Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa
File:                     BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa (raw, json)
Hash identifier:          Vh7lrvSAUjPIHB6bGQC1IFBTrjCNtjxlb9V3hEBQfKM=
Subject key identifier:   05:29:18:AA:4C:33:40:3E:64:57:61:BD:19:6A:C0:FE:1D:35:B3:66
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       019F190150EDCFDA33EBA82FFC9BE164CA6B
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa
Signing time:             Tue 30 Jun 2026 14:49:04 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204911
Providers:                AS: 1273
                          AS: 3320
                          AS: 5405
                          AS: 9002
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:50:ed:cf:da:33:eb:a8:2f:fc:9b:e1:64:ca:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: Jun 30 14:49:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=052918aa4c33403e645761bd196ac0fe1d35b366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:32:92:a2:12:dd:d7:16:3a:1a:de:ad:54:
                    85:26:aa:48:e1:85:ac:20:0f:f9:93:dd:23:cd:76:
                    4a:52:47:46:f6:90:0f:f4:46:43:c8:21:1c:0d:85:
                    ae:19:c7:97:ed:e9:3e:f8:37:4a:8d:95:ee:fa:ac:
                    5c:9d:ec:b9:42:7e:d2:4d:3c:75:b5:42:9b:86:b6:
                    73:eb:dd:f0:c2:a1:fe:42:b3:ca:2e:37:de:34:d5:
                    7c:9a:e1:61:72:4e:71:6f:1c:76:18:9b:66:7d:eb:
                    40:3d:af:b4:09:2a:0e:80:0b:0f:a2:d2:8b:f4:b7:
                    0d:2c:fe:c9:c7:5b:b3:45:a2:61:d5:92:0a:f7:a4:
                    ad:5e:f5:fa:5c:fe:bc:49:af:dc:84:54:cc:08:22:
                    90:ae:98:8c:16:23:af:51:c9:e4:9e:86:be:88:a5:
                    08:d2:d6:0d:29:52:12:19:94:ba:07:73:99:34:91:
                    ec:15:de:d2:28:dd:f1:08:7c:2d:24:15:df:d4:5d:
                    a9:32:d0:be:9c:06:b1:1c:ae:77:26:cf:1e:d3:07:
                    15:ec:42:f4:22:24:69:b4:b9:36:08:d9:cb:44:dc:
                    ea:45:e8:4b:f2:d9:c7:42:24:d8:e6:95:ca:76:b1:
                    44:3c:a8:08:c4:31:32:84:fb:78:dd:e8:ff:5e:fb:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:29:18:AA:4C:33:40:3E:64:57:61:BD:19:6A:C0:FE:1D:35:B3:66
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204911

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:75:f5:b7:ab:e0:d3:37:c5:af:cf:38:6f:47:28:60:1f:
         21:a6:70:5b:d3:2f:bb:d6:bc:9c:7a:6d:35:6d:b1:bf:4a:83:
         58:58:e4:e5:7f:d5:6f:5c:7d:3c:88:a4:e9:43:6e:25:06:5f:
         40:f7:0e:f0:54:0b:37:f6:32:e6:87:2c:16:cc:36:13:4b:36:
         92:38:2e:58:7e:3a:9e:c8:09:8c:83:f9:2a:7e:0d:63:fa:7e:
         e4:0b:ad:ad:29:33:d8:68:97:87:5b:8d:b1:cb:ee:42:0d:9a:
         a0:6e:8e:65:11:bf:43:ec:38:d1:72:ad:08:eb:f7:6f:89:d4:
         51:55:2d:9e:3d:a4:a9:86:39:9d:d0:bb:c7:53:a4:d4:ea:cf:
         34:a3:26:57:08:4d:4e:f2:2c:9c:63:d6:e0:14:21:a9:d6:fe:
         ef:bc:22:01:48:a3:6c:d9:98:63:c4:82:be:1d:a0:0a:30:41:
         b2:89:ff:aa:fc:37:84:c1:ec:16:12:87:e2:91:be:93:a7:73:
         33:39:4d:42:33:86:e1:8c:23:11:96:37:9c:4e:27:52:8b:85:
         77:31:1e:ff:b9:b8:3c:38:f9:b8:ec:62:e0:dc:16:a5:8e:ed:
         c5:04:ca:83:26:7b:81:dd:c6:ea:88:84:e3:e9:d8:5f:f3:ea:
         fe:0e:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:57 2026 by rpki-client