Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa
File:                     1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa (raw, json)
Hash identifier:          nyGQDkF0li5XOfPiwvvNf9NjNB6Be0Rtz+hzPp9tCT8=
Subject key identifier:   FB:43:F9:57:95:32:B9:E3:0D:76:F3:5D:D8:37:EF:B9:22:43:2E:62
Certificate issuer:       /CN=2228827553542c949f14acc5619c386a29b32f68
Certificate serial:       019F2368E01619F2C2FDF8B7B572AC9666C0
Authority key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa
Signing time:             Thu 02 Jul 2026 15:18:23 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203913
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:e0:16:19:f2:c2:fd:f8:b7:b5:72:ac:96:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2228827553542c949f14acc5619c386a29b32f68
        Validity
            Not Before: Jul  2 15:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb43f9579532b9e30d76f35dd837efb922432e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:42:77:36:1d:2a:74:c5:a6:00:d2:48:6c:
                    49:70:07:bc:3f:1f:18:8c:f2:1b:6e:43:5f:9a:e9:
                    b1:6c:c8:5a:1e:47:a8:f1:a9:1a:72:03:f5:2c:b0:
                    81:da:94:04:4b:fe:a5:77:0e:cf:5a:58:cf:4e:4f:
                    39:13:56:5f:9b:61:66:46:c4:c5:a0:2d:d1:95:5e:
                    47:9f:75:79:a9:41:28:56:da:be:2e:dc:2f:bb:f8:
                    38:b2:37:f4:4f:8b:0b:9b:2b:28:43:f5:05:50:c9:
                    82:21:cd:aa:6b:3f:b5:6d:b0:ad:79:05:e4:ad:97:
                    f7:d6:cf:83:f9:8a:b1:7d:48:8f:51:bb:e8:67:b6:
                    0b:6c:61:08:f3:87:dc:8a:a4:73:21:81:c5:2a:e5:
                    8f:51:87:ff:74:68:20:0c:65:9d:65:79:b6:2f:7f:
                    63:da:31:92:28:95:81:78:74:1e:54:9f:1e:78:2d:
                    c8:2b:24:8a:44:6f:92:ce:ed:ed:02:91:bc:a6:6d:
                    9c:1e:81:82:9c:75:d9:b1:82:9c:e5:03:29:06:bc:
                    99:1c:c1:89:1d:2d:53:ca:00:a8:57:58:dd:f0:da:
                    ef:b2:db:9f:69:df:bd:14:6e:da:89:21:db:da:53:
                    9a:04:4e:f4:6e:90:99:fb:54:8a:a6:75:99:37:18:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:43:F9:57:95:32:B9:E3:0D:76:F3:5D:D8:37:EF:B9:22:43:2E:62
            X509v3 Authority Key Identifier:
                keyid:22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203913

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:62:20:08:8d:cd:90:96:c6:e6:83:70:8e:71:33:68:84:
         70:af:00:11:d0:cf:f6:27:0b:0d:be:bf:62:9f:5f:88:a8:34:
         e6:b5:49:28:54:dd:47:e3:4c:55:7d:d9:e0:62:26:a2:25:70:
         dc:df:5b:4b:be:ac:2e:90:6b:f0:fa:89:b7:37:30:77:8d:57:
         20:07:a4:e0:95:63:fe:2f:e7:f6:e2:a7:b1:82:0d:c1:ea:ac:
         c0:cd:e8:2c:41:93:5d:98:1c:1e:32:02:d7:84:21:7d:e6:64:
         53:ed:ff:ea:ff:38:35:0d:d9:fd:8c:da:39:65:3c:86:2e:59:
         2c:a7:1a:e1:88:7c:33:cb:a0:71:bd:5a:e0:e9:7f:a2:79:8c:
         25:a4:c0:41:f8:4b:8f:79:47:57:8c:6f:10:0f:cf:b2:1d:f4:
         b8:ff:4c:3b:c5:14:b4:3e:5c:b2:d6:9d:a6:da:39:d7:eb:0a:
         74:b7:9f:de:20:e8:6b:29:3a:a6:8c:cc:24:3f:f5:4f:ec:bc:
         59:e6:f5:4c:f5:52:c6:1c:2c:1e:2f:1a:88:42:6a:0b:e0:ea:
         8d:a5:de:6a:20:84:fe:4b:73:20:64:c0:e4:0b:03:c7:46:aa:
         65:48:4b:19:92:12:6f:ca:0b:3c:b6:b1:05:77:bc:2d:b9:d1:
         a3:61:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:54 2026 by rpki-client