Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/3t8az_xmWCwRgwYdF8ntbUiTIo4.asa
File:                     3t8az_xmWCwRgwYdF8ntbUiTIo4.asa (raw, json)
Hash identifier:          OYtFSUrUtQCeFSpMmkc6CELhcO6KgL/e+r+O7ChwoMw=
Subject key identifier:   DE:DF:1A:CF:FC:66:58:2C:11:83:06:1D:17:C9:ED:6D:48:93:22:8E
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       019F36FE9E78195AE2EEF3964D926D85A934
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/3t8az_xmWCwRgwYdF8ntbUiTIo4.asa
Signing time:             Mon 06 Jul 2026 10:34:44 +0000
ASPA not before:          Mon 06 Jul 2026 10:34:44 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60728
Providers:                AS: 6775
                          AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:fe:9e:78:19:5a:e2:ee:f3:96:4d:92:6d:85:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Jul  6 10:34:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dedf1acffc66582c1183061d17c9ed6d4893228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:7d:29:ca:d7:17:13:cc:79:c1:db:21:a1:
                    be:73:58:f3:1b:d0:65:0e:71:ea:b0:89:79:dd:e1:
                    d6:65:6a:a6:f2:7a:16:8a:45:a8:70:4d:11:0d:fb:
                    a3:07:d5:85:89:37:83:8f:b8:e6:58:33:fa:8e:fc:
                    ad:54:1f:4c:a7:b0:0f:2f:94:29:4f:a0:d5:af:64:
                    88:ad:0e:61:5c:5d:c0:5f:68:24:19:6d:89:32:19:
                    b1:b5:ba:de:28:31:3a:bf:10:10:ac:ac:87:4d:fb:
                    7c:5c:ff:3b:0d:ea:69:e0:3e:c6:fb:df:41:a0:a8:
                    81:74:76:6a:80:2c:5a:89:5f:34:98:de:d5:1b:7a:
                    e2:e1:3e:60:66:94:13:67:cc:e4:39:49:2b:5f:2b:
                    31:09:b3:b8:b7:59:05:12:db:77:2f:d7:d6:dc:ba:
                    97:80:e7:8d:c2:af:20:59:a7:22:86:57:69:2f:cb:
                    a4:09:87:5a:b2:f5:fe:0c:55:a5:c8:13:b5:5d:43:
                    53:41:90:53:77:42:0d:2a:e3:cc:33:4d:d2:f6:d4:
                    f6:bb:4a:82:af:04:a8:2b:06:67:61:70:15:a5:5b:
                    91:44:f7:40:1c:13:24:be:a9:1a:33:ec:ce:3c:76:
                    8b:82:96:56:07:fd:67:2f:71:91:24:ae:3b:db:63:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:1A:CF:FC:66:58:2C:11:83:06:1D:17:C9:ED:6D:48:93:22:8E
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/3t8az_xmWCwRgwYdF8ntbUiTIo4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60728

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:f6:4e:e0:34:2b:e4:f0:06:bf:ca:ce:57:6d:5b:85:13:
         95:2a:0a:b8:b1:3c:6e:c6:ed:20:6d:dc:32:a4:f2:c7:63:f1:
         7b:fa:2e:4e:9a:01:8e:68:91:b7:1a:07:7e:64:90:88:3e:02:
         c1:2a:7f:dd:cf:2c:52:95:6a:3c:6a:74:bb:7c:5b:fe:e4:79:
         8e:24:54:25:66:5d:47:30:55:6e:53:e6:d9:cc:1e:30:28:e6:
         53:50:80:f6:b4:99:5a:cb:01:d0:dd:7a:c1:ef:b5:d8:30:df:
         da:52:c3:4d:9d:31:b1:fc:ba:42:4b:b3:85:90:9a:55:06:fd:
         b7:12:f6:46:ef:00:4f:80:b6:7c:04:1e:2b:75:c7:a2:c9:05:
         be:40:24:82:2f:ea:ec:5e:15:f3:52:cd:34:8e:06:2a:4a:89:
         ef:f5:b0:25:3a:e0:f2:cb:15:83:41:e7:d3:b0:ab:a0:b1:b2:
         31:03:d1:b3:66:dc:92:e4:29:9a:53:c1:15:78:d8:c7:1a:3c:
         a9:2b:ad:25:4c:5e:84:bc:b7:7c:9f:c0:e4:1f:15:6f:7a:b7:
         76:e5:3b:31:eb:40:c7:f0:b7:71:de:9f:36:bc:07:2e:20:e5:
         d0:c1:15:56:de:a4:12:38:d2:e7:a9:b1:60:4d:ee:8d:41:6f:
         f5:54:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:29 2026 by rpki-client