Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa
File:                     ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (raw, json)
Hash identifier:          5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=
Subject key identifier:   65:7D:8F:0B:B9:FD:16:96:01:71:69:34:F6:A3:E6:88:2E:AB:82:F7
Certificate issuer:       /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial:       019DF92E43C6E6F96630B339A8A49BAB784B
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa
Signing time:             Tue 05 May 2026 17:27:31 +0000
ASPA not before:          Tue 05 May 2026 17:27:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197950
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:2e:43:c6:e6:f9:66:30:b3:39:a8:a4:9b:ab:78:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
        Validity
            Not Before: May  5 17:27:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=657d8f0bb9fd169601716934f6a3e6882eab82f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:68:1b:49:00:78:27:65:30:a8:20:6c:b9:
                    81:f6:da:39:be:f5:b9:da:99:5b:dc:34:4e:33:82:
                    b5:3f:76:d2:3e:67:2b:eb:12:85:4f:0a:8a:b7:dd:
                    26:db:ab:28:44:89:90:ba:96:85:da:a5:ca:58:f3:
                    32:33:a1:b9:ba:89:39:d5:6b:b2:a4:fe:8b:77:81:
                    ed:3a:a9:e2:03:26:a4:8a:a6:67:3e:41:de:d1:36:
                    7b:d1:6e:07:14:38:ff:17:b5:26:83:82:4b:14:03:
                    22:da:db:93:a7:88:86:a0:ca:71:fa:82:eb:01:75:
                    80:03:67:f8:0a:18:36:fc:3e:6e:bc:88:a9:1f:60:
                    d0:6f:a8:f5:6c:5d:25:4a:6e:56:73:2b:09:61:8e:
                    3e:2a:2a:4c:36:88:ee:1c:35:ba:20:bc:e1:09:eb:
                    80:6b:72:93:25:cb:64:3f:9b:dd:33:e2:a6:42:7a:
                    8f:a9:70:47:0e:6e:41:39:6f:85:ed:62:07:e9:72:
                    2a:71:bc:24:e5:77:05:48:00:7e:2a:7a:3b:ee:9f:
                    df:9e:11:35:74:a7:42:8c:10:02:c4:1f:75:5c:a0:
                    91:ff:be:91:fa:61:73:74:2b:05:12:69:7a:51:63:
                    1a:12:17:74:cf:02:6a:03:8c:00:bc:93:0d:ea:26:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:8F:0B:B9:FD:16:96:01:71:69:34:F6:A3:E6:88:2E:AB:82:F7
            X509v3 Authority Key Identifier:
                keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197950

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:d2:6e:82:05:36:8f:aa:03:bf:c9:89:80:71:c1:6b:61:
         c9:44:63:0d:f9:4a:79:1e:e1:49:68:1a:0e:f0:1e:34:68:17:
         5c:81:2a:3f:79:b7:d6:23:95:90:5b:f6:5e:17:80:f8:49:28:
         01:c8:a7:61:86:e4:59:f2:c9:05:f6:b9:fa:e4:f8:48:6a:a2:
         9c:a6:75:18:f1:4c:08:34:f0:ff:bd:ed:2a:c9:cd:41:a9:12:
         cd:29:39:c4:8b:cf:ea:41:76:03:46:15:c3:cb:55:29:c7:67:
         58:62:75:0b:98:a7:e6:54:9f:3d:7c:9c:55:83:11:46:ac:c0:
         1b:91:7b:e3:a5:84:3f:9c:cd:8b:79:26:39:23:44:dc:a0:d9:
         71:95:10:33:c4:65:0f:6f:17:37:ad:b9:c6:dd:55:40:a1:fc:
         b5:3f:77:09:cc:6f:bc:2c:d6:91:34:28:ba:00:46:e6:ad:0d:
         e1:b9:14:81:3f:b5:78:f9:f2:ad:46:08:3a:87:56:30:d8:66:
         75:27:3f:43:45:b9:c7:5c:57:b4:ba:44:c1:ca:92:17:8d:a2:
         8a:8e:a2:c8:81:ee:15:e2:cc:4f:30:c3:ad:95:22:4e:84:c3:
         a9:36:39:9d:6c:94:c1:9b:8a:70:8c:28:0b:d8:a6:4b:fe:77:
         94:99:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:41 2026 by rpki-client