Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/N_-aUt6Z-T1T47bLQeiZqj46aAY.asa
File:                     N_-aUt6Z-T1T47bLQeiZqj46aAY.asa (raw, json)
Hash identifier:          uJrA5ZxEbMX+r8ykiQ1wfuqw5vOenNUNMGEM9RjYuwk=
Subject key identifier:   37:FF:9A:52:DE:99:F9:3D:53:E3:B6:CB:41:E8:99:AA:3E:3A:68:06
Certificate issuer:       /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial:       019F18E3072458525AB0DE7531BA486E3209
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/N_-aUt6Z-T1T47bLQeiZqj46aAY.asa
Signing time:             Tue 30 Jun 2026 14:15:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:15:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209870
Providers:                AS: 43861
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:e3:07:24:58:52:5a:b0:de:75:31:ba:48:6e:32:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
        Validity
            Not Before: Jun 30 14:15:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37ff9a52de99f93d53e3b6cb41e899aa3e3a6806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:72:fd:94:54:b4:c4:17:98:9a:3f:81:21:
                    d0:55:ba:2d:79:4c:b2:dd:52:3a:32:b7:1a:f2:32:
                    0b:68:34:9a:0b:79:91:23:3a:0b:5c:b8:a1:0c:2a:
                    d0:fc:ab:ff:61:b0:26:34:15:f5:9f:62:38:50:4d:
                    3a:c6:68:c2:4c:08:b9:8f:c2:22:a3:d1:d0:12:75:
                    c1:2b:9e:73:87:e9:69:df:15:76:e9:d7:a3:e4:76:
                    a8:23:a7:81:5f:e8:6a:7f:97:f0:5e:aa:c1:fb:e1:
                    08:3e:fe:4f:30:b8:3c:4a:0d:03:7a:31:19:2c:1a:
                    94:a1:26:25:22:cf:0b:03:d2:65:92:28:b3:f3:ba:
                    5c:5a:88:45:08:4d:08:f3:2f:76:93:14:c2:72:09:
                    07:d5:47:67:63:c6:22:7c:cb:2e:03:39:55:91:a5:
                    85:2d:f1:ce:fa:03:d1:1c:51:69:e4:68:57:3b:ae:
                    c2:ae:24:cd:5a:c5:50:ba:ef:2f:94:69:96:cd:f2:
                    f2:c2:a7:dc:29:54:c7:2a:bc:a1:6b:f9:9c:53:5a:
                    34:75:74:92:0e:17:b1:31:76:0f:5f:f3:a3:6e:42:
                    de:61:07:96:cc:5a:9c:f2:ba:27:2c:37:a8:06:2d:
                    54:33:2f:b3:9f:a8:db:09:95:ff:a0:9e:c6:09:f5:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:9A:52:DE:99:F9:3D:53:E3:B6:CB:41:E8:99:AA:3E:3A:68:06
            X509v3 Authority Key Identifier:
                keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/N_-aUt6Z-T1T47bLQeiZqj46aAY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209870

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:ae:b6:50:c0:8b:b6:df:2d:8b:cf:17:e9:b1:06:f2:8f:
         45:1e:c6:26:62:12:b1:28:2d:ce:4c:fe:01:1c:a6:2e:32:66:
         e6:d4:0a:92:22:c9:e7:83:16:88:3e:04:c3:b8:ba:6f:fa:02:
         fc:7a:40:52:e9:af:35:e5:e7:ec:2e:77:f0:a9:5d:e2:85:51:
         ef:62:ec:c7:7c:61:79:ab:12:a8:92:35:c3:a1:2f:40:4a:c5:
         f6:11:be:27:5b:ea:42:54:bc:d9:ab:87:40:8f:bc:d1:f7:79:
         ef:62:c0:f7:1e:b4:5e:2c:f4:f1:b5:33:4a:66:93:30:d0:e4:
         96:37:5d:41:75:63:1d:68:40:af:32:cc:18:cc:02:31:0e:72:
         48:cc:ce:33:2e:b4:e0:e1:9c:1b:39:38:3d:b5:2e:52:12:79:
         03:8e:0e:8b:f3:d7:1e:e9:e1:36:c9:68:76:14:07:11:ef:36:
         bc:cc:3d:a8:2f:4e:38:90:e3:c2:f9:67:0f:ab:c3:96:8a:fe:
         2f:0b:03:f7:fe:b6:3a:4e:6d:75:63:b3:e9:39:bf:59:b7:97:
         22:2b:87:58:26:25:46:9c:ab:86:e9:c7:6c:bb:8b:70:ae:68:
         db:f1:05:cb:3a:67:97:96:c9:78:26:b6:5a:62:65:ce:1a:b8:
         e4:1a:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:49 2026 by rpki-client