Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa
File:                     fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa (raw, json)
Hash identifier:          vnqoM5a+GH/Bcj8OwND/TYSLxt03hi6ZcbKX0HMYzDg=
Subject key identifier:   7E:BD:94:D4:44:D2:04:36:98:B6:99:9E:97:D4:BA:CF:60:05:F1:0D
Certificate issuer:       /CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Certificate serial:       019F236843A7961F9CAE0873CCDA2A40C269
Authority key identifier: 1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa
Signing time:             Thu 02 Jul 2026 15:17:43 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199734
Providers:                AS: 50338
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:43:a7:96:1f:9c:ae:08:73:cc:da:2a:40:c2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
        Validity
            Not Before: Jul  2 15:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ebd94d444d2043698b6999e97d4bacf6005f10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:3b:43:cd:f2:3c:2b:2b:12:d5:be:e3:c6:
                    58:eb:06:60:e8:0e:71:aa:26:e5:3c:0c:72:04:e3:
                    cc:7c:95:ac:0a:cc:8a:7b:32:67:60:13:f4:af:ee:
                    63:be:6b:7f:f8:0d:10:9b:8c:35:e2:00:b7:f1:ca:
                    a9:7d:7c:34:66:1d:37:c3:d9:16:7c:1b:c5:7e:7b:
                    e2:01:2e:b3:06:3c:9e:2d:66:69:71:a5:a7:ad:b3:
                    d4:f5:8e:e1:3d:ad:da:06:1f:35:59:46:ff:04:46:
                    bf:30:ce:d1:be:cc:65:16:6d:87:a6:7d:b0:a3:c1:
                    a6:37:5f:56:36:34:ae:e2:cf:ed:db:bb:65:06:14:
                    50:e5:ee:5e:cd:05:8d:34:0f:5b:b9:43:fb:d2:cc:
                    4c:33:b7:47:7b:6a:41:89:a5:47:15:22:d4:f4:0c:
                    28:10:e1:62:58:b6:c3:69:63:3f:34:d2:db:42:cb:
                    ef:4a:b9:e2:c6:2c:91:54:5c:d3:49:c1:7d:75:07:
                    ee:d4:ee:d1:f2:71:9d:d0:23:00:39:9e:13:55:5b:
                    16:96:e2:5b:f7:e1:7c:f4:3b:83:af:57:2a:bf:6e:
                    7d:20:7b:7e:7b:32:29:9c:80:8d:68:5e:f6:f6:09:
                    e2:4c:cc:7e:b3:04:8a:ec:0a:10:cb:e2:e0:26:80:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BD:94:D4:44:D2:04:36:98:B6:99:9E:97:D4:BA:CF:60:05:F1:0D
            X509v3 Authority Key Identifier:
                keyid:1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199734

    Signature Algorithm: sha256WithRSAEncryption
         0a:b7:6a:b4:f4:11:3f:d1:22:15:fb:a7:03:98:27:de:92:3c:
         a9:4d:4f:56:0b:57:82:f1:70:7d:67:fb:f7:b1:2b:5f:76:41:
         a6:71:69:e9:4a:eb:01:43:d3:8a:3e:2d:be:5c:39:6f:39:c2:
         24:82:ea:db:35:71:66:2a:a8:e3:e0:df:47:c5:96:ae:b2:56:
         9d:70:cd:17:47:4a:cb:c0:14:6f:b6:8e:ac:74:9b:d1:0e:21:
         a8:53:c1:2d:ad:06:46:19:0d:a0:aa:1c:41:6a:51:10:e6:da:
         2b:1c:db:22:fa:ec:34:cc:bc:e6:1f:c9:cb:cb:2e:09:8f:26:
         ad:8c:27:ed:91:31:f7:bb:93:b3:21:57:48:3a:1b:07:b6:63:
         af:82:b4:ad:72:3c:6b:21:20:57:b9:35:62:17:33:98:93:8d:
         93:76:6d:40:9d:49:0c:cb:3b:b7:2b:1a:5e:d7:1c:94:61:e8:
         f7:37:bf:52:67:fd:91:74:a2:9a:35:48:45:d6:4f:11:24:0d:
         27:b6:36:46:44:c2:d6:89:1a:d6:b6:cb:5f:f7:09:8c:bf:46:
         93:9e:48:69:1f:38:d4:49:96:2b:6d:94:63:44:31:38:46:cc:
         8e:d3:c6:47:66:06:95:e1:71:a3:4e:4c:12:81:b3:a5:ac:6a:
         4b:2a:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:29 2026 by rpki-client