Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/TVkiRXXbiNeek8u54GLPamoS8ts.asa
File:                     TVkiRXXbiNeek8u54GLPamoS8ts.asa (raw, json)
Hash identifier:          4K43HTfZssyXoWOZbLXPc82k9xpp+VV2pw66WoB3LbU=
Subject key identifier:   4D:59:22:45:75:DB:88:D7:9E:93:CB:B9:E0:62:CF:6A:6A:12:F2:DB
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019D2632D5A7CB97D65F5CA1FB2E69B1A0B0
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/TVkiRXXbiNeek8u54GLPamoS8ts.asa
Signing time:             Wed 25 Mar 2026 18:12:38 +0000
ASPA not before:          Wed 25 Mar 2026 18:12:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204464
Providers:                AS: 11967
                          AS: 24381
                          AS: 34800
                          AS: 34927
                          AS: 41051
                          AS: 44393
                          AS: 49581
                          AS: 56755
                          AS: 58057
                          AS: 62403
                          AS: 199746
                          AS: 205305
                          AS: 209874
                          AS: 212232
                          AS: 212895
                          AS: 213409
                          AS: 213413
                          AS: 213449
                          AS: 214243
                          AS: 214420
                          AS: 215569
                          AS: 215828
                          AS: 393577
                          AS: 400212
                          AS: 401753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:32:d5:a7:cb:97:d6:5f:5c:a1:fb:2e:69:b1:a0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Mar 25 18:12:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d59224575db88d79e93cbb9e062cf6a6a12f2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:7e:5a:22:10:ef:27:97:1b:a4:29:22:e8:
                    b5:19:c4:24:c9:b4:70:0f:4c:9b:67:1d:7f:6e:e4:
                    60:85:b2:fc:80:e6:89:09:b6:13:4f:d5:ac:ae:7b:
                    e4:da:a5:2e:82:33:1f:b2:f3:24:b4:2d:fe:45:ce:
                    29:2a:2f:43:51:7d:55:01:76:97:05:75:7b:17:b2:
                    3e:08:e9:d9:bd:d5:a0:e5:0c:26:ab:83:9a:81:b3:
                    1f:39:b4:c3:49:b3:b5:6a:6a:a6:e4:fc:38:d1:9a:
                    9f:7e:48:59:51:8d:79:35:80:07:e1:cc:12:b7:97:
                    76:38:c0:a4:a9:e0:e1:13:04:98:d7:04:6a:28:4d:
                    3e:a1:bf:d1:7c:da:cb:c3:e4:8b:f0:40:6e:15:44:
                    ff:a0:f8:15:50:40:06:20:fe:0f:22:62:a7:db:cf:
                    a6:2c:9a:c2:75:f7:ed:2d:7b:87:2c:c1:55:b5:ef:
                    6e:43:de:6c:a1:a3:84:58:07:f7:7f:1f:86:11:fe:
                    77:35:13:5d:5a:46:c1:22:c4:23:29:02:60:8a:4c:
                    1f:7a:59:bc:32:99:67:0d:22:d6:c6:ce:5a:4f:05:
                    21:cd:6e:dd:7a:0d:70:73:12:7d:98:b4:fb:0c:13:
                    40:09:27:fe:d6:e5:64:2b:f3:54:c3:99:e8:29:f0:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:22:45:75:DB:88:D7:9E:93:CB:B9:E0:62:CF:6A:6A:12:F2:DB
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/TVkiRXXbiNeek8u54GLPamoS8ts.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         d0:44:9e:92:57:b0:ba:ba:23:dc:21:3b:74:05:30:a3:fd:76:
         96:f4:43:4d:d9:51:09:d0:a4:3e:92:08:c7:08:3c:db:5e:2f:
         e2:99:bb:03:98:fe:4e:a4:ba:aa:e0:2c:8b:01:bc:3a:ec:64:
         92:c8:0b:30:45:0d:21:e5:71:16:10:b0:36:45:df:58:09:67:
         3d:f4:22:b7:aa:0c:4f:71:45:e3:43:9c:31:d6:31:dc:d8:00:
         1f:7a:02:48:25:5a:97:09:85:0b:69:42:cc:ba:81:4c:c1:46:
         8b:aa:20:a2:d9:bb:e2:f8:88:0c:52:d6:9c:1d:68:bd:9b:6a:
         aa:f9:ea:1a:c3:8e:10:50:ab:7d:2e:dc:09:fb:81:aa:fc:d5:
         81:ab:90:b8:92:45:90:28:1b:8c:bb:fa:fa:0a:e9:56:ee:df:
         6c:d5:b9:c4:74:cc:a4:75:1e:c4:6a:08:1c:aa:16:3b:e7:53:
         17:d4:f2:31:0c:f2:8b:85:79:c2:d0:eb:7d:ff:37:46:0e:a1:
         32:a9:b7:45:d0:54:94:bf:65:6f:b7:28:59:cc:ef:16:d6:3d:
         f2:bd:45:7e:3b:8f:f4:e4:03:cf:a1:5f:09:ab:46:0d:6a:36:
         b8:e4:f8:30:e0:1d:15:01:5f:de:ca:26:1f:6e:ae:f9:3e:ec:
         93:a4:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:05 2026 by rpki-client