Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/xsjfd4Jx3BB4y0pCdx-HAd--U4Q.asa
File:                     xsjfd4Jx3BB4y0pCdx-HAd--U4Q.asa (raw, json)
Hash identifier:          zqYKxSs7XgXHl0zv74NbGiMSvU7OIHpKmcaUZgSvEN4=
Subject key identifier:   C6:C8:DF:77:82:71:DC:10:78:CB:4A:42:77:1F:87:01:DF:BE:53:84
Certificate issuer:       /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial:       01A0D8E3FA91070AA60A5EC07DF05A94E37E
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/xsjfd4Jx3BB4y0pCdx-HAd--U4Q.asa
Signing time:             Fri 25 Sep 2026 14:06:54 +0000
ASPA not before:          Fri 25 Sep 2026 14:06:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207740
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44103
                          AS: 209533
                          AS: 209990
                          AS: 211083
                          AS: 212895
                          AS: 215605
                          AS: 216078
                          AS: 399765
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:e3:fa:91:07:0a:a6:0a:5e:c0:7d:f0:5a:94:e3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
        Validity
            Not Before: Sep 25 14:06:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c6c8df778271dc1078cb4a42771f8701dfbe5384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:63:ac:36:84:76:84:f4:59:83:32:2c:36:
                    e3:be:91:78:79:0c:7a:72:ff:2c:45:66:9e:5d:81:
                    99:6e:eb:d1:27:90:b9:28:47:79:59:ca:c1:5f:84:
                    b3:64:7e:7b:18:0a:80:04:ef:e8:a5:8c:73:63:df:
                    d1:62:c5:1d:45:1a:98:ac:e5:71:fa:d6:47:f0:14:
                    54:dd:39:c3:b3:28:44:d3:2d:f1:20:10:67:36:00:
                    71:e0:da:d6:b5:ea:5e:d7:8c:7b:b2:6d:b1:3a:c9:
                    a7:e9:83:91:0c:4f:11:cd:fb:1b:d7:83:02:d7:2f:
                    9f:1c:ad:0d:88:75:c9:3d:62:12:e8:5f:7f:d4:33:
                    ae:2c:95:6e:f1:6d:cc:ab:1a:23:6a:7f:1e:38:60:
                    95:2e:60:be:09:b6:b2:cf:52:0b:6b:1b:ee:5c:5f:
                    97:ec:ec:c1:8b:0f:01:27:3d:88:ea:75:c3:88:8f:
                    50:ab:92:0c:31:4b:3a:c0:95:09:27:76:b8:7b:c9:
                    40:1a:ee:18:27:d2:30:45:c5:54:8e:3a:c5:b0:4a:
                    7c:fe:49:92:57:c9:12:1d:cc:6d:46:df:55:7d:11:
                    99:95:00:08:9b:84:3a:c4:a6:88:0d:90:94:bc:69:
                    23:54:3a:12:3d:e6:ed:0a:59:16:b6:cb:4e:13:62:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C8:DF:77:82:71:DC:10:78:CB:4A:42:77:1F:87:01:DF:BE:53:84
            X509v3 Authority Key Identifier:
                keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/xsjfd4Jx3BB4y0pCdx-HAd--U4Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207740

    Signature Algorithm: sha256WithRSAEncryption
         77:88:29:cb:98:fd:b8:d3:63:c4:cc:b5:c1:20:f3:1b:b0:33:
         5b:5b:f2:23:55:32:e0:92:05:97:75:14:94:7c:e0:c5:bf:a5:
         fc:f8:01:3e:e7:f4:ba:0d:c3:76:71:f6:58:e8:4d:2c:b8:c8:
         23:dd:ba:27:c9:d9:28:cb:84:5d:5d:ee:43:05:ca:3d:3c:4c:
         96:10:13:87:e0:80:bb:aa:d4:35:79:35:12:7c:19:43:9e:c3:
         e4:2b:ed:df:08:63:2f:49:13:23:a4:99:5f:d2:9b:fd:0a:f3:
         5a:89:35:65:2c:0f:2f:4a:be:e8:a1:99:39:71:b1:cf:74:41:
         fe:f5:6d:bd:fc:d8:39:11:68:03:a8:64:39:e2:d0:5a:6c:7f:
         26:2d:04:ef:44:66:d6:c2:98:5d:7c:47:52:c0:bb:ee:27:83:
         cf:17:49:c3:2a:44:a9:c1:ee:30:6d:7f:52:5a:aa:97:66:aa:
         9f:6c:88:f2:06:89:6b:3e:4e:33:3e:bb:0e:d2:7c:34:9b:10:
         42:ad:cd:d1:49:86:57:2f:d0:4f:5e:d7:30:a8:fd:47:a9:24:
         47:34:2c:27:aa:af:89:45:4d:24:4f:7c:dd:54:25:fa:e5:f7:
         22:46:f8:13:9d:dd:31:de:a0:5e:39:74:be:66:dc:28:4c:cd:
         57:21:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:06:04 2026 by rpki-client