Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa
File:                     0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (raw, json)
Hash identifier:          dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=
Subject key identifier:   D2:2B:24:C4:02:A7:3D:5D:6D:DE:F5:6D:2F:46:71:89:1E:4D:A8:3A
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019F7F3F7A10EDDE2F411FA245BD6CEFEB3A
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa
Signing time:             Mon 20 Jul 2026 11:18:14 +0000
ASPA not before:          Mon 20 Jul 2026 11:18:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            21263
Providers:                AS: 1299
                          AS: 3257
                          AS: 3320
                          AS: 3356
                          AS: 6762
                          AS: 6939
                          AS: 200020
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7f:3f:7a:10:ed:de:2f:41:1f:a2:45:bd:6c:ef:eb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Jul 20 11:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d22b24c402a73d5d6ddef56d2f4671891e4da83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:18:05:8c:49:0c:e4:e3:6d:50:c2:22:b9:ef:
                    5d:89:fd:8a:5c:60:ca:cf:64:b2:3f:42:91:bc:c3:
                    6c:2e:21:37:6e:d8:ed:36:91:39:70:a0:6e:b3:f6:
                    9e:0e:08:aa:15:21:91:75:b3:67:10:dd:f5:81:0a:
                    fe:a6:26:ba:e3:aa:84:bc:fa:09:2e:4d:21:24:6c:
                    09:c7:7c:fb:46:8b:1b:3f:18:79:b1:05:d9:14:5d:
                    93:b0:22:28:bc:67:0c:7f:56:c1:b5:4e:a5:aa:ae:
                    51:f0:45:7f:f1:29:95:7b:a9:74:1f:dc:5e:d8:74:
                    77:a8:5d:68:16:c6:62:09:1f:14:af:35:2e:fd:86:
                    79:21:2f:a7:f6:61:d2:d0:dc:bc:12:fd:d1:06:9f:
                    9b:61:2d:6e:ff:38:75:ea:b4:a5:2d:86:e5:b3:2d:
                    5e:34:83:65:e3:85:c2:8e:09:d5:66:9c:f7:f2:5b:
                    e7:76:78:2c:57:c1:c6:c8:0f:ef:6b:02:52:02:e9:
                    e9:ae:dd:ab:fd:e7:a1:f0:68:f0:22:30:6e:ff:20:
                    ea:38:64:0c:6f:2b:5e:3f:55:6d:88:8c:e7:c5:26:
                    6c:13:ed:c8:1d:3b:75:6c:3e:46:5b:57:16:a8:c1:
                    3f:ac:1f:21:8c:36:f1:7b:f9:9f:05:23:8b:1f:b5:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2B:24:C4:02:A7:3D:5D:6D:DE:F5:6D:2F:46:71:89:1E:4D:A8:3A
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21263

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:2a:c8:b2:61:28:a7:47:99:b0:1c:38:dd:74:70:66:ed:
         f6:e6:ec:c0:ff:f0:a3:9d:23:8e:a7:d2:54:fa:f7:4d:7b:78:
         0b:9c:cc:19:c4:1c:88:38:75:f9:39:a0:ea:00:65:ed:be:78:
         07:e3:ef:84:9a:27:f3:f6:28:b2:e4:e3:90:38:9a:d4:c4:18:
         47:4e:46:52:05:a6:9f:93:ea:4a:e8:88:85:70:c4:bb:3c:75:
         ae:4a:45:80:da:f4:f4:70:09:cc:49:71:32:06:ca:4c:fc:fa:
         07:5d:41:9f:a6:f3:e9:10:78:a2:8a:c6:9d:27:94:52:dd:9a:
         ea:53:54:ef:9d:da:77:1d:5d:a4:5a:8a:0b:aa:7c:4b:0c:53:
         1c:4d:6c:9b:0d:ae:09:cb:54:3e:c9:a5:a1:2f:0b:44:90:3f:
         32:18:87:68:33:69:12:db:d8:d3:bc:9e:8d:22:9c:1c:22:51:
         6f:43:fe:a2:ef:b6:3a:05:d4:b2:1e:6c:f7:b7:96:57:11:16:
         dd:6a:ff:ec:7c:c9:49:8b:b0:ee:c1:78:03:4e:93:d9:d0:cd:
         35:f0:92:50:01:f1:fe:32:ac:c3:eb:ba:e8:7a:f4:c4:bc:e8:
         8c:e1:ad:55:0d:89:12:86:14:02:bd:fc:05:79:e6:bd:89:fa:
         52:f8:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:12 2026 by rpki-client