Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ypNsMEiA0eytbHpILkkUcrUHiuI.asa
File:                     ypNsMEiA0eytbHpILkkUcrUHiuI.asa (raw, json)
Hash identifier:          MB36B+UQExuZ+YHIlLlB3WxM9/xtf1qsLE+t7spjDH8=
Subject key identifier:   CA:93:6C:30:48:80:D1:EC:AD:6C:7A:48:2E:49:14:72:B5:07:8A:E2
Certificate issuer:       /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial:       019F190118FFB232B91022425A02A0845D3A
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ypNsMEiA0eytbHpILkkUcrUHiuI.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            40994
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:18:ff:b2:32:b9:10:22:42:5a:02:a0:84:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca936c304880d1ecad6c7a482e491472b5078ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:8e:db:90:81:41:fb:56:bc:11:2f:73:af:
                    b8:7b:76:5e:b4:f1:8c:46:86:ab:2c:35:6a:50:d5:
                    af:9e:91:22:4b:64:ef:4f:6b:2b:b4:6b:0e:04:4c:
                    96:a6:8e:05:d5:25:9f:5e:95:dc:05:b2:9c:49:81:
                    5d:a2:18:26:35:33:d8:9c:40:35:57:53:26:90:b3:
                    17:1d:ad:50:ab:77:3d:31:6f:0e:cc:e7:e1:6a:ab:
                    be:7d:b1:c4:14:e6:2f:8b:bc:8a:8a:54:ba:f0:3f:
                    ec:b4:7e:a8:1c:a6:0e:89:21:9a:33:56:e0:eb:47:
                    b9:2c:64:f5:23:e1:6f:16:b1:a4:7b:ec:c0:1f:5f:
                    17:e5:ad:59:a2:10:7b:03:e1:25:38:d1:cd:61:b4:
                    ff:2a:5f:20:2c:b4:95:f0:6b:79:b3:4c:14:bc:d5:
                    8f:94:16:f5:cb:ba:70:3e:e2:01:b5:ef:f7:a5:9d:
                    80:20:71:3d:24:08:05:d4:8c:02:e7:4a:ca:4e:2d:
                    08:be:d8:21:75:5b:89:e6:01:8d:d7:ab:06:68:e5:
                    96:76:23:c9:ba:72:d5:d8:f3:42:e7:5c:80:b4:ef:
                    b4:79:c5:f3:b9:8e:63:26:d3:65:fd:20:20:53:9a:
                    df:f3:48:cd:4b:91:39:83:e3:12:96:9c:84:6e:51:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:6C:30:48:80:D1:EC:AD:6C:7A:48:2E:49:14:72:B5:07:8A:E2
            X509v3 Authority Key Identifier:
                keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ypNsMEiA0eytbHpILkkUcrUHiuI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40994

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:b9:e6:86:70:b9:0c:65:83:c5:a4:3c:0b:a3:b6:85:50:
         55:ff:2f:bd:e4:41:e2:3e:c3:b5:42:c6:a6:20:6a:48:79:d0:
         ef:81:69:f7:51:1c:a1:c4:5b:c4:fa:4f:f7:da:f6:96:14:65:
         81:8b:84:30:ad:ab:4b:f5:6c:04:7e:fc:8d:fc:df:03:ce:f3:
         b7:8a:e9:85:27:4d:5a:c2:fa:ae:1a:1f:8f:d1:27:7f:6b:01:
         5b:f3:51:9a:24:82:c0:7f:0b:d9:84:fe:3d:91:d7:b7:ef:bd:
         84:b3:1a:b0:dd:99:5e:27:9a:08:f2:b2:fd:6b:da:2a:02:6d:
         1f:76:37:a9:3d:c8:9d:62:17:d5:cc:06:d6:6a:34:58:c0:de:
         8d:ea:39:0e:2f:b0:08:d1:73:3e:87:b7:f4:5f:9d:19:d9:b3:
         88:c5:f8:03:ad:e5:60:23:fe:94:55:75:d7:4d:24:4d:8a:16:
         da:57:eb:51:9b:68:d6:65:58:33:bb:84:e8:da:43:e2:32:3b:
         a1:16:88:24:9b:7a:45:ef:08:7a:10:17:21:ad:d9:fb:00:06:
         50:41:fa:09:ea:64:15:1e:00:03:d1:70:f2:4c:35:8a:fd:49:
         a0:84:8a:e4:0e:e4:e7:ef:4e:3f:14:21:6d:d3:b0:a0:e9:b0:
         b4:6c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:11 2026 by rpki-client