Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QvycziUKMaWmYcEcRlMRlyPIZ0c.asa
File:                     QvycziUKMaWmYcEcRlMRlyPIZ0c.asa (raw, json)
Hash identifier:          eRgM+CVbasQuEI1gHcfMnMWm39ev44mOjVcKTPnT5y8=
Subject key identifier:   42:FC:9C:CE:25:0A:31:A5:A6:61:C1:1C:46:53:11:97:23:C8:67:47
Certificate issuer:       /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial:       01A1DA6DD51968D743B8CA4EB9686A1CF3F5
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QvycziUKMaWmYcEcRlMRlyPIZ0c.asa
Signing time:             Sat 14 Nov 2026 14:19:53 +0000
ASPA not before:          Sat 14 Nov 2026 14:19:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210814
Providers:                AS: 16276
                          AS: 23470
                          AS: 24875
                          AS: 44620
                          AS: 51722
                          AS: 211421
                          AS: 212027
                          AS: 215120
                          AS: 216394
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:6d:d5:19:68:d7:43:b8:ca:4e:b9:68:6a:1c:f3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
        Validity
            Not Before: Nov 14 14:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42fc9cce250a31a5a661c11c4653119723c86747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:48:f4:c6:c7:3f:06:72:7b:bb:62:bb:ee:
                    5d:75:ab:bd:f6:12:db:84:e5:18:21:e1:9b:4e:a7:
                    09:08:01:9d:07:0c:5c:e2:3e:b6:65:81:89:1e:3a:
                    6c:62:6c:ad:5a:2c:18:33:9c:f9:79:95:cc:87:1e:
                    96:a5:05:49:dc:a9:f0:dc:95:96:06:7b:62:1f:0f:
                    da:2f:46:b3:e6:a7:7e:45:c5:23:47:f7:6f:b8:fb:
                    7f:42:83:5d:89:af:57:c0:47:32:60:ac:b7:7f:74:
                    cf:f2:22:ba:1a:76:97:16:5d:41:43:6c:4e:78:d3:
                    36:1c:00:fe:e9:4f:fa:1f:5c:e7:d0:ee:52:10:36:
                    1c:fb:63:b6:4c:fd:b5:a3:36:29:53:73:fa:1e:1a:
                    b7:89:e2:9d:fa:51:58:e4:34:39:54:c9:6c:c4:35:
                    7e:eb:10:81:d1:44:bf:d7:f3:82:29:eb:14:8e:c4:
                    63:07:25:93:b9:da:e5:cd:3a:75:ae:05:47:50:ba:
                    a8:25:11:08:9e:db:05:41:f3:ac:b0:7a:55:e3:36:
                    ef:e7:bc:4a:1f:39:dd:e8:71:95:55:4f:03:55:ab:
                    a4:7d:e8:00:6b:90:de:e8:a2:a5:5c:8a:f1:e3:00:
                    69:29:50:60:f8:f8:2e:a7:77:75:2e:c5:a4:3d:52:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FC:9C:CE:25:0A:31:A5:A6:61:C1:1C:46:53:11:97:23:C8:67:47
            X509v3 Authority Key Identifier:
                keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QvycziUKMaWmYcEcRlMRlyPIZ0c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210814

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:3a:79:29:17:6e:21:50:53:55:a1:3e:98:49:12:27:a7:
         4a:fe:40:3b:96:c5:3f:f5:34:23:a8:10:36:e4:df:1c:73:87:
         fd:8d:b9:db:3b:ee:66:2a:aa:78:e4:38:80:ec:73:49:c0:4e:
         bd:dc:71:c0:bb:ef:bd:e6:2a:98:79:dc:7d:dd:b8:81:0b:c5:
         e4:3e:b5:68:ac:8f:96:82:dd:70:be:ac:de:8f:ab:43:b8:25:
         45:dd:f3:8e:21:19:7e:ae:d3:f6:7b:a8:a1:bf:61:e9:d3:06:
         c6:81:8c:90:0e:47:82:01:ae:f5:1f:55:3f:6b:c3:ef:16:56:
         de:55:96:6b:1f:f1:c0:13:68:fd:be:a5:79:2a:ee:23:44:73:
         a3:7e:58:9c:83:70:3c:e7:de:53:e8:9f:08:67:4f:de:07:03:
         48:3b:96:8a:6c:73:03:ca:dd:03:1c:bf:75:be:2f:7f:f5:c0:
         f2:c8:5e:1b:e1:c9:b3:f0:a4:f4:57:b5:22:bc:a4:e2:a3:59:
         47:90:f3:7a:00:c4:71:66:2f:15:a6:69:36:2f:64:2b:59:22:
         f5:fb:7e:90:bb:d1:7f:f5:ed:91:d7:97:ab:d0:fd:d5:e7:20:
         36:c1:67:61:c7:a6:64:a4:75:d0:5d:68:66:30:b8:a6:53:08:
         0b:19:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:20 2026 by rpki-client