Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa
File:                     lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa (raw, json)
Hash identifier:          zJ6sva32oUPzoGiW7df7lb3v0bTwrSUf3PIERJ7PhOM=
Subject key identifier:   96:41:0D:FE:7D:61:02:91:DD:26:73:90:C2:01:6A:13:B0:FC:22:FD
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       01A0C56FB43A65B580FF5918C928659C342B
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa
Signing time:             Mon 21 Sep 2026 19:27:07 +0000
ASPA not before:          Mon 21 Sep 2026 19:27:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215236
Providers:                AS: 29670
                          AS: 50629
                          AS: 56381
                          AS: 59645
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:6f:b4:3a:65:b5:80:ff:59:18:c9:28:65:9c:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Sep 21 19:27:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96410dfe7d610291dd267390c2016a13b0fc22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:54:d8:f9:68:d3:33:f5:09:31:27:7f:ee:
                    ee:d7:a7:35:85:64:f6:66:dd:cd:72:03:60:9d:f0:
                    20:9f:ab:af:0d:d5:73:25:86:f0:2c:65:22:7b:13:
                    31:36:8e:e7:0a:30:8e:c6:fc:e8:94:4a:db:ef:79:
                    52:ca:5d:f6:7a:5d:ab:3b:3b:d6:28:d5:b2:c0:fa:
                    e1:cf:31:8a:9c:6d:23:6b:59:8c:c4:5c:24:34:04:
                    a6:c4:a7:10:c9:73:16:d2:72:9d:e2:31:7d:a5:c7:
                    fa:88:c6:bb:50:1a:72:cc:ed:ba:94:ae:c3:82:96:
                    a2:66:11:86:72:8f:b1:d4:3c:f8:3a:f5:3e:52:37:
                    d1:d7:94:9f:6f:92:8b:aa:e2:e6:56:f5:ef:d8:0a:
                    30:46:c2:db:bb:8b:eb:00:0e:49:1e:1e:36:fe:7a:
                    0d:46:bb:0d:16:ed:bc:a3:ae:8d:06:26:71:e0:c8:
                    5b:ff:52:b1:b2:d0:c9:47:cb:f0:c7:ee:e3:8f:a5:
                    fa:9f:c3:29:ef:e2:85:6f:63:2b:33:b7:7e:a5:dc:
                    16:17:85:df:e1:42:ae:9e:ad:02:4a:1d:6c:d2:ca:
                    48:b5:de:f9:99:e8:d1:0e:02:db:69:96:e5:ef:b2:
                    84:32:f9:ee:c2:4a:b3:67:16:4a:92:b2:19:d8:43:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:0D:FE:7D:61:02:91:DD:26:73:90:C2:01:6A:13:B0:FC:22:FD
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/lkEN_n1hApHdJnOQwgFqE7D8Iv0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215236

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:71:00:6a:c5:e6:ce:a9:b0:b5:85:4e:76:0d:b7:3c:a4:
         f5:f5:74:78:3c:17:c2:94:34:72:63:d1:8b:24:4c:06:6f:4a:
         0f:4d:ae:e7:fe:8c:01:57:a9:75:87:83:9b:00:d8:ed:2f:74:
         57:9e:05:33:d8:50:94:4e:44:e0:a9:91:8c:94:32:c6:96:96:
         20:ef:09:3b:4a:3b:f4:e9:f5:56:54:e8:88:f1:cf:dc:5a:a1:
         f6:e0:92:10:af:52:a6:8c:a5:3f:f3:85:32:f4:3d:34:89:d1:
         cf:c6:c0:22:0f:22:c8:77:da:50:1d:f0:e8:81:a4:3a:b3:72:
         79:31:55:a2:45:a3:8d:df:e9:16:c8:e4:a9:11:31:76:4a:a6:
         98:d0:71:35:72:ee:39:67:93:8f:2d:7c:fa:2a:16:a0:59:3d:
         5e:94:81:db:60:d9:62:d0:86:26:bf:37:f8:b2:af:bd:89:cb:
         87:6f:ff:8a:2a:33:86:95:0c:ac:bd:2a:01:9c:12:a9:8b:5a:
         d3:c3:93:c8:69:66:9f:04:ba:8f:5f:d4:75:e0:54:68:c6:93:
         bf:1e:a3:02:a2:6f:3b:cb:15:39:a5:59:86:89:ae:02:f9:f7:
         26:6d:5b:6d:43:24:79:c4:1a:c7:1c:91:97:1a:f2:04:8d:9e:
         17:68:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:54 2026 by rpki-client