Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa
File:                     IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa (raw, json)
Hash identifier:          GStHzech3OT9Y5reas02hEXtnmFliA7XicAmtAnOHEE=
Subject key identifier:   22:C3:DE:8F:37:F6:0E:7A:F8:68:E2:D1:FC:EC:C9:B9:96:8B:5E:C4
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       019F19014C3ABBC3F8736B60B9CFABC24D6B
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57027
Providers:                AS: 48715
                          AS: 51026
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4c:3a:bb:c3:f8:73:6b:60:b9:cf:ab:c2:4d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22c3de8f37f60e7af868e2d1fcecc9b9968b5ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:2e:56:9c:de:43:2e:fd:ae:7f:e5:ba:2c:
                    7d:66:71:3e:32:c4:8a:ff:1d:d5:a1:59:0c:84:c5:
                    4a:34:f0:a7:d1:b6:12:56:e3:31:bd:57:24:02:4b:
                    07:86:d5:f8:39:b8:06:16:53:9f:14:d8:5e:e9:16:
                    ad:87:39:e7:fb:c1:30:c9:fe:5f:4d:62:0b:e4:c9:
                    f7:db:28:4d:9d:22:2e:fa:fd:13:eb:53:13:67:5a:
                    ec:42:76:27:36:ee:59:35:cc:af:dd:3f:c6:cd:72:
                    3b:a9:46:b6:aa:17:9c:e2:98:1d:4c:9a:5e:86:b2:
                    8f:88:8f:ff:1e:36:c1:58:33:06:10:81:35:73:de:
                    ea:c3:9d:92:8e:c1:c8:c8:99:bf:f6:4d:63:77:c3:
                    f2:87:f8:7a:92:e2:3f:fc:7e:de:cd:86:5f:88:e8:
                    38:b2:80:a7:01:83:83:02:c0:dd:5b:5e:16:68:d2:
                    ce:31:b6:a9:95:2b:61:ee:e4:14:fd:30:01:5d:8a:
                    4d:00:f8:22:c9:f0:ff:f6:27:24:dd:2e:13:ea:ae:
                    10:38:fc:37:26:eb:21:93:2e:e3:aa:35:99:ff:3f:
                    26:68:cf:18:40:3c:89:2d:3b:bc:01:9d:93:87:15:
                    ff:7d:14:0f:53:12:10:94:bf:aa:ed:fc:d7:17:60:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:DE:8F:37:F6:0E:7A:F8:68:E2:D1:FC:EC:C9:B9:96:8B:5E:C4
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57027

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:c2:ce:b7:cc:a1:63:8c:74:a5:a6:2e:2b:12:2f:8a:0f:
         98:ad:41:59:d4:ff:a5:5d:bd:b4:ab:e9:51:34:4b:16:79:eb:
         7e:ca:09:ca:dd:a7:fc:4d:a3:df:8f:0c:58:6e:ef:dc:24:c3:
         46:8b:23:c3:e3:05:c9:0c:e3:21:f4:d6:8d:4a:44:75:4b:a5:
         bd:b4:ef:b8:79:39:05:74:87:19:3e:b4:54:5e:d6:f4:8c:5c:
         d5:b7:f3:b1:14:71:9b:4d:c8:1f:fe:09:51:f0:2e:28:10:83:
         01:10:cd:29:d6:9e:b2:7c:75:82:e9:b0:da:4c:9c:79:04:d2:
         f4:30:bc:e8:75:2d:2c:91:d0:ea:6c:6c:be:ef:f3:f1:6e:05:
         ca:ba:e5:c6:d5:59:d2:48:32:51:d2:cc:d3:7c:3a:21:0b:18:
         50:ad:e8:38:e5:c8:94:cd:ac:7b:d9:db:a9:53:c6:c1:22:1a:
         19:f3:0f:4d:6e:72:d9:66:ad:77:91:a4:7f:85:a2:02:0a:6f:
         e6:3b:51:be:00:14:47:1d:bc:2a:a6:2d:21:56:c1:61:ab:63:
         b6:98:5f:88:81:86:01:26:a7:4e:93:d1:8f:8c:10:9c:ff:39:
         25:0c:82:c1:64:c9:0d:eb:da:7c:f1:75:2d:ad:b8:50:3c:e2:
         59:8c:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:20 2026 by rpki-client