Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/4PxSOFxc0wo3RyCyPwnzpG7SW3I.asa
File:                     4PxSOFxc0wo3RyCyPwnzpG7SW3I.asa (raw, json)
Hash identifier:          MoJhVADP7xBfaO7+0KXXGHqsRy7FuOeFqRimkpvLz4c=
Subject key identifier:   E0:FC:52:38:5C:5C:D3:0A:37:47:20:B2:3F:09:F3:A4:6E:D2:5B:72
Certificate issuer:       /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial:       019F190116EE85CD288B4D65887B8444762F
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/4PxSOFxc0wo3RyCyPwnzpG7SW3I.asa
Signing time:             Tue 30 Jun 2026 14:48:49 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208702
Providers:                AS: 6939
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:16:ee:85:cd:28:8b:4d:65:88:7b:84:44:76:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
        Validity
            Not Before: Jun 30 14:48:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e0fc52385c5cd30a374720b23f09f3a46ed25b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:7b:0a:fd:b5:83:4d:5e:e5:67:04:ed:03:
                    8c:98:c2:58:11:3d:b1:5c:92:86:05:f8:4a:d0:15:
                    ca:8e:e4:95:bd:b4:2b:be:e6:8f:f3:39:52:d5:e8:
                    16:40:da:3a:f5:f1:8d:32:00:9c:04:9e:87:cf:33:
                    69:7e:c8:3f:5d:e9:63:25:7d:b1:67:c4:89:77:c1:
                    5f:b5:0a:a3:3a:f0:99:0e:d5:c2:f2:fb:fe:3e:0b:
                    47:97:07:31:f0:ef:8a:58:bf:74:33:1c:fd:19:02:
                    65:e8:3c:87:00:10:e0:e6:cf:8d:df:59:22:27:da:
                    bb:fb:3e:c8:e5:95:91:94:65:d1:d0:cf:6c:86:55:
                    31:fc:88:2a:6c:46:f9:29:93:da:aa:25:ea:d1:0f:
                    3b:3e:00:2c:b5:d4:9c:5b:91:41:12:4b:a3:b3:83:
                    33:a0:8b:35:3d:ef:bd:cb:62:c0:28:3a:4d:fb:b6:
                    bf:18:06:b6:62:4e:51:48:37:19:af:23:06:2b:54:
                    22:ae:11:22:4f:01:6e:9f:c5:90:41:6d:d8:64:cd:
                    b6:d3:24:21:e1:36:ee:55:9a:82:aa:df:4b:ee:df:
                    47:b6:da:bb:79:fa:f8:11:42:a0:dd:46:a0:cb:c6:
                    75:1d:49:6f:de:62:54:e6:02:a5:e9:ab:8f:26:59:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:52:38:5C:5C:D3:0A:37:47:20:B2:3F:09:F3:A4:6E:D2:5B:72
            X509v3 Authority Key Identifier:
                keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/4PxSOFxc0wo3RyCyPwnzpG7SW3I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208702

    Signature Algorithm: sha256WithRSAEncryption
         12:be:39:77:9e:f7:65:23:c4:91:d9:5e:eb:97:0e:77:1a:0a:
         c3:e7:c0:ae:be:d5:a5:e0:32:ae:38:5e:13:d3:6f:99:de:db:
         e0:f5:2b:31:88:b0:bd:92:8e:dd:65:51:97:e4:92:6a:f1:d6:
         6b:ae:8e:24:a9:9b:ad:0d:45:64:7a:bd:9a:96:62:61:fb:87:
         bd:a4:5d:99:cf:3f:a7:0b:b1:b6:54:ec:98:81:1a:21:c7:43:
         62:bc:8e:b5:7b:54:75:93:7a:64:e9:28:2b:09:dc:60:02:fb:
         29:80:ac:98:e1:a0:71:da:a2:78:32:27:0c:36:fb:15:da:c4:
         28:81:45:a4:fc:8a:e6:55:3a:40:a8:15:1d:1c:bc:2b:37:4e:
         62:40:72:6c:5e:3f:d4:7d:04:91:7c:e7:0c:ff:e1:4e:33:e6:
         af:1a:53:3b:8a:aa:ca:68:6b:ff:99:be:79:90:62:a5:ed:57:
         1a:9a:70:18:98:8d:93:d3:d6:b4:85:01:15:fb:25:2e:6e:8a:
         4c:e3:af:05:df:78:a2:e9:52:e1:9c:c0:11:30:f4:71:48:3b:
         88:30:74:1e:de:15:93:94:46:b1:26:54:14:2e:96:42:95:a0:
         32:d5:1f:fa:15:a9:3c:2c:b6:d9:9e:92:2b:64:cd:6b:33:5d:
         61:8b:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:59 2026 by rpki-client