Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa
File:                     AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa (raw, json)
Hash identifier:          H7RFq89YoSrzmmDi/9xMxCLOW54NyDvA/cZq9dYzaD8=
Subject key identifier:   02:5C:50:E6:4F:AE:F8:EB:9F:F2:FF:3C:0F:76:C4:88:4D:E6:FF:0F
Certificate issuer:       /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial:       019F19010B83C066A8DAF2C72C5A5E260DDB
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa
Signing time:             Tue 30 Jun 2026 14:48:46 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208015
Providers:                AS: 3320
                          AS: 8220
                          AS: 8881
                          AS: 34549
                          AS: 208016
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:0b:83:c0:66:a8:da:f2:c7:2c:5a:5e:26:0d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
        Validity
            Not Before: Jun 30 14:48:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=025c50e64faef8eb9ff2ff3c0f76c4884de6ff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:36:bf:8f:74:e2:69:82:1d:e9:06:10:be:
                    db:c0:55:a3:5f:ca:58:47:57:89:3f:8f:40:7f:37:
                    a1:cf:f9:ee:38:0f:ec:40:87:50:8f:a0:8f:33:3a:
                    71:01:5a:1e:f1:a0:e2:9a:7d:2e:84:a0:41:a9:89:
                    2d:2d:e3:67:12:22:9a:72:2b:a3:cd:65:ce:4a:d7:
                    a5:8f:77:24:f8:7e:3f:a5:a3:a2:b2:7d:9e:a2:c5:
                    fd:bc:b1:af:d5:51:bd:3e:74:98:a9:01:88:a2:9e:
                    06:da:6e:78:7f:09:6b:df:9b:cb:55:a2:92:07:79:
                    fd:2d:8a:5d:0d:ce:44:ee:06:0d:f0:18:aa:04:9c:
                    d7:d5:e8:a1:c1:1f:c2:0f:a4:04:ce:05:79:8c:a1:
                    ea:01:70:99:7e:14:ec:48:b7:1e:a5:d6:4c:e2:ea:
                    be:90:9e:0b:a0:73:18:b5:e9:b9:44:d8:31:0f:94:
                    3f:45:30:cb:03:bd:7c:6f:7d:70:11:08:52:04:0d:
                    c6:8d:a5:61:01:8f:b2:59:dc:06:fc:ba:b1:a8:b0:
                    90:d7:0c:3e:a0:cf:50:4f:0b:c3:4e:11:7a:4a:1c:
                    3a:cf:d4:23:7a:91:fe:7d:70:39:2e:07:c4:a0:f0:
                    cf:15:62:2b:f3:65:3b:ba:06:e9:3a:35:a0:5c:ca:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5C:50:E6:4F:AE:F8:EB:9F:F2:FF:3C:0F:76:C4:88:4D:E6:FF:0F
            X509v3 Authority Key Identifier:
                keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208015

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:2f:15:6c:88:87:67:ba:51:f0:b6:6a:c5:ca:7c:a6:f4:
         64:a4:5a:b6:eb:19:0c:a9:00:e9:b0:4d:8c:4c:43:ad:a8:38:
         15:fe:65:9d:b2:c3:87:87:eb:8d:99:0d:73:86:dc:6a:f3:98:
         eb:ca:5a:fd:b1:a8:2b:c3:a2:e7:de:3a:96:38:42:47:8a:b0:
         25:a2:f6:b6:05:61:1b:9a:b6:51:4f:94:5e:d7:95:de:84:d3:
         24:e0:3d:f1:e2:74:f4:30:02:b2:c6:19:13:ac:05:64:03:67:
         26:fd:8a:f1:1e:3c:0c:e4:22:cc:9d:e6:b6:aa:56:25:98:99:
         c5:2c:5f:3a:4f:2a:8b:ab:d7:31:93:59:8d:d2:b8:85:4c:45:
         72:39:90:7e:ea:3d:18:b7:1a:6a:2d:f7:51:8a:64:94:3f:51:
         c3:dc:99:ed:f0:80:2e:84:15:0b:39:86:ff:53:ce:22:ad:00:
         f1:bc:2b:7d:0d:fd:63:2a:11:f3:aa:13:5c:16:84:c7:87:e4:
         81:a4:3c:ca:5d:a1:9e:e8:f8:45:21:03:7b:c6:5d:38:85:cb:
         e6:5e:ce:bf:7b:36:64:4d:6a:40:f4:12:d9:bb:f2:c7:9c:bb:
         a9:d9:5f:8b:e8:d9:2e:ed:70:0d:d1:a7:10:5d:eb:53:09:4a:
         50:ea:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:20 2026 by rpki-client