Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/hYI8_W7KbcINcD3rIBl0TxlFsr0.asa
File:                     hYI8_W7KbcINcD3rIBl0TxlFsr0.asa (raw, json)
Hash identifier:          ul9ROLDfaYD/lTgozmnX7AY2tTIU1gHVBphVJS56cV4=
Subject key identifier:   85:82:3C:FD:6E:CA:6D:C2:0D:70:3D:EB:20:19:74:4F:19:45:B2:BD
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019F19013C5725EA7C0997DCD08D89022C23
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/hYI8_W7KbcINcD3rIBl0TxlFsr0.asa
Signing time:             Tue 30 Jun 2026 14:48:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            4601
Providers:                AS: 8298
                          AS: 58115
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3c:57:25:ea:7c:09:97:dc:d0:8d:89:02:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun 30 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=85823cfd6eca6dc20d703deb2019744f1945b2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:88:8f:70:7a:1a:05:af:d9:b6:77:df:33:
                    e3:65:3d:5d:0f:70:aa:f0:9b:af:f0:70:9c:9b:7b:
                    1e:2d:ad:94:ab:4c:48:76:4a:e2:d7:eb:29:ac:64:
                    cc:4a:7b:3c:0f:67:2f:d4:92:b4:07:66:27:a1:fe:
                    0a:d0:6d:a0:94:ba:15:e9:df:39:a4:51:78:85:59:
                    46:c2:48:de:a4:ed:68:3d:af:57:6e:a1:70:46:95:
                    f6:87:85:36:c1:31:67:4e:0d:f9:a0:66:04:ea:32:
                    a6:f7:ed:d8:9d:5c:a1:8a:72:37:5f:d3:12:67:e5:
                    88:d3:fe:92:41:0b:34:20:5e:e9:2f:aa:11:d0:cd:
                    d8:b3:51:f6:a1:82:36:c4:97:a2:87:46:24:8c:f1:
                    73:66:ea:0b:9d:44:b5:c4:79:9c:59:42:f7:4d:94:
                    e8:61:e7:b4:a8:4d:95:cb:33:0a:c4:41:2d:5d:b5:
                    af:1e:53:9c:13:08:eb:5d:44:24:ae:08:08:35:da:
                    71:67:f8:ba:b7:17:23:58:ac:f1:2d:ca:48:48:08:
                    3e:4a:12:fe:7d:0a:24:b6:73:e3:94:6f:ec:05:68:
                    74:46:4a:b8:e8:02:ac:57:8e:18:b9:0f:ee:e7:c6:
                    af:21:15:3d:c2:43:d1:c1:ee:ce:ca:01:c8:fa:d9:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:3C:FD:6E:CA:6D:C2:0D:70:3D:EB:20:19:74:4F:19:45:B2:BD
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/hYI8_W7KbcINcD3rIBl0TxlFsr0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4601

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:e2:58:5e:7f:08:ca:0e:94:99:82:2e:45:bb:e0:a2:0b:
         c3:12:d9:ab:42:77:e4:ad:50:52:96:b2:03:f3:58:8e:67:8b:
         38:dd:74:05:e8:9b:76:bb:53:3a:14:c1:f6:0e:a9:87:46:ab:
         be:eb:66:e8:1c:a1:c2:71:4a:af:56:79:58:9e:4f:07:1f:2a:
         31:7c:a6:df:b7:e7:04:df:00:11:52:c0:6d:83:29:d1:df:99:
         c3:9a:d5:b0:0d:43:14:57:07:f9:7b:94:45:9c:46:60:bf:2e:
         e2:28:02:b4:37:7f:dd:cb:29:9e:ae:0a:6b:de:ea:da:2c:e6:
         ab:11:9d:2b:9b:e1:cb:60:e2:a6:3b:f1:cf:de:52:58:ea:77:
         ee:00:40:a9:a9:37:32:69:c1:31:55:bf:72:71:10:9b:b7:2d:
         d7:ac:42:7c:5b:dc:69:29:1a:e1:0c:2d:2f:e9:0d:76:1a:50:
         b4:f3:eb:6a:b5:76:5a:df:d8:81:a6:59:d4:12:94:ad:b2:b0:
         4c:c3:3c:87:9a:89:c8:ed:f0:79:57:2a:12:15:ee:e8:4c:e0:
         61:62:73:92:0c:7a:fd:65:f7:1c:ff:e0:14:e2:a1:78:b7:ec:
         83:f7:f3:e8:c3:08:fd:3c:04:a5:69:da:03:87:ed:41:ea:e2:
         4c:dd:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:58 2026 by rpki-client