Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa
File:                     7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa (raw, json)
Hash identifier:          WmBn1Lg+ApCIR17z2ta7o3ItFSZqllaqVi6a0oV3jKE=
Subject key identifier:   EC:17:E4:78:76:35:73:D2:13:4E:AF:60:D6:4F:56:67:F9:E8:A5:20
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       019F190114B6C0DE801FCB2885B9BCEE9FE1
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa
Signing time:             Tue 30 Jun 2026 14:48:48 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200306
Providers:                AS: 6939
                          AS: 20473
                          AS: 41051
                          AS: 58057
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:14:b6:c0:de:80:1f:cb:28:85:b9:bc:ee:9f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Jun 30 14:48:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec17e478763573d2134eaf60d64f5667f9e8a520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:c4:f3:9e:41:78:bf:4c:f6:d4:5b:bd:66:
                    30:65:9e:ed:77:f9:c4:08:86:7c:99:56:06:7e:3f:
                    85:c2:b0:f3:21:3d:d9:f4:ce:8a:d6:49:d1:26:1b:
                    8c:45:85:6f:ec:b9:73:dc:97:cd:85:f4:f4:39:de:
                    b7:fd:4d:f3:cf:72:c1:1a:71:6f:9d:cd:58:f4:a4:
                    08:cf:46:c9:c2:c2:c6:93:83:4a:0b:67:ab:03:09:
                    0a:14:29:e0:6e:a6:2d:bd:eb:d6:60:72:72:95:de:
                    2f:fd:60:7b:2b:e1:6b:66:4a:86:f9:60:df:18:5e:
                    8f:88:53:46:c7:a5:fb:f8:43:70:05:8a:d4:80:c1:
                    da:b0:8a:91:41:25:78:73:47:72:a6:36:d7:81:3d:
                    80:e7:be:e8:8a:33:f3:aa:6a:50:45:71:a9:82:63:
                    27:99:be:e0:55:f3:b6:50:e3:f6:e9:93:9a:35:d9:
                    dc:ec:1c:e4:b0:31:77:11:d5:5c:cd:70:66:0d:9f:
                    cf:74:8c:5b:2d:81:c5:33:c2:b0:bf:ac:04:a3:74:
                    02:e3:66:0d:a8:41:b4:a1:d2:f2:c2:82:b0:64:3f:
                    8d:57:36:39:0c:6c:0e:cf:99:46:77:3b:56:7f:b6:
                    c1:c7:f6:79:10:91:25:7f:1b:82:f9:95:4b:13:5c:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:E4:78:76:35:73:D2:13:4E:AF:60:D6:4F:56:67:F9:E8:A5:20
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200306

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:48:6d:10:4a:57:83:fb:9a:e6:1e:ff:1b:81:aa:9b:d0:
         0a:5d:3b:27:74:5b:c3:72:dc:9d:27:3c:e9:8a:a0:96:9b:17:
         57:09:26:df:4c:cb:22:c9:89:ae:55:9b:ec:72:d3:cd:6c:a4:
         a7:11:c5:ee:8a:d1:d0:6b:3e:a6:e3:5e:af:f7:0c:9c:55:87:
         92:fc:93:40:39:02:b0:7b:24:02:fe:25:69:60:dd:50:4f:5f:
         4c:c9:ef:ca:a1:aa:54:5a:1d:ae:de:27:a1:21:21:e6:95:ab:
         15:e5:a6:4e:7f:0e:7d:77:4d:47:f6:42:6b:cd:9d:7a:bb:2b:
         4b:f2:c0:29:a7:12:fe:3e:ce:b7:28:83:27:37:64:3d:0d:09:
         d4:c4:1a:5f:7b:6d:37:09:9b:b2:f1:86:b3:c5:21:10:fa:0f:
         89:ed:48:f6:a8:e9:04:94:60:6e:51:d3:c2:27:fb:d9:41:1f:
         f7:e8:ee:81:98:c5:16:8a:b0:95:0f:8a:97:ea:9d:fc:9a:35:
         d4:dc:e5:2f:ae:0f:b4:db:7b:cc:37:b1:53:9d:a0:6f:76:99:
         38:2b:72:6c:b0:ca:89:93:9e:86:6b:40:f5:a4:4b:3b:86:87:
         5a:27:e5:65:09:8a:60:99:d5:89:fe:ae:74:03:3b:44:f9:06:
         75:e4:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:09 2026 by rpki-client