Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/i9Nq0--gwc6aMhEBRcW9umVjIDg.asa
File:                     i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (raw, json)
Hash identifier:          +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=
Subject key identifier:   8B:D3:6A:D3:EF:A0:C1:CE:9A:32:11:01:45:C5:BD:BA:65:63:20:38
Certificate issuer:       /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial:       019F236838E9C5B5746A85C08B5B4756BC3C
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/i9Nq0--gwc6aMhEBRcW9umVjIDg.asa
Signing time:             Thu 02 Jul 2026 15:17:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219513
Providers:                AS: 8695
                          AS: 35297
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:38:e9:c5:b5:74:6a:85:c0:8b:5b:47:56:bc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
        Validity
            Not Before: Jul  2 15:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8bd36ad3efa0c1ce9a32110145c5bdba65632038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:01:67:12:79:3c:d7:6f:3b:ac:de:5e:dd:
                    9d:c6:e9:d1:ce:8e:ed:99:3b:2b:7e:d2:1a:5b:b4:
                    67:88:87:9c:d7:66:5f:55:b2:48:82:5c:f1:68:57:
                    b4:66:bc:3c:da:8d:3c:18:14:00:8e:e2:02:3d:6e:
                    ec:b4:2e:72:25:80:e5:73:45:53:49:60:a9:98:bb:
                    2f:b5:b2:29:c4:53:74:25:6f:47:95:9c:9d:5f:25:
                    6a:e3:ea:c5:ba:46:25:dd:c8:a8:4e:a1:ce:52:4c:
                    ca:c1:35:e2:88:c7:78:3d:1f:84:2d:cf:22:a6:c7:
                    6e:0d:17:10:f5:ed:fc:9c:77:50:e2:72:47:e1:a1:
                    ff:96:0e:74:88:97:02:f5:9c:2a:69:53:9c:3a:63:
                    5d:e2:a6:f4:b5:7d:9f:dc:e5:89:df:05:b0:6a:11:
                    0c:7e:c0:64:7c:09:e7:cb:81:4d:91:0e:d7:d2:61:
                    8c:d8:51:6a:1d:6a:84:80:b7:b4:80:62:ac:3f:7a:
                    f0:ee:37:a9:ef:3c:6c:17:33:95:cf:a5:ed:7b:42:
                    de:35:2c:41:c7:83:3c:58:45:5a:e0:bf:6b:bd:8b:
                    77:87:fd:0f:aa:52:1f:2c:4a:e1:63:c7:fa:29:dc:
                    2e:07:fd:a4:c5:d3:24:09:0b:60:f6:16:44:07:9b:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:6A:D3:EF:A0:C1:CE:9A:32:11:01:45:C5:BD:BA:65:63:20:38
            X509v3 Authority Key Identifier:
                keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/i9Nq0--gwc6aMhEBRcW9umVjIDg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219513

    Signature Algorithm: sha256WithRSAEncryption
         85:15:fe:dd:47:4f:4c:de:76:52:b3:2e:aa:2a:fa:2b:af:08:
         89:f7:d0:e6:f6:fd:8f:01:23:d8:a5:19:97:04:32:d0:ec:6d:
         92:b3:32:8e:b8:ca:cc:55:ae:73:fe:fa:e6:2d:18:af:f8:c6:
         09:13:8c:0b:55:f8:ca:04:22:7c:c2:a0:43:c4:17:19:a7:ab:
         76:d1:3c:99:42:9f:03:e8:59:02:a2:7a:8b:f6:d5:ba:a2:45:
         76:aa:ed:12:cb:30:eb:25:57:85:81:c5:36:15:7c:92:4e:6c:
         3d:a4:4e:e2:7b:90:5b:15:c4:11:b1:fd:fa:0e:c8:2e:12:f0:
         32:5d:04:13:95:10:b0:ed:c4:ac:75:4e:54:78:8e:f5:41:f0:
         8a:a2:9a:88:54:53:64:9f:5c:e3:9e:c9:4f:68:71:fd:3b:eb:
         0d:69:6e:70:a0:38:15:b4:d3:87:ee:b6:8f:40:fc:81:ec:f0:
         f3:67:6a:7f:c9:7e:e1:5e:32:63:e4:c0:86:1e:f1:aa:c1:5f:
         ec:d4:d0:94:83:c5:55:32:6a:8e:14:41:36:82:59:08:05:2a:
         2e:fc:bb:2f:74:70:93:50:5a:dd:36:b4:28:3f:e2:c3:ed:ff:
         7f:2b:49:30:71:5d:73:86:e7:0b:b6:00:fa:70:75:61:63:ac:
         8c:79:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:01:32 2026 by rpki-client