Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/pIFip_1IBLSOvbShbCzJqPR3ISA.asa
File:                     pIFip_1IBLSOvbShbCzJqPR3ISA.asa (raw, json)
Hash identifier:          km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=
Subject key identifier:   A4:81:62:A7:FD:48:04:B4:8E:BD:B4:A1:6C:2C:C9:A8:F4:77:21:20
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       019C46FDA233ADA104105855E8F414659518
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/pIFip_1IBLSOvbShbCzJqPR3ISA.asa
Signing time:             Tue 10 Feb 2026 09:59:13 +0000
ASPA not before:          Tue 10 Feb 2026 09:59:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214865
Providers:                AS: 34872
                          AS: 51396
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:fd:a2:33:ad:a1:04:10:58:55:e8:f4:14:65:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: Feb 10 09:59:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a48162a7fd4804b48ebdb4a16c2cc9a8f4772120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:9c:1d:75:f4:dc:d8:ca:86:b3:3c:3d:b0:
                    fe:07:47:25:f7:cc:7c:85:94:74:34:da:ab:90:0e:
                    88:1d:c9:ab:7e:6a:03:fe:fd:77:a1:e4:3f:91:ad:
                    cd:89:32:a0:48:4c:46:1b:00:01:4c:88:c7:cf:3f:
                    33:6b:c9:f7:7f:81:1e:7c:c6:6b:72:bf:6a:ab:d0:
                    82:36:09:aa:79:59:13:23:ca:18:78:6c:86:54:e0:
                    3a:ba:4f:e1:b9:c4:20:d8:a1:92:db:ac:a4:ac:e4:
                    48:c5:f4:74:e3:25:2f:2d:2b:84:0f:87:f4:d0:10:
                    59:74:87:18:ee:a6:53:b3:dc:3d:3b:b0:a9:ef:7e:
                    3a:5d:f7:f3:d7:58:1a:a6:d2:70:d3:e9:a1:8e:df:
                    07:4b:34:4f:98:29:1c:8a:bf:a6:96:fe:a7:a4:1e:
                    41:42:bd:04:5a:7f:97:7c:87:8c:3c:6b:41:d8:b3:
                    8a:8e:b9:a9:74:e9:6a:99:23:98:da:6f:a4:45:a0:
                    44:a8:cd:6d:e1:62:5b:93:52:4d:d8:76:5f:07:00:
                    3d:d9:7f:a6:12:5d:55:33:23:0c:55:fa:e1:75:c1:
                    5a:5f:a2:e9:6f:a4:d9:ca:5e:23:87:2a:c5:ec:f4:
                    ac:f0:04:a7:2a:22:54:3c:34:76:3e:07:1c:60:92:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:81:62:A7:FD:48:04:B4:8E:BD:B4:A1:6C:2C:C9:A8:F4:77:21:20
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/pIFip_1IBLSOvbShbCzJqPR3ISA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214865

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:d8:39:34:22:a8:cf:90:23:5b:cb:ec:c7:48:16:40:d7:
         5d:a4:5f:9f:19:71:d1:81:4f:41:f8:a4:63:5d:91:fd:4d:50:
         73:53:3d:7d:23:97:5f:fa:5e:f0:5e:ce:44:a1:42:dc:a9:ed:
         46:e6:ed:55:e4:af:73:28:6d:f5:3d:e5:3b:b0:78:d5:97:2e:
         dc:91:74:b2:d0:09:d4:50:44:05:a6:41:20:f7:9f:cc:86:84:
         3c:71:fe:31:03:96:03:6a:75:a8:ac:42:0e:25:73:b2:f8:6a:
         f2:1f:8b:9a:70:bd:cf:75:17:94:c1:c4:ef:58:0d:8a:17:33:
         91:0d:ad:13:69:c4:b4:cc:9f:b4:0c:6c:31:a7:23:5b:37:7e:
         cf:d3:17:e8:b7:70:00:da:0e:24:74:ac:c1:ef:74:b0:ff:6f:
         b5:c8:02:27:a2:ac:6f:f4:91:bf:df:39:63:1a:99:7e:a5:43:
         44:4d:09:61:43:09:97:1d:d9:20:11:66:ea:75:f5:72:40:56:
         e8:72:e7:47:23:1b:36:0c:92:e3:48:68:32:39:79:08:35:88:
         66:88:41:f2:80:9e:11:71:3a:8a:98:96:13:90:79:87:dc:ab:
         e8:0f:25:c5:dc:8d:cc:32:f1:b6:63:73:94:fd:a8:eb:7d:ec:
         78:78:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:48 2026 by rpki-client