Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/e5VirbuAOkg1PBFK0M3mtZcI84w.asa
File:                     e5VirbuAOkg1PBFK0M3mtZcI84w.asa (raw, json)
Hash identifier:          EqbpkcZPOaxJPSydnA3m+kgJNXbf/c0LEhfWDvh4rJY=
Subject key identifier:   7B:95:62:AD:BB:80:3A:48:35:3C:11:4A:D0:CD:E6:B5:97:08:F3:8C
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019F19013CAD0A14839C5363002B7FB4B10B
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/e5VirbuAOkg1PBFK0M3mtZcI84w.asa
Signing time:             Tue 30 Jun 2026 14:48:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210312
Providers:                AS: 4601
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3c:ad:0a:14:83:9c:53:63:00:2b:7f:b4:b1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun 30 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b9562adbb803a48353c114ad0cde6b59708f38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:94:73:75:98:c6:34:81:c5:0d:0c:1b:0f:
                    6d:10:f9:b8:d2:e8:62:a4:e8:aa:9d:19:19:b1:d5:
                    62:84:e0:c4:a4:36:1f:8e:8c:e4:e6:09:0e:4a:a8:
                    21:8e:da:5e:7e:68:5f:45:14:c2:67:ce:49:e7:80:
                    17:d5:71:61:c5:a5:86:2e:01:2c:42:96:aa:1e:5d:
                    6c:5a:5f:ee:69:69:18:8f:66:a5:93:ca:fc:05:04:
                    46:c9:da:49:0d:8d:fa:85:34:5b:f8:09:df:e9:02:
                    ea:a6:10:88:5e:47:5a:e7:c3:e0:29:af:80:94:22:
                    2a:c7:d2:26:fb:c5:40:75:58:43:4e:ce:2a:d7:58:
                    1d:b2:8c:f5:2a:33:91:36:d8:71:05:17:34:78:fe:
                    86:a3:99:8c:8b:96:f4:90:1c:cd:8c:b0:62:9c:1e:
                    a0:68:9d:db:a9:4b:7f:80:8c:8c:1e:1a:df:cc:a3:
                    68:84:fd:e9:4b:4e:59:71:b1:47:36:e8:41:58:3f:
                    e2:15:a9:33:84:22:21:70:86:fd:69:e5:d3:04:d3:
                    3c:3f:d4:44:c0:e3:ea:8d:ce:eb:f6:e0:2f:09:ab:
                    5d:34:cd:a0:36:20:5d:da:fb:55:d6:4b:a6:23:0a:
                    7e:20:29:03:1d:a2:71:68:b0:6f:f8:a6:67:e4:74:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:62:AD:BB:80:3A:48:35:3C:11:4A:D0:CD:E6:B5:97:08:F3:8C
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/e5VirbuAOkg1PBFK0M3mtZcI84w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210312

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:fe:af:2a:02:83:ef:ca:3b:b8:8b:2f:18:9e:9e:e1:3a:
         9c:03:ab:fd:26:8a:a3:b4:00:8a:f9:40:0d:2e:04:26:42:30:
         e7:64:37:95:21:09:6a:af:ca:15:bc:76:ef:c6:7f:22:e7:3c:
         26:74:1e:ef:7e:2b:2a:8a:f1:a2:61:62:f4:68:4b:df:bf:0f:
         2c:c7:5b:ee:c5:c3:58:4e:7f:db:23:e4:77:83:74:66:a0:4a:
         48:19:d6:0d:37:4c:b1:59:3a:ad:4f:c1:c7:6c:b2:02:da:a1:
         ec:9f:f9:c7:9e:1a:b0:6d:18:bb:69:f5:41:6b:fd:44:8a:89:
         06:4b:1f:e5:b8:07:48:78:de:06:33:a7:68:1e:85:02:ec:aa:
         1c:fa:b7:be:0e:c4:d2:ad:4c:ff:59:1f:26:af:e4:7a:96:2e:
         43:7c:c1:1d:ac:91:08:07:17:ba:b2:a6:0d:86:ab:03:95:59:
         22:e5:c0:14:40:e0:e7:67:2c:88:3c:1d:d1:d2:30:5f:0f:0c:
         ff:04:6d:ac:bc:9f:6c:38:fa:06:f1:06:15:26:15:af:e9:84:
         40:c2:09:5f:f5:b9:30:ac:c1:84:78:13:b3:70:46:4f:9d:a1:
         f6:fb:d7:8b:0d:dd:4a:39:8d:e2:42:67:fd:d1:7f:7c:24:88:
         bd:2d:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:29 2026 by rpki-client