Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa
File:                     jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa (raw, json)
Hash identifier:          ZmyieK/8MNfMxMHwBvTE99lNasjY/ja265//nNbVVVU=
Subject key identifier:   8E:7E:A0:27:D4:E8:C1:B5:63:63:FE:78:56:99:BB:E7:03:43:AE:C4
Certificate issuer:       /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial:       019F190119FCDFA7502ECEC07880FB443988
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214958
Providers:                AS: 8283
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:19:fc:df:a7:50:2e:ce:c0:78:80:fb:44:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e7ea027d4e8c1b56363fe785699bbe70343aec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:b4:42:7f:39:0d:94:79:67:51:1b:45:77:
                    b3:58:5a:bf:8e:1f:f4:dd:81:00:5d:25:a3:9c:b3:
                    54:5c:77:bd:11:d3:54:5e:7f:0b:2f:5d:e5:4c:02:
                    a9:59:09:f8:bb:8d:d9:aa:23:a8:ed:81:93:d8:69:
                    1c:c0:4f:bf:55:87:98:41:95:7b:5f:33:bd:2d:7c:
                    19:a4:40:cc:a6:05:9d:84:a4:87:83:84:84:41:bf:
                    3c:b1:bd:b3:21:c6:de:54:11:09:9e:57:ad:e8:26:
                    1b:ca:59:83:fb:b2:ac:d0:4a:76:2a:e9:45:81:c4:
                    3c:a7:f6:b5:6d:f0:1e:b0:f9:bc:9d:c4:d7:71:9a:
                    b4:dc:ad:80:da:4f:e2:f7:f8:d5:9c:a2:21:3f:31:
                    b6:3f:7f:ea:e9:3b:db:39:b7:a5:4b:b6:f8:17:ff:
                    de:f5:8f:ee:07:0d:4b:9e:d5:4b:ba:7e:03:b4:31:
                    61:cf:a5:1a:43:18:e7:24:2f:a5:52:0c:85:f2:9e:
                    26:ea:31:2e:92:0f:64:d6:75:46:f5:a0:bd:e8:63:
                    3a:bb:e9:5e:8e:aa:6b:02:96:d6:9e:18:a7:fd:90:
                    7f:5a:9c:1a:3a:82:ce:39:06:2e:dd:8a:3c:70:79:
                    f8:aa:9d:3c:7b:41:10:e4:37:f9:ab:de:7d:4a:d2:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7E:A0:27:D4:E8:C1:B5:63:63:FE:78:56:99:BB:E7:03:43:AE:C4
            X509v3 Authority Key Identifier:
                keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214958

    Signature Algorithm: sha256WithRSAEncryption
         91:48:15:e2:2e:b7:88:7c:5e:c1:d0:ac:86:98:90:fb:38:f6:
         46:84:99:ec:99:95:05:fd:15:6e:01:0e:65:1c:82:5f:5e:c6:
         a3:69:f1:4a:71:ba:e1:d3:85:24:11:29:3d:bf:75:bb:c9:b5:
         24:ea:95:99:ed:fe:4c:de:5b:73:5e:27:67:8a:aa:bc:48:b0:
         22:f6:70:f8:8d:57:39:16:27:b9:fd:5f:5d:72:6f:4b:86:88:
         e4:4a:a2:6f:e2:25:ce:b6:65:3f:a5:22:e0:d9:8a:e0:63:71:
         07:ee:0e:ad:0b:09:64:59:7f:20:14:8b:bc:af:03:76:8f:58:
         7b:09:2a:22:e9:32:8e:2f:ec:6d:02:91:9f:e4:d9:0b:48:09:
         5f:8f:e5:27:37:e2:2f:65:c9:23:da:2e:9d:eb:87:86:8c:b3:
         62:e4:c6:e2:ab:0e:48:9b:9b:05:4b:15:e5:27:c4:f1:d5:cb:
         af:ec:60:37:31:a9:de:08:9b:02:a0:c8:43:f4:f5:20:be:ca:
         75:2a:13:f7:66:e4:44:1f:79:27:68:ef:de:c9:b7:6c:85:33:
         73:2c:79:7e:1e:bf:67:fd:30:5b:2f:13:25:3e:7b:fd:42:f3:
         d9:5a:2f:4b:1a:6f:e1:9c:f7:d4:77:41:52:a5:b3:dc:55:03:
         c7:71:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:33 2026 by rpki-client