Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/xPHCIlwZRFqDfgyxd_czObp8uN8.asa
File:                     xPHCIlwZRFqDfgyxd_czObp8uN8.asa (raw, json)
Hash identifier:          tM0NdTcgIP9FIU4gR/sMVjLjvE8IKOWb7Ddeoclduhg=
Subject key identifier:   C4:F1:C2:22:5C:19:44:5A:83:7E:0C:B1:77:F7:33:39:BA:7C:B8:DF
Certificate issuer:       /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial:       019F1CD587AA0AF45D90AFBC02EA54139642
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/xPHCIlwZRFqDfgyxd_czObp8uN8.asa
Signing time:             Wed 01 Jul 2026 08:39:43 +0000
ASPA not before:          Wed 01 Jul 2026 08:39:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60132
Providers:                AS: 3257
                          AS: 6461
                          AS: 8218
                          AS: 29467
                          AS: 197133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:d5:87:aa:0a:f4:5d:90:af:bc:02:ea:54:13:96:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
        Validity
            Not Before: Jul  1 08:39:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c4f1c2225c19445a837e0cb177f73339ba7cb8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:d8:89:43:07:52:4e:5f:41:77:cf:79:9c:
                    a0:90:f1:73:51:57:e0:7c:3d:e7:60:7c:10:b5:45:
                    41:b0:8d:7f:0f:6d:d0:2b:e8:49:4f:b1:68:3f:f2:
                    b8:29:d7:64:89:b9:7a:52:c8:f8:ad:cd:95:d5:d1:
                    56:cf:19:52:55:f3:67:7c:57:89:f4:a1:d7:31:48:
                    9d:b3:35:77:a3:43:65:49:63:3b:5b:50:9b:99:7b:
                    95:7e:88:c0:83:e1:83:48:5a:44:cd:02:1b:ee:ec:
                    94:9b:9b:aa:b0:64:e1:18:91:aa:2b:ec:c4:0e:b4:
                    85:82:2d:96:1b:87:69:32:7f:21:2f:cb:3b:b2:43:
                    61:5a:a8:70:4e:07:31:9e:dc:fc:1a:b4:c6:4b:77:
                    39:10:9f:ac:32:16:82:0b:f6:6b:e4:8d:e3:c2:1b:
                    22:fd:dc:85:06:8e:c7:7c:ac:92:53:3a:2a:80:fa:
                    59:ac:f5:91:45:35:2a:00:27:93:23:5a:a2:da:18:
                    78:1b:e6:5e:64:9c:7b:19:73:d9:52:6e:93:2f:1d:
                    c5:4b:8d:03:0e:5e:c6:47:01:ed:27:be:73:95:08:
                    00:6b:c5:49:82:58:f0:c2:b6:f9:38:6e:59:16:8d:
                    21:92:4d:3a:56:97:61:3c:9a:f5:42:89:e3:63:82:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F1:C2:22:5C:19:44:5A:83:7E:0C:B1:77:F7:33:39:BA:7C:B8:DF
            X509v3 Authority Key Identifier:
                keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/xPHCIlwZRFqDfgyxd_czObp8uN8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60132

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:dd:71:ab:d3:3a:d6:a8:fe:5f:42:72:45:99:53:13:b3:
         13:59:b7:63:74:5a:1d:33:85:e4:00:13:69:31:16:2f:ca:84:
         1c:45:3b:78:dd:54:a4:23:bf:2d:c8:26:93:73:a3:5f:ba:3b:
         15:5b:90:df:5c:4f:3b:d1:79:88:88:f5:ba:aa:69:01:35:9c:
         ec:00:2c:7d:36:ee:8b:2e:40:ef:6f:0a:0e:26:f0:15:91:ba:
         09:3e:b5:79:c2:a0:b0:43:42:0a:8d:f0:88:5f:28:1e:86:ff:
         16:c6:ab:30:85:e1:95:90:3d:32:80:de:c2:d4:93:47:bc:0e:
         d6:64:06:80:ad:6b:d0:53:28:db:51:1b:8d:92:a6:23:bd:e1:
         c3:e8:0a:11:46:d4:98:5e:00:6a:ae:64:78:3d:88:30:43:27:
         7a:c4:e6:a2:82:54:40:04:9e:24:55:94:c3:12:2e:bb:77:9c:
         f3:aa:e1:d2:69:b8:fc:1b:d3:c0:9d:c4:da:d5:d7:8c:d2:58:
         91:fe:9a:f9:05:50:28:fe:64:97:bf:24:fd:97:53:a2:5f:a3:
         da:f8:ef:94:68:8c:41:a0:a1:1e:53:f0:c1:9a:75:db:5f:d8:
         65:8e:a4:51:6f:8c:dd:f5:37:a3:b3:2d:76:16:e8:58:8a:38:
         80:41:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:15 2026 by rpki-client