Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/7kcTDPtrsAccIFtq7M7wM_oA42o.asa
File:                     7kcTDPtrsAccIFtq7M7wM_oA42o.asa (raw, json)
Hash identifier:          jfkqgTwMmeuO5g0zs7rfVVOHUNY0M+VynB68Y9zU2I4=
Subject key identifier:   EE:47:13:0C:FB:6B:B0:07:1C:20:5B:6A:EC:CE:F0:33:FA:00:E3:6A
Certificate issuer:       /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial:       01A0A3BED3A7351F9E9A32EAF88F88C1A2CA
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/7kcTDPtrsAccIFtq7M7wM_oA42o.asa
Signing time:             Tue 15 Sep 2026 06:26:27 +0000
ASPA not before:          Tue 15 Sep 2026 06:26:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51402
Providers:                AS: 1299
                          AS: 3209
                          AS: 13237
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a3:be:d3:a7:35:1f:9e:9a:32:ea:f8:8f:88:c1:a2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
        Validity
            Not Before: Sep 15 06:26:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee47130cfb6bb0071c205b6aeccef033fa00e36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:cd:26:c4:ae:21:cf:97:67:d2:27:fb:22:
                    5b:c6:39:71:2f:2c:bc:16:4f:04:fa:90:92:7e:df:
                    e2:b7:a9:c7:f5:7b:4c:a4:ad:53:7a:8c:f6:d7:ed:
                    68:51:cf:6b:36:f7:10:5e:3e:57:15:04:af:1a:84:
                    6f:12:bc:ec:fc:09:8f:56:64:81:90:3b:bd:83:f3:
                    58:6e:22:b2:df:9e:3b:99:c3:87:27:31:f0:0b:2b:
                    06:d2:59:bf:90:45:be:72:7e:a2:a4:58:1c:1f:5f:
                    ad:3b:55:57:03:65:38:3b:e1:30:95:52:c0:c0:96:
                    13:66:ee:1a:89:a9:37:c3:34:e8:01:f5:13:fa:92:
                    81:77:ee:99:d3:f5:6c:fe:d5:2d:53:2b:11:97:e3:
                    5f:e9:8f:a7:6a:bc:df:6a:f2:60:fc:08:b1:72:e4:
                    82:26:e4:b6:9f:c8:40:69:d5:98:ca:ea:bc:e1:71:
                    21:39:0e:f1:b3:cd:95:28:87:01:86:f7:4e:ca:98:
                    cd:ab:39:94:ab:c8:64:a2:5b:5e:0a:1b:9b:14:0c:
                    fb:a9:58:35:02:4d:05:b0:98:3e:fb:e4:d9:e0:19:
                    1b:62:70:9c:42:2c:5a:04:47:7c:b6:ef:1c:cd:06:
                    fd:6a:18:e9:4e:fa:a8:bf:d5:d4:0f:a5:01:75:ce:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:13:0C:FB:6B:B0:07:1C:20:5B:6A:EC:CE:F0:33:FA:00:E3:6A
            X509v3 Authority Key Identifier:
                keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/7kcTDPtrsAccIFtq7M7wM_oA42o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51402

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:e2:71:5c:f9:4a:6c:bd:91:1a:e5:cd:2c:1a:83:f9:5c:
         b3:0c:1a:8e:05:5a:33:9e:3b:4f:52:8d:b0:5c:fc:a4:3c:5b:
         9b:f4:69:89:83:e1:ea:c7:e3:26:db:b1:f5:11:00:4e:a8:ba:
         cb:bf:8e:23:d4:43:84:95:f8:14:82:ac:cc:5c:f3:1a:16:36:
         6b:8a:7b:b3:1f:84:64:de:0b:92:10:e2:22:be:00:f2:c0:9b:
         8d:bc:cd:68:72:b5:aa:cd:49:c3:0a:e6:d9:f6:8a:24:aa:1d:
         e0:30:fc:98:52:33:65:a6:34:83:d5:32:42:fd:0b:ff:36:39:
         19:ad:9b:8c:a8:d8:2b:6a:25:ac:7f:ba:14:27:d8:91:dd:bb:
         c7:6d:79:9f:6b:72:09:94:ae:d0:eb:4f:4e:53:cb:69:1d:9a:
         e2:5d:6d:bb:fe:fc:26:40:77:1d:a3:71:ac:d0:90:5b:5c:2d:
         7e:b2:06:25:f8:04:ed:41:8c:bb:bd:b4:3f:c5:85:d6:2f:df:
         e1:5a:df:78:bb:05:2a:86:9f:96:e1:dc:eb:5f:67:17:83:70:
         0f:dc:43:6a:f4:5a:04:18:d0:d2:c0:18:10:25:5b:c7:0d:8d:
         cd:ab:d9:d5:df:6c:46:87:49:b4:2e:93:f3:a9:57:16:62:82:
         9a:94:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:12:24 2026 by rpki-client