Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa
File:                     cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa (raw, json)
Hash identifier:          5Ey35yS4pWRnFXiX5P1NF3EizWA8z5Hs9goy/FTCwkE=
Subject key identifier:   70:12:EB:46:E7:3F:40:59:A2:D9:4F:F6:08:2C:F0:37:E0:34:77:17
Certificate issuer:       /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial:       019F19013E30212C28282F0497D3B1F3DC39
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa
Signing time:             Tue 30 Jun 2026 14:48:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209442
Providers:                AS: 6821
                          AS: 50973
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3e:30:21:2c:28:28:2f:04:97:d3:b1:f3:dc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
        Validity
            Not Before: Jun 30 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7012eb46e73f4059a2d94ff6082cf037e0347717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:cb:ad:84:93:1f:4f:bf:63:66:4f:5c:54:
                    e5:1e:d2:09:ca:c6:99:52:b0:ee:1a:8f:d2:4d:47:
                    74:d8:6d:47:80:1d:68:ea:e6:5f:41:85:8c:87:1d:
                    de:99:f4:63:2b:37:ba:89:9a:c5:ba:b4:df:c8:fe:
                    d6:1c:8b:ad:1f:f0:6b:b6:6a:d9:97:17:0f:f1:77:
                    71:d4:a6:ed:2b:a2:b7:9b:d3:c6:e8:69:b5:46:6a:
                    4f:e2:4b:39:09:dd:b4:1b:45:74:2b:8f:81:76:aa:
                    ae:fc:ee:6d:18:ba:d1:17:36:80:0a:e4:e5:49:b9:
                    bd:bf:05:57:56:ee:08:68:84:59:ac:d5:7d:39:80:
                    4f:c5:8c:09:aa:23:3a:74:68:4e:99:75:c7:1e:a8:
                    76:05:97:a1:3e:75:7d:03:44:61:91:28:ea:a9:31:
                    3d:2e:fb:98:3e:ee:aa:05:04:0a:4b:23:61:4d:73:
                    39:c9:8e:4e:3f:c3:f1:1d:68:b9:a8:08:f5:12:0b:
                    61:13:1f:c1:2e:7a:e9:b9:c1:17:2d:f7:d3:51:db:
                    a3:5c:8d:a4:40:0c:75:f7:89:eb:9f:e5:ba:dd:bc:
                    43:0e:e6:97:8a:78:a7:c7:01:96:e2:f0:93:ec:29:
                    ae:0f:d3:b5:5f:95:08:f2:9b:7e:b2:41:7e:20:af:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:EB:46:E7:3F:40:59:A2:D9:4F:F6:08:2C:F0:37:E0:34:77:17
            X509v3 Authority Key Identifier:
                keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209442

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:d2:e0:8f:42:ed:5d:d5:6a:bc:7f:ff:1c:84:85:eb:a0:
         03:57:50:b9:b3:0f:96:00:45:ae:dd:12:87:f1:c6:72:fc:d4:
         07:8b:13:c7:bd:55:c6:7f:d8:cc:77:03:1d:15:69:ec:e5:e7:
         cb:37:64:f4:0e:89:75:39:02:92:9b:0f:4c:e9:cf:ed:2b:09:
         87:57:13:66:ed:c2:c6:69:9e:ff:45:e3:27:0e:bc:55:2a:f9:
         d5:82:fe:e0:22:a2:b2:e0:7d:df:9d:22:76:ef:ba:17:9e:51:
         d2:6d:3a:05:24:13:1d:c2:6a:c5:bd:b6:5e:0f:5c:a1:93:e3:
         e3:c3:53:ae:c2:56:ee:1a:0b:51:c7:43:ec:9b:f7:1a:b9:8b:
         55:04:ef:7e:ae:f6:76:8e:49:5d:70:d0:ae:2c:0d:05:c8:08:
         42:52:c1:8a:70:b3:5d:f7:9e:e2:d1:78:b2:a9:a3:77:6d:36:
         a0:6e:99:07:75:60:61:7c:22:93:55:7d:2b:20:ca:3e:e9:14:
         5f:5b:71:0b:2f:70:c1:ff:04:37:9e:56:fe:64:ea:cd:b1:66:
         63:59:03:75:90:4d:7d:78:89:ec:51:50:01:a1:ae:00:40:36:
         4d:ac:75:14:39:9d:8b:21:a0:dc:db:4d:9b:2d:ae:b2:a3:6f:
         98:0d:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:03 2026 by rpki-client