Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/cCf8bwDm6OZbLKRo45eN0GsYupo.asa
File:                     cCf8bwDm6OZbLKRo45eN0GsYupo.asa (raw, json)
Hash identifier:          pEXggXokDbhwnLHVuScY4TqYFat6YIVQQnhip9Py3E4=
Subject key identifier:   70:27:FC:6F:00:E6:E8:E6:5B:2C:A4:68:E3:97:8D:D0:6B:18:BA:9A
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       019F19015596B33F74A2A4A4BE202D11D06D
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/cCf8bwDm6OZbLKRo45eN0GsYupo.asa
Signing time:             Tue 30 Jun 2026 14:49:05 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42037
Providers:                AS: 13237
                          AS: 15695
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:55:96:b3:3f:74:a2:a4:a4:be:20:2d:11:d0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Jun 30 14:49:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7027fc6f00e6e8e65b2ca468e3978dd06b18ba9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:49:c6:e4:a4:c7:0c:79:94:b7:28:4e:fb:
                    e8:d7:c6:02:23:a5:5c:4c:ab:6f:77:ee:ad:8e:a7:
                    88:47:15:cf:86:57:38:35:7a:f3:33:81:b2:97:88:
                    55:f4:da:5c:b1:c4:84:c5:10:23:00:7d:fc:fc:2d:
                    0b:09:5f:85:44:88:34:5b:7c:32:b2:c5:e2:bc:b3:
                    89:b1:dc:4b:19:85:b2:d5:98:05:f9:f5:e1:8d:59:
                    db:f6:cb:2d:86:eb:d3:af:c5:cb:ca:7c:79:b7:79:
                    c8:41:8f:ac:70:c6:94:33:7d:13:79:c9:ad:4f:7e:
                    ef:18:19:15:39:3f:9a:24:c5:b4:9d:e1:66:22:80:
                    8d:aa:fc:2b:5a:8e:3d:0e:4b:27:60:41:a3:6c:cd:
                    50:80:25:c8:de:5f:f1:f0:78:81:e4:d4:41:1a:3b:
                    45:63:cb:46:9a:a6:81:48:58:40:66:9e:57:ae:e2:
                    41:07:b6:b9:4d:eb:0e:30:ac:12:13:d7:c7:32:3d:
                    8c:82:8e:11:d4:98:41:4d:81:72:a7:44:f5:ec:ff:
                    45:0b:9a:37:e0:98:b8:c8:2b:aa:96:f9:a5:99:78:
                    76:27:2b:66:cf:a2:2d:2d:d8:3a:30:c1:57:58:07:
                    be:e0:d5:ad:2d:c1:65:f7:de:47:22:4d:43:dd:29:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:FC:6F:00:E6:E8:E6:5B:2C:A4:68:E3:97:8D:D0:6B:18:BA:9A
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/cCf8bwDm6OZbLKRo45eN0GsYupo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42037

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:4a:27:eb:4e:6b:d0:28:a5:d6:2c:d9:aa:c1:8a:f0:c1:
         68:35:96:fe:72:f2:e3:48:41:22:1d:31:48:c1:b0:53:b4:2c:
         d5:a5:da:f5:e4:0c:34:41:06:c0:25:7e:67:01:af:90:83:5e:
         ee:91:e6:1a:06:bd:7c:5b:a7:33:31:4a:ee:8e:5a:f5:56:d5:
         2e:0e:3d:0b:77:69:d3:c2:67:29:3e:c2:41:ba:47:80:55:03:
         01:5f:5f:99:b4:8c:b7:e7:ec:4a:de:d3:a0:bb:23:6d:ac:cd:
         90:34:76:44:95:0d:2a:b0:12:56:13:79:21:cc:b9:0b:e3:3c:
         51:ec:fb:0f:2c:25:f5:88:b2:58:d6:33:a1:1c:63:7f:f0:80:
         d9:93:5a:31:3b:97:d6:d5:0f:c6:e5:be:bb:65:19:f7:6b:c8:
         a1:1b:71:e3:85:3f:e4:18:b4:36:98:9a:e3:79:27:98:cb:69:
         45:45:68:09:ec:60:83:17:6d:f8:a9:44:32:8b:55:0d:5b:ed:
         99:c1:03:8e:15:75:ad:16:76:cf:e7:b9:22:a9:b1:39:b1:9e:
         07:98:90:c9:b7:ac:86:41:63:7a:17:ff:6b:49:01:ca:13:58:
         1f:1c:c3:38:77:b6:d5:f3:89:87:c4:59:21:14:a1:1f:53:ed:
         b6:be:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:18 2026 by rpki-client