Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/a6J81QonSsTccvqZVJkyGlBa69M.asa
File:                     a6J81QonSsTccvqZVJkyGlBa69M.asa (raw, json)
Hash identifier:          WPKCkMV0DzO86llerGKIqkv8+5odghDk78KEIrLcQIY=
Subject key identifier:   6B:A2:7C:D5:0A:27:4A:C4:DC:72:FA:99:54:99:32:1A:50:5A:EB:D3
Certificate issuer:       /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial:       019F190142CE133C988E7CD47841102896CA
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/a6J81QonSsTccvqZVJkyGlBa69M.asa
Signing time:             Tue 30 Jun 2026 14:49:00 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12637
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3303
                          AS: 50673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:42:ce:13:3c:98:8e:7c:d4:78:41:10:28:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
        Validity
            Not Before: Jun 30 14:49:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ba27cd50a274ac4dc72fa995499321a505aebd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:ea:e1:7a:b5:b9:74:21:48:c9:61:cb:b5:
                    fd:27:82:68:72:62:2d:bf:0d:db:c7:7b:24:1e:1b:
                    c3:ab:b0:a9:98:bd:0b:ff:50:6e:74:0c:73:fb:2f:
                    bb:1f:8a:e4:c3:2b:8e:c2:54:ea:0c:fc:2b:41:2a:
                    d4:fc:26:4b:f1:56:88:f1:1b:1d:d7:7c:c0:ae:a5:
                    7d:05:e7:d5:4b:c6:ae:4b:88:c9:39:82:be:92:ac:
                    6e:dd:f3:5d:be:ba:05:5f:81:c3:d8:68:61:07:dc:
                    da:c7:b3:62:66:f7:a0:c0:a0:8e:ed:80:02:15:c4:
                    89:1c:b0:3e:1b:76:1c:3c:80:f9:e5:bc:94:41:3f:
                    84:55:c9:b6:5c:cd:17:7d:46:0e:f0:9b:5e:24:db:
                    89:ea:8f:42:13:ad:5a:9c:d5:f5:0c:74:ef:3a:45:
                    69:e2:8d:2a:86:5f:7c:91:a6:4d:41:1a:8d:36:6d:
                    f3:83:69:59:a9:b2:8e:ed:e6:78:b2:88:a7:34:7a:
                    d4:8d:97:69:d4:86:80:c7:16:73:6a:a4:62:c0:89:
                    0e:e6:4c:c6:9a:e0:92:e0:c1:af:4b:e6:24:3c:ab:
                    40:cf:10:17:cb:aa:88:77:2c:e1:1e:e7:99:3d:86:
                    4f:b1:bd:f5:b3:92:d2:9c:41:9e:bc:44:e5:50:ab:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:7C:D5:0A:27:4A:C4:DC:72:FA:99:54:99:32:1A:50:5A:EB:D3
            X509v3 Authority Key Identifier:
                keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/a6J81QonSsTccvqZVJkyGlBa69M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12637

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:f5:9c:6f:c4:7b:06:5d:a6:b6:de:7a:ed:62:9d:a8:89:
         67:0a:84:71:77:9e:cd:1d:9f:ea:ec:6b:32:85:46:1e:fd:f2:
         4b:45:eb:e5:3c:1f:f2:27:5b:9a:44:d6:e5:a9:51:25:e8:60:
         35:87:5e:17:ce:80:b3:b5:84:b7:ba:31:31:7c:14:4b:9e:77:
         0a:ed:cf:51:67:65:96:43:53:62:9f:69:76:20:c1:e5:73:71:
         f5:ed:26:8a:05:cf:da:ba:21:bb:2a:d7:c6:9d:c8:17:ed:8e:
         53:cc:02:1f:b6:58:57:41:de:17:51:02:fd:eb:46:7f:18:4d:
         53:8a:e8:23:73:1e:23:6e:63:de:cb:36:46:2f:fd:f4:55:46:
         79:af:c1:6f:68:9a:56:1c:64:69:e3:fe:84:13:a4:b3:cd:0e:
         57:77:c3:48:0d:6b:fa:c6:3d:c3:8a:8f:e1:c9:21:c9:d3:a5:
         04:d2:6b:fb:f9:09:fb:9b:cd:39:17:37:92:fe:9b:06:46:70:
         1a:6a:5c:46:9e:9d:7c:56:96:df:f6:fd:1f:17:ac:07:16:29:
         78:3a:91:35:90:5b:93:c2:c0:7e:54:8a:73:30:49:cd:e9:1b:
         9d:68:5f:8e:4d:a6:7a:8b:e8:0b:eb:65:70:23:02:4b:49:26:
         13:1c:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:33 2026 by rpki-client