324fb1f3b7ef3f01b5a4c1e88ac87c8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:48:f3:12:18:8b:0b:a7:2a:cd:d3:2c:3c:
                    02:88:c9:2a:ae:cd:df:fb:b5:b5:d1:ef:a8:e1:17:
                    cb:c1:c5:dc:dc:42:d3:c2:ab:c4:67:bd:23:7f:35:
                    c8:41:8a:d8:72:a2:20:51:0a:74:50:24:c1:7e:c6:
                    d8:dd:c6:a5:69:25:92:8e:df:47:98:db:3e:f0:88:
                    62:57:5f:02:bf:94:f2:77:c2:0b:75:06:36:f9:d5:
                    11:7e:e7:f9:6f:9a:93:a9:70:92:ec:97:f0:8a:13:
                    d2:6e:55:64:7d:6b:4d:90:e0:af:22:b3:75:32:b3:
                    ba:c4:48:16:25:84:c1:f7:41:0e:14:58:cf:3b:51:
                    3f:f9:cc:0e:ce:b6:61:e6:1f:12:2f:46:ad:ff:6f:
                    a9:49:b6:de:b7:ff:e1:84:44:f3:64:85:b4:1b:61:
                    7f:ce:3e:f6:0d:e2:22:a6:18:b7:e8:06:6c:68:48:
                    3f:cc:4c:9b:d1:b0:e7:2c:7e:8c:f8:6a:df:0b:50:
                    30:04:19:e3:2b:ac:dd:0a:69:19:0b:54:b7:55:9e:
                    d8:78:66:dc:10:80:6d:5c:d1:b1:e7:2d:f4:75:f4:
                    bc:f9:33:e5:e3:57:f5:f6:06:ad:f9:4f:b8:aa:25:
                    c6:04:f4:f4:cb:b4:a6:64:a0:de:83:91:c1:e4:ae:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:01:23:24:FB:1F:3B:7E:F3:F0:1B:5A:4C:1E:88:AC:87:C8:F7
            X509v3 Authority Key Identifier:
                keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/nE4BIyT7Hzt-8_AbWkweiKyHyPc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214786

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:7b:35:c3:d9:2a:c9:9a:61:c3:be:b9:e9:d0:f8:77:8d:
         13:b4:7f:07:79:a9:6b:57:43:fe:9c:f9:c8:d7:43:d0:c2:a1:
         10:9c:e4:96:17:d7:19:91:05:2a:e5:51:66:d7:86:c6:01:43:
         97:b7:cc:42:2c:2b:c7:77:9d:6b:21:60:57:32:2b:9e:ba:66:
         04:e7:2a:0d:a5:9c:f6:70:71:46:a5:d0:8c:ec:6c:ff:c9:6e:
         94:31:b1:95:bb:e8:5d:89:d8:5c:6d:7f:49:9a:ba:3b:e7:2f:
         b0:bb:0a:0e:f1:af:64:d1:6a:3c:74:f2:f3:05:51:86:ca:b8:
         cb:0b:a0:67:17:38:71:08:09:10:14:fb:9c:c9:ba:44:78:94:
         1e:79:4e:0e:01:31:7b:f5:78:30:45:a2:33:d0:c3:5e:61:d1:
         5e:bf:5e:b4:f4:91:5c:ab:8b:03:b7:9b:bb:3b:19:b4:8a:3d:
         fa:f4:42:82:7d:2e:67:23:4f:89:67:30:84:29:32:10:ab:e8:
         c9:68:c3:ee:8a:83:e4:ed:e9:83:75:8e:36:44:fc:3b:c6:24:
         7f:43:cf:16:4b:76:96:57:7e:5b:d6:fe:3e:5d:3e:24:7a:b4:
         44:fb:ad:54:6b:47:30:52:1d:98:c3:c8:4c:61:d2:ff:76:7c:
         99:e0:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:27 2026 by rpki-client