Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/6tu6wsRKFmIyHrU1PRGJUD04ppo.asa
File:                     6tu6wsRKFmIyHrU1PRGJUD04ppo.asa (raw, json)
Hash identifier:          aHFYEiuMALmMOLvgpIvmsiVm50NUJxSxTCOLYvpZwmc=
Subject key identifier:   EA:DB:BA:C2:C4:4A:16:62:32:1E:B5:35:3D:11:89:50:3D:38:A6:9A
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019F19011481257405CC1F0F2BD214B36A77
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/6tu6wsRKFmIyHrU1PRGJUD04ppo.asa
Signing time:             Tue 30 Jun 2026 14:48:48 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24972
Providers:                AS: 2588
                          AS: 8194
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:14:81:25:74:05:cc:1f:0f:2b:d2:14:b3:6a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jun 30 14:48:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eadbbac2c44a1662321eb5353d1189503d38a69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:57:4b:01:44:8f:d0:61:6b:71:39:e1:64:
                    2a:fe:34:22:58:63:6f:7d:3a:35:f6:4a:4f:ea:7c:
                    96:9f:2b:b8:b6:32:1f:22:cd:90:f6:3d:ad:17:56:
                    d3:3f:69:a0:31:72:e5:ca:ac:79:96:57:f1:07:15:
                    0c:f9:a8:d9:5e:d7:89:ed:dc:1b:5d:ce:05:57:f9:
                    42:0c:91:03:50:29:e1:e4:c6:48:6a:4e:f3:f4:8f:
                    02:d1:69:5a:e6:43:41:7e:81:fa:52:97:22:a2:90:
                    e8:2c:38:4a:95:a2:44:b0:51:2c:bc:b8:51:78:e5:
                    20:c3:c6:64:df:23:49:5f:3f:61:40:9c:a3:59:24:
                    70:9e:37:90:f1:db:d5:27:78:11:5b:be:59:1f:57:
                    a8:b5:96:f0:09:3b:77:ac:10:83:02:5c:e3:92:01:
                    70:13:1f:5a:04:f3:9f:7c:10:ff:30:fa:35:69:66:
                    93:ed:52:88:ac:bd:96:9c:10:ee:50:c8:7c:8c:70:
                    41:3e:ea:3d:02:71:46:51:7d:be:ca:00:7a:29:94:
                    d4:73:a3:8d:29:b1:54:23:33:c6:f8:57:b5:e5:6c:
                    07:a8:95:00:0c:4d:f7:8d:df:ea:97:1d:4d:52:89:
                    ab:50:16:bb:42:9b:de:c7:ac:51:49:43:18:ea:fd:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:BA:C2:C4:4A:16:62:32:1E:B5:35:3D:11:89:50:3D:38:A6:9A
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/6tu6wsRKFmIyHrU1PRGJUD04ppo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24972

    Signature Algorithm: sha256WithRSAEncryption
         26:63:6c:59:5e:64:fc:94:d1:5c:e8:90:bd:d5:be:d2:e2:94:
         cf:94:6e:e0:9a:95:8d:20:b0:27:e4:0c:12:76:f7:6b:f3:36:
         4a:d7:a5:0f:52:79:b1:87:32:ef:d8:ae:99:99:d6:92:08:49:
         b0:b6:d4:5e:a4:70:7a:73:ef:4a:df:45:c1:81:5e:01:7c:43:
         0d:e8:56:2f:07:3c:4e:8e:e5:dd:1d:b6:07:2b:f3:cd:73:8e:
         1e:05:1f:04:09:68:ca:14:66:8f:75:a8:8d:4e:29:74:46:e7:
         26:f8:17:16:11:32:32:41:f0:2d:a9:de:14:73:57:3c:c0:8f:
         74:4a:2d:f1:de:e9:b0:49:35:ef:eb:75:29:7c:3c:b0:86:34:
         f9:3d:c2:90:63:7b:e6:d9:29:e5:d1:04:bb:2c:25:28:44:9a:
         2d:00:56:9d:75:65:00:7c:25:89:1a:a7:ca:50:7a:02:e4:79:
         9d:cf:dd:02:d8:21:e4:f1:0b:30:47:38:1c:33:9f:21:73:ab:
         49:d8:8b:24:f6:5c:d6:5a:3a:6b:31:cb:c1:4c:98:7d:e2:2b:
         e0:5f:dc:75:57:09:05:f6:fc:e2:41:e3:41:3e:6a:fc:39:4c:
         e6:1f:29:f5:6e:92:0a:a6:40:b1:cc:dd:28:ad:d6:e3:b2:7c:
         29:ca:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:50 2026 by rpki-client