Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/6IqI9gfABI1V0avL-WdqDQ9gNGk.asa
File:                     6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (raw, json)
Hash identifier:          x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=
Subject key identifier:   E8:8A:88:F6:07:C0:04:8D:55:D1:AB:CB:F9:67:6A:0D:0F:60:34:69
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019F190138D4CBF72EFEE6E2E501A41D207E
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/6IqI9gfABI1V0avL-WdqDQ9gNGk.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199422
Providers:                AS: 174
                          AS: 39801
                          AS: 57734
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:38:d4:cb:f7:2e:fe:e6:e2:e5:01:a4:1d:20:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e88a88f607c0048d55d1abcbf9676a0d0f603469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:88:da:c6:6c:be:4b:72:4d:59:cc:36:53:
                    47:14:41:ce:ad:58:fb:92:0c:cb:92:f2:a5:29:45:
                    eb:78:17:ff:f9:50:9f:b0:d0:97:62:f5:03:4b:1c:
                    a2:3f:29:ba:6b:29:98:9e:93:98:dc:08:de:ce:6a:
                    a7:25:43:91:dc:f8:93:d2:be:2c:e3:02:19:1f:dc:
                    49:59:ce:1c:10:b1:90:2d:4c:73:d8:ef:84:21:5f:
                    87:11:99:79:c9:9d:98:ac:20:40:24:9b:ab:35:49:
                    f6:72:89:30:a3:58:a2:df:0c:57:b1:8e:c9:48:2e:
                    e7:4d:6f:1e:9d:98:92:5c:d0:33:b2:9a:aa:02:e8:
                    b6:1d:66:6f:cb:db:13:0b:e4:0b:e9:f6:80:24:0a:
                    56:4a:f7:17:38:1c:81:5e:26:84:23:66:b2:7a:ab:
                    0d:45:c6:25:43:32:47:26:21:c9:cf:97:ff:02:50:
                    09:50:56:90:80:e8:ed:a9:08:52:39:a1:79:ab:8d:
                    c5:19:52:f7:e8:17:08:03:93:ac:bb:2b:e3:a2:30:
                    b6:6f:ff:62:eb:8a:94:9f:11:c4:1c:4d:d2:23:81:
                    70:8e:e7:c9:f0:fa:47:eb:f8:0b:ab:cb:9d:ac:26:
                    56:15:d4:86:5e:0b:56:75:5b:ec:0e:e5:b0:8b:9f:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8A:88:F6:07:C0:04:8D:55:D1:AB:CB:F9:67:6A:0D:0F:60:34:69
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/6IqI9gfABI1V0avL-WdqDQ9gNGk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199422

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:86:d7:47:0c:a1:a8:32:b4:24:78:bc:54:0b:28:de:58:
         4a:3f:2e:e0:b6:df:48:7d:20:55:00:e9:5e:30:de:2c:56:3d:
         51:4a:bf:36:3d:d5:02:f6:57:8a:3e:39:70:6f:f2:64:ca:0d:
         ea:21:77:02:29:6e:ed:88:70:84:c6:6d:5a:36:a1:b8:36:c2:
         2d:b1:bf:55:20:2c:fb:c1:24:89:9b:d7:b2:d6:9f:c2:28:ba:
         09:63:5b:52:b2:42:e5:8b:c5:69:37:6d:31:54:05:cf:a7:ac:
         40:34:5a:85:ad:02:26:8c:cd:c1:41:56:93:51:44:6b:55:45:
         0a:91:d1:20:f1:ff:c6:82:b9:06:98:62:9f:4a:4f:41:a5:f1:
         c4:40:f5:35:ba:42:5c:05:ac:40:04:ea:1f:a5:d7:d5:0f:8f:
         a4:e4:c5:87:b8:57:93:30:12:7e:79:93:a8:38:26:f2:d4:ac:
         4f:7b:19:87:95:6e:a7:7b:d1:a4:91:09:d3:fc:72:4a:da:83:
         99:60:7b:73:23:77:00:37:d3:d5:eb:ad:c9:a9:ac:6e:12:6b:
         31:6d:c7:da:fd:2f:55:32:77:06:cf:cf:49:d6:69:3f:29:43:
         fb:3e:05:b2:45:9e:c7:bb:86:64:9b:d0:28:e0:f7:bc:b6:0f:
         ae:2f:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:10 2026 by rpki-client