Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/RXhERJYF9F3xyAQUzqPLF6e3zPE.asa
File:                     RXhERJYF9F3xyAQUzqPLF6e3zPE.asa (raw, json)
Hash identifier:          +udagM0kkzwnlijwfgUtOgl4NvTaL2YpS35XybC3JA4=
Subject key identifier:   45:78:44:44:96:05:F4:5D:F1:C8:04:14:CE:A3:CB:17:A7:B7:CC:F1
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       019F4E697B739CABE47264EA4F783BF86F85
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/RXhERJYF9F3xyAQUzqPLF6e3zPE.asa
Signing time:             Fri 10 Jul 2026 23:42:43 +0000
ASPA not before:          Fri 10 Jul 2026 23:42:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209505
Providers:                AS: 1299
                          AS: 2914
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4e:69:7b:73:9c:ab:e4:72:64:ea:4f:78:3b:f8:6f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Jul 10 23:42:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=457844449605f45df1c80414cea3cb17a7b7ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:2c:6c:11:fb:b3:17:78:83:de:97:1e:d4:
                    48:67:5c:9d:a9:15:90:15:43:a2:80:7d:03:5a:6e:
                    ad:50:46:90:4e:c2:6c:fe:11:3d:ea:29:0c:84:01:
                    1d:97:94:5f:8e:2f:b5:d4:c0:ae:db:4b:aa:a3:c9:
                    1a:84:02:dc:84:11:8f:8b:c9:c7:dd:c7:ea:9b:00:
                    e1:1d:d7:91:c6:c9:24:0a:fd:a7:03:0c:d0:8b:ae:
                    3d:b7:60:ee:66:bf:a2:df:9f:d7:bf:81:91:95:ad:
                    87:d2:91:53:ca:14:35:ba:be:1d:ae:ec:88:d0:15:
                    6b:90:54:f8:4e:4b:ab:56:20:3e:c6:bb:33:a0:1d:
                    ab:d9:d0:57:5c:3e:96:45:48:49:e6:18:2d:19:4c:
                    ce:a3:26:c2:02:fe:12:63:17:0d:eb:be:74:32:ea:
                    5c:c2:19:2f:25:b1:2c:0c:94:f9:2e:d5:cc:d7:18:
                    84:1c:0d:ff:1c:ec:8c:f4:61:f2:24:2a:cb:04:db:
                    be:b9:0a:d2:8f:af:44:5e:72:54:b5:48:f9:1a:66:
                    bb:bd:e6:7b:94:8b:72:4c:ba:3b:88:c4:c1:ee:42:
                    76:f7:1d:66:c5:31:bf:db:d3:51:6b:9f:5a:99:17:
                    77:40:d1:08:3d:2c:da:e1:4f:d4:7a:55:8a:d6:0b:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:44:44:96:05:F4:5D:F1:C8:04:14:CE:A3:CB:17:A7:B7:CC:F1
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/RXhERJYF9F3xyAQUzqPLF6e3zPE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209505

    Signature Algorithm: sha256WithRSAEncryption
         94:db:22:4a:f8:e9:2b:71:41:1c:5f:a8:a0:a7:1e:66:37:a7:
         e9:df:38:80:94:22:da:41:4c:e1:47:f4:58:c7:3e:83:0a:b5:
         52:56:a7:fe:48:6f:b0:60:33:67:6d:d6:64:f4:f2:14:d0:ef:
         d3:f2:36:0d:e7:26:39:c4:9e:87:e3:5f:05:6c:25:fd:4c:92:
         1b:b0:58:59:f2:a1:bc:e6:52:de:d9:2a:90:ab:02:a5:81:52:
         88:11:37:6f:08:c5:87:49:58:b8:35:82:a5:94:24:c1:44:04:
         96:e4:11:da:ff:a6:a6:b2:a7:98:e7:07:25:78:c3:8d:50:65:
         2f:bf:44:f9:6b:7b:b0:5b:0b:c5:74:87:8b:07:44:8a:20:01:
         d6:3d:9c:91:69:18:2d:31:68:ad:f5:1c:cf:42:dd:fe:b6:10:
         81:d3:74:0e:32:89:ad:b3:e3:9f:64:1e:e4:f7:40:86:5a:c4:
         a0:4c:98:e1:35:e8:b0:44:e4:d0:20:22:c7:70:86:0d:7b:cc:
         61:8c:8e:8a:37:a8:44:ac:0a:fe:22:fa:f6:1c:a7:bc:ec:65:
         e3:6a:ef:6c:e6:88:0a:c9:45:4e:8a:21:2e:7e:e0:c2:6d:68:
         49:88:07:91:54:2d:12:09:b4:03:e7:25:c6:b5:57:db:e3:87:
         26:4a:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:12 2026 by rpki-client