Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iYTyASUWDKAaro_VtHzd5V1NW_k.asa
File:                     iYTyASUWDKAaro_VtHzd5V1NW_k.asa (raw, json)
Hash identifier:          2dfsEYfXwhAKl0La6hBxTYJuJnYLE7CaYUYv30nw4zs=
Subject key identifier:   89:84:F2:01:25:16:0C:A0:1A:AE:8F:D5:B4:7C:DD:E5:5D:4D:5B:F9
Certificate issuer:       /CN=0285ecfe882a02a1950014524833326c9ed5d03d
Certificate serial:       019F2368AFF39CECAF796D0AE7DC78671428
Authority key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iYTyASUWDKAaro_VtHzd5V1NW_k.asa
Signing time:             Thu 02 Jul 2026 15:18:11 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208249
Providers:                AS: 42615
                          AS: 202562
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:af:f3:9c:ec:af:79:6d:0a:e7:dc:78:67:14:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0285ecfe882a02a1950014524833326c9ed5d03d
        Validity
            Not Before: Jul  2 15:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8984f20125160ca01aae8fd5b47cdde55d4d5bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:6b:58:b1:7d:bb:69:0a:63:16:15:cf:db:
                    d3:70:f7:fd:4c:2a:74:2f:ba:2b:3e:dd:2d:2a:f1:
                    aa:ba:28:4e:46:7c:5b:1d:db:2d:a2:0a:7a:c8:5c:
                    1c:c1:d4:c4:17:a5:38:f9:0d:65:40:9f:8c:c9:ed:
                    1d:53:e6:1c:f5:2b:42:a3:5c:a6:aa:44:9f:ab:9c:
                    a9:07:b7:27:81:cd:34:d4:f3:93:25:1e:80:a4:42:
                    82:09:e5:8c:25:5e:1b:66:1f:23:20:4e:25:7b:86:
                    5c:31:63:1b:4b:22:4a:59:8c:a9:8c:5a:43:4d:6a:
                    e9:dd:b2:f7:d7:49:5e:fa:a2:d9:a2:34:0b:c4:64:
                    a0:0c:1b:5a:b8:df:08:3c:ae:b7:28:20:6a:e4:1c:
                    44:12:ad:9d:f9:95:c0:fd:80:2c:87:d1:0b:b4:48:
                    31:de:1c:1a:e0:d9:fb:a3:d9:a2:73:d2:a6:53:a4:
                    e3:c3:20:39:8a:fe:a2:9c:73:84:ba:86:7e:a1:3b:
                    4d:6a:b1:f7:0b:ae:ba:12:e5:93:58:99:5b:c4:44:
                    e7:d9:2c:39:a6:77:14:b3:16:fd:ae:2c:d9:d2:87:
                    9f:d6:81:1c:25:cf:8a:c2:6a:67:7a:07:7e:73:a5:
                    cb:e4:cb:9e:d3:5c:37:d9:88:5f:50:9d:02:35:4e:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:F2:01:25:16:0C:A0:1A:AE:8F:D5:B4:7C:DD:E5:5D:4D:5B:F9
            X509v3 Authority Key Identifier:
                keyid:02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iYTyASUWDKAaro_VtHzd5V1NW_k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208249

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:5d:1f:27:3d:b2:be:a5:74:50:34:da:76:96:3a:34:5a:
         bd:f2:ae:27:94:ee:1e:16:41:ca:1c:86:2c:07:d6:7e:30:65:
         c8:48:b7:0c:c5:ab:dd:89:60:e2:18:75:77:de:43:6e:4b:38:
         ee:1e:69:c3:02:da:1e:aa:5d:0c:45:32:52:ed:82:31:a2:af:
         c0:ec:f6:14:86:b8:a0:04:0b:5c:27:36:00:77:2d:15:25:97:
         77:7d:c4:9e:25:6b:e5:e4:3e:cb:ea:33:b8:26:85:c3:59:9d:
         59:63:be:7a:11:50:9a:55:f9:6f:e7:90:8f:5a:75:c5:13:dd:
         24:0f:a9:99:d9:f7:a7:94:40:5b:7f:92:d0:da:e8:f0:1b:23:
         ea:34:75:54:f4:39:10:87:54:69:ad:61:ec:0c:9a:47:41:91:
         1a:44:16:a9:30:57:ed:78:cf:a1:c4:73:50:74:bf:1f:3d:1a:
         b0:b7:57:55:98:41:a1:17:20:63:d0:25:65:3b:d3:37:d1:b1:
         8b:51:11:77:00:b7:18:c6:72:4a:2d:0a:69:7e:31:43:0a:76:
         12:29:ec:e6:a3:4e:8d:de:5f:10:a0:59:dd:b0:30:bd:90:b5:
         5a:cc:ac:cd:78:83:55:e1:a1:f2:19:ba:77:88:25:5d:f8:c8:
         1b:9e:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:29 2026 by rpki-client