Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/CEJpQLikxHa8d-YkFw2pIJEL_OY.asa
File:                     CEJpQLikxHa8d-YkFw2pIJEL_OY.asa (raw, json)
Hash identifier:          xgb9X1dskGV3X7TT8TR/dOTA4c0i1Dzq1gZPGAbJI6Y=
Subject key identifier:   08:42:69:40:B8:A4:C4:76:BC:77:E6:24:17:0D:A9:20:91:0B:FC:E6
Certificate issuer:       /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial:       019F1901252BAA6BA4FA9C5A6F204E3D7780
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/CEJpQLikxHa8d-YkFw2pIJEL_OY.asa
Signing time:             Tue 30 Jun 2026 14:48:53 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215510
Providers:                AS: 31543
                          AS: 48362
                          AS: 58115
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:25:2b:aa:6b:a4:fa:9c:5a:6f:20:4e:3d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
        Validity
            Not Before: Jun 30 14:48:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=08426940b8a4c476bc77e624170da920910bfce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:ea:b5:ab:9d:f3:23:ad:20:4d:a4:fe:21:
                    06:a9:f6:af:e5:9c:90:8b:07:84:41:c3:8c:ab:ae:
                    70:e0:5f:99:5b:c4:9d:02:d4:eb:48:a8:d0:7c:14:
                    b3:a2:22:7e:77:5c:e6:65:e7:e7:f7:84:da:b0:2e:
                    33:b3:78:84:0e:da:a1:3a:ad:53:4d:0d:46:1b:11:
                    ae:1a:7d:38:de:bb:b4:6a:5a:0e:c6:80:5b:44:dc:
                    9e:28:48:bf:8c:d7:dd:b6:a7:06:f2:4d:0b:b5:8f:
                    7b:8c:7a:38:59:e4:e5:6c:d0:23:3d:c2:f6:45:b8:
                    5c:e1:47:af:5b:d6:0d:ee:16:3e:14:14:57:76:a8:
                    f1:6c:f5:c0:22:6c:f0:93:7a:f9:30:39:aa:6b:11:
                    8b:ef:44:dd:0c:17:91:fc:41:1a:95:b8:17:95:66:
                    04:f2:b7:24:ec:e0:ef:e1:5d:35:86:45:10:b2:8c:
                    6a:30:b6:d9:2d:8e:8e:72:fb:3d:c2:08:b3:ec:25:
                    a8:61:0b:62:56:b5:4e:76:cd:c9:ab:b9:66:ce:d2:
                    d2:c6:5a:c8:7f:67:07:51:4f:66:30:9f:6e:ed:b9:
                    9f:7d:b1:a7:a4:a6:01:0f:b5:9b:79:48:47:0d:c7:
                    21:7a:a2:f6:cc:43:25:4a:0a:b3:a2:4a:c4:70:db:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:69:40:B8:A4:C4:76:BC:77:E6:24:17:0D:A9:20:91:0B:FC:E6
            X509v3 Authority Key Identifier:
                keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/CEJpQLikxHa8d-YkFw2pIJEL_OY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215510

    Signature Algorithm: sha256WithRSAEncryption
         92:13:d0:74:c8:a9:09:5c:22:4b:65:67:e0:95:8a:b5:f2:48:
         e6:eb:1f:d8:ce:97:46:18:94:1f:0b:73:ee:d9:da:26:6b:1f:
         3a:ab:ca:12:06:50:16:2a:b6:d1:ab:6d:4e:b1:79:89:b8:f4:
         7e:13:18:de:22:a2:7b:e9:18:42:a2:72:bb:c6:c3:fe:06:64:
         d3:f8:c0:22:1c:b0:34:37:de:25:12:67:2d:1b:2c:ce:eb:08:
         af:b9:62:e3:a3:a3:49:1d:36:de:78:a2:c3:76:67:42:84:17:
         d7:d7:38:e6:d4:be:8a:7d:0d:ed:fc:9e:93:ff:9a:91:17:15:
         c5:6e:49:60:1e:38:0f:51:4b:04:d9:bc:1c:16:fe:88:82:ae:
         17:ef:29:1e:15:06:8e:36:b7:e2:96:ea:f8:c4:62:bf:6c:d4:
         56:e8:26:8d:03:f3:ea:8a:46:14:8a:84:4c:c6:39:94:f9:02:
         7b:7b:cc:7c:85:4a:56:2b:75:33:43:da:d8:51:42:fb:ef:f4:
         04:0b:6b:48:66:3f:5e:9e:56:44:b6:ef:b0:42:3c:ac:e4:70:
         a8:23:a9:a7:5f:fb:f1:b5:e6:fa:7d:a4:9e:4b:53:4b:05:dc:
         b4:35:15:0d:14:c3:07:50:3f:b3:ee:3f:d9:56:ee:89:9d:c1:
         43:28:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:59 2026 by rpki-client