Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/QlWvHkFefgt8b65GtnQ9BWdmuEA.asa
File:                     QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (raw, json)
Hash identifier:          742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=
Subject key identifier:   42:55:AF:1E:41:5E:7E:0B:7C:6F:AE:46:B6:74:3D:05:67:66:B8:40
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       019F190106AF0BE9BAB70942C8FBBFFBDD2C
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/QlWvHkFefgt8b65GtnQ9BWdmuEA.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35489
Providers:                AS: 15669
                          AS: 35761
                          AS: 39505
                          AS: 44814
                          AS: 199230
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:06:af:0b:e9:ba:b7:09:42:c8:fb:bf:fb:dd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4255af1e415e7e0b7c6fae46b6743d056766b840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:54:f9:33:85:69:57:b6:9c:84:ac:6a:6b:
                    35:ab:f7:a8:7d:8b:96:96:78:1b:57:0a:c1:4c:69:
                    30:ae:2b:26:1b:b5:59:de:cb:f8:df:31:e2:6e:fc:
                    35:49:1f:a8:11:d9:77:cb:b4:f2:06:64:d2:d3:1a:
                    3c:7e:5b:6d:2e:58:6e:dd:21:d8:b4:d1:4d:91:64:
                    bf:df:a3:16:ef:92:0e:a3:07:53:1e:68:2d:5e:06:
                    68:c2:94:25:ea:2d:4e:37:6c:3c:5f:35:07:e1:7e:
                    f1:cc:23:4b:49:e7:86:f4:ae:ab:48:67:cb:cd:11:
                    82:18:83:12:04:fb:99:03:4a:d1:4d:74:2a:86:a7:
                    a4:93:34:77:55:95:4c:00:29:e5:5d:d3:c0:5a:89:
                    e9:5c:1f:9e:1d:99:bb:7d:28:c2:2d:b8:c5:bc:b0:
                    51:eb:c8:4d:c2:91:90:8a:47:03:25:84:79:ed:18:
                    d9:3d:dd:cd:0b:93:c7:91:bd:73:28:54:71:4e:4d:
                    ca:4f:8e:34:c3:5d:d9:4f:8c:61:10:aa:98:0e:04:
                    9a:b2:53:ad:31:e3:28:4d:3e:eb:df:c9:d3:b4:47:
                    a0:e1:88:7b:3f:6d:ea:da:8c:8d:a5:62:46:5b:26:
                    b9:11:d0:26:da:09:13:4a:26:33:95:b0:52:e5:31:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:55:AF:1E:41:5E:7E:0B:7C:6F:AE:46:B6:74:3D:05:67:66:B8:40
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/QlWvHkFefgt8b65GtnQ9BWdmuEA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35489

    Signature Algorithm: sha256WithRSAEncryption
         59:be:78:7e:89:d5:58:12:f6:86:2b:76:5c:3b:12:8d:45:b8:
         60:af:7d:e0:57:dc:f0:ce:d5:81:b9:a3:f7:51:25:57:ff:96:
         ac:ba:97:72:18:d7:9b:c4:bd:ee:4e:f4:61:fc:78:9b:6c:88:
         77:32:a6:a6:e3:80:3a:94:25:a8:54:d5:39:8f:fe:fc:e1:fc:
         0c:ca:1e:19:82:50:d2:74:48:e4:34:7b:b9:0e:85:e2:b3:06:
         10:d8:fc:86:9a:2b:db:06:13:82:2c:32:97:1c:29:8c:bf:2a:
         f2:26:45:ee:c5:21:2a:ee:cf:a5:43:94:46:a1:96:b5:be:83:
         74:16:11:8c:bf:81:6f:79:39:a3:5f:0b:81:3b:33:2a:4b:5b:
         97:31:80:5c:a3:1a:f7:f2:5d:df:e8:ac:34:42:f4:fd:ae:52:
         fe:f9:aa:5b:d4:dc:ee:1b:e3:a5:7f:c8:5b:80:f7:4d:bd:10:
         45:ad:b2:4b:3b:93:2d:a1:27:e3:7c:aa:98:72:e2:13:17:73:
         e9:72:a0:31:25:6d:18:bf:b1:45:90:e8:28:4d:2d:a2:08:fb:
         96:88:95:87:b3:d8:dc:27:83:85:c2:a1:20:11:17:73:61:e5:
         31:88:1a:ad:71:6c:21:b8:31:f1:59:d3:a1:94:fb:1d:ae:5d:
         b8:06:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:46 2026 by rpki-client