Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa
File:                     qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (raw, json)
Hash identifier:          JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=
Subject key identifier:   A9:47:76:2C:3C:91:9B:73:1C:E1:0A:81:4C:22:16:50:7C:66:F4:A6
Certificate issuer:       /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial:       019F8DE6648F3B6FABE677BC573467219032
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa
Signing time:             Thu 23 Jul 2026 07:35:14 +0000
ASPA not before:          Thu 23 Jul 2026 07:35:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207567
Providers:                AS: 49581
                          AS: 62255
                          AS: 209693
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8d:e6:64:8f:3b:6f:ab:e6:77:bc:57:34:67:21:90:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
        Validity
            Not Before: Jul 23 07:35:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a947762c3c919b731ce10a814c2216507c66f4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:d2:5f:90:db:8c:84:85:3e:ab:d5:57:97:
                    84:25:c9:37:30:9b:d7:1f:62:f0:67:76:95:89:7d:
                    4e:7b:e8:51:1f:66:55:e9:53:39:84:82:2d:cc:e8:
                    dc:3d:e8:43:c3:2a:f7:bb:3d:13:a5:f9:69:7a:4a:
                    07:fb:dc:e5:58:03:27:83:dc:46:20:f5:a6:27:3b:
                    06:17:8c:2d:24:09:59:b3:af:10:8e:9b:e7:4d:5b:
                    6d:93:ec:53:09:76:6c:d3:2a:d7:3c:51:e6:ed:3e:
                    84:b3:1e:07:c3:99:16:25:53:d9:c5:ca:df:d9:5e:
                    53:79:f7:00:6a:84:e4:2e:26:a3:f4:1a:0e:b5:cf:
                    d5:6b:bd:5c:5c:36:78:56:6a:2e:6b:ce:d2:db:6d:
                    89:e5:f7:06:c2:cc:7e:82:f0:15:c5:22:30:80:0f:
                    34:98:42:f7:40:9f:3e:1a:85:2b:01:e7:46:0c:a1:
                    e6:79:31:d9:26:51:4f:c7:23:bc:f5:94:ff:64:ed:
                    26:24:6d:24:bb:66:40:a1:28:6d:1e:cd:a3:c6:58:
                    0c:9d:40:c0:c1:14:28:7b:16:bb:31:ce:44:a8:dc:
                    97:98:8f:a1:b4:e3:1e:fd:54:d4:1f:ae:f3:6f:d2:
                    e2:10:73:3e:f0:aa:d5:5a:a8:bd:d2:02:5d:ac:9c:
                    4d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:47:76:2C:3C:91:9B:73:1C:E1:0A:81:4C:22:16:50:7C:66:F4:A6
            X509v3 Authority Key Identifier:
                keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207567

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:bb:d0:0f:18:32:03:e0:2f:82:5f:82:9e:41:86:ba:9b:
         d3:23:c3:9f:ac:bc:c2:16:5a:a3:ff:71:6d:a8:0d:63:45:33:
         12:99:4b:75:75:63:0f:a3:91:6f:5e:bf:57:b5:81:0e:4d:0d:
         0d:b4:e7:95:94:74:67:ec:0c:13:ca:86:95:5b:37:76:aa:9c:
         31:3f:64:da:19:e5:ea:93:b2:93:5b:c6:3b:85:dc:52:7b:26:
         be:a3:5e:ee:f2:9e:03:7a:9f:b8:fc:31:08:bc:21:0b:ed:50:
         a1:c3:68:31:7a:27:57:48:cc:fc:14:d2:d0:95:fc:5a:3c:96:
         24:65:54:e4:05:f1:59:f6:ab:e5:47:1f:1f:fe:d5:76:23:0c:
         85:15:d7:44:2c:0a:d4:a6:45:3e:95:e0:f4:70:d4:15:72:a7:
         ad:fb:f8:82:9c:2e:7c:bf:00:52:8d:7f:7c:28:5e:c4:17:92:
         e1:70:c7:f0:64:38:41:85:10:6f:67:9c:d5:d7:f2:d8:87:1b:
         83:df:d0:47:6d:38:6a:cf:c1:ee:20:44:ea:36:23:41:54:cf:
         0f:1a:04:3d:7a:16:02:39:ea:e8:06:76:b8:98:cf:e8:a5:f7:
         0c:17:32:95:b0:dd:9f:19:b2:03:ad:ee:50:c4:62:c6:4a:a7:
         6e:df:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:58 2026 by rpki-client