Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa
File:                     LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa (raw, json)
Hash identifier:          HeYlfayHJfnirL1LiLShWkumJCawOk5vgyurfllDT3E=
Subject key identifier:   2E:23:E6:51:7C:76:9A:7D:27:24:D3:C0:E9:09:B5:0D:FA:51:21:A9
Certificate issuer:       /CN=37400faa27667093faee52d51b771564883f4052
Certificate serial:       019F556003AE3F0DE048CB3271DFD8CE699B
Authority key identifier: 37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa
Signing time:             Sun 12 Jul 2026 08:09:43 +0000
ASPA not before:          Sun 12 Jul 2026 08:09:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219272
Providers:                AS: 41051
                          AS: 207841
                          AS: 209533
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:55:60:03:ae:3f:0d:e0:48:cb:32:71:df:d8:ce:69:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37400faa27667093faee52d51b771564883f4052
        Validity
            Not Before: Jul 12 08:09:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e23e6517c769a7d2724d3c0e909b50dfa5121a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:a5:ad:84:f1:1d:01:10:25:0f:aa:36:b8:
                    32:c3:ed:ba:6b:86:14:13:28:a9:62:00:22:d8:bf:
                    64:1f:b8:27:ae:84:45:98:27:5d:80:2f:64:db:05:
                    65:ed:48:46:3d:15:81:42:c0:e8:05:5b:aa:5b:73:
                    0d:62:c3:cf:61:fa:e7:69:ac:b4:35:c9:92:76:1f:
                    aa:a2:3b:e8:3f:a9:29:1e:f6:4f:b6:55:4c:47:e6:
                    00:17:17:ed:af:ca:1c:9d:d8:b5:8d:35:9d:36:49:
                    36:1a:08:1a:48:6f:c4:28:47:da:8e:fc:c8:d8:6b:
                    15:22:9e:fd:b7:37:69:6b:32:87:b0:79:2c:69:05:
                    29:1f:c6:f2:80:62:58:cf:15:64:2f:d7:b8:02:d7:
                    89:24:6e:03:51:81:b0:82:2b:02:d1:68:c4:e4:33:
                    b1:a8:e0:2c:8d:4d:44:b3:d2:d7:b2:a6:21:91:d7:
                    9c:fd:34:c3:5e:07:8a:ba:5c:a2:d6:43:ba:7b:55:
                    14:d6:38:b6:2e:c4:97:bf:48:88:98:dc:26:e2:83:
                    65:17:98:27:aa:f4:ec:bc:99:12:e0:69:4d:e1:9b:
                    48:a7:07:c6:2d:58:3b:e6:82:68:a6:b1:7f:15:e0:
                    94:d5:48:59:5d:c0:27:57:45:cb:80:86:5e:e9:fe:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:E6:51:7C:76:9A:7D:27:24:D3:C0:E9:09:B5:0D:FA:51:21:A9
            X509v3 Authority Key Identifier:
                keyid:37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219272

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:a8:b9:bf:93:e4:a1:64:ca:bd:be:56:e7:6b:ec:3d:4e:
         f4:c4:c0:12:96:ab:c7:08:79:8d:98:f5:86:94:ac:53:8f:3a:
         76:ec:3b:f9:73:6c:10:85:5f:ba:3d:80:86:93:8f:13:97:1b:
         73:cd:53:de:d2:c0:32:d0:3a:f4:f8:a5:d9:4d:46:ff:58:13:
         1a:67:49:bc:73:5f:8a:8a:ab:60:3a:fa:3b:26:b7:4d:de:46:
         90:5d:74:9f:6d:b9:83:63:18:d0:21:20:0f:d5:f9:a9:5d:1a:
         6f:8c:44:c3:e3:b5:5f:47:16:c7:ce:b3:ab:ff:d4:10:d4:71:
         1d:72:05:39:c7:57:11:e9:b1:9b:15:47:d0:cd:79:62:1e:b6:
         ed:e3:eb:0e:be:96:f8:80:66:c6:d4:2a:f8:d4:55:de:33:e5:
         8b:9b:2e:82:87:43:73:47:db:ab:b4:3d:a3:ae:4d:42:e7:c1:
         38:2b:63:07:10:cf:e1:71:a8:f0:db:51:a7:33:2b:81:87:d7:
         c2:78:6b:a1:7c:15:ad:57:05:41:c8:83:ef:10:ba:52:02:6e:
         5a:19:d7:c2:3c:a0:e6:06:be:48:3e:0b:ba:3e:08:74:76:eb:
         8d:14:b6:83:b7:aa:9c:04:99:25:01:ac:e4:02:7a:66:81:30:
         92:6a:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:18 2026 by rpki-client