Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/gqMBDEDRSu4xKONst1tdj1bPNsI.asa
File:                     gqMBDEDRSu4xKONst1tdj1bPNsI.asa (raw, json)
Hash identifier:          x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=
Subject key identifier:   82:A3:01:0C:40:D1:4A:EE:31:28:E3:6C:B7:5B:5D:8F:56:CF:36:C2
Certificate issuer:       /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial:       019C678E6BDA694DCBB1997D77074BF61D5C
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/gqMBDEDRSu4xKONst1tdj1bPNsI.asa
Signing time:             Mon 16 Feb 2026 17:45:12 +0000
ASPA not before:          Mon 16 Feb 2026 17:45:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12555
Providers:                AS: 20485
                          AS: 20764
                          AS: 29076
                          AS: 57304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:67:8e:6b:da:69:4d:cb:b1:99:7d:77:07:4b:f6:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
        Validity
            Not Before: Feb 16 17:45:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82a3010c40d14aee3128e36cb75b5d8f56cf36c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:d3:70:cd:de:3c:28:4d:c6:0a:28:b4:9f:
                    de:00:7d:96:48:f0:7d:83:d8:a3:58:92:37:15:6f:
                    f5:2f:3f:97:19:96:ae:d9:9a:5e:10:b5:29:84:e4:
                    a7:2b:54:c5:db:a6:82:49:81:47:6e:d3:21:a4:05:
                    ad:72:35:7a:4c:aa:3c:01:ba:ba:db:64:3d:59:c5:
                    51:63:d7:0e:39:1b:71:23:2d:dd:7d:51:42:b0:90:
                    c0:40:9e:f0:3b:5c:ba:b8:64:0d:6f:a5:df:7c:bc:
                    33:9d:d9:db:db:96:fa:57:6a:e9:ff:35:bf:6b:4e:
                    ce:ee:53:36:3f:e3:ee:6f:23:01:7c:f9:27:55:91:
                    a9:91:44:43:15:67:5c:59:23:e3:af:8a:ee:49:2d:
                    bb:07:0c:1f:55:2a:8f:72:34:66:07:32:c7:e7:31:
                    51:39:a0:45:ae:13:2e:ee:73:55:87:8d:17:67:4d:
                    39:51:df:89:59:a3:f5:0d:f4:e8:78:6e:6b:5a:5f:
                    d9:29:e6:f8:66:94:35:2f:a5:24:93:1e:3b:5f:34:
                    03:bd:c5:ee:30:d7:c2:ee:d0:d5:aa:8b:68:c4:df:
                    76:34:05:eb:c2:cf:8e:de:68:76:ce:26:02:79:78:
                    2a:83:b4:d1:88:0f:ce:9a:4a:cd:1a:82:73:54:df:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:01:0C:40:D1:4A:EE:31:28:E3:6C:B7:5B:5D:8F:56:CF:36:C2
            X509v3 Authority Key Identifier:
                keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/gqMBDEDRSu4xKONst1tdj1bPNsI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12555

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:ab:e2:8a:bd:55:8e:cd:e7:46:7b:7e:f9:36:49:e3:ef:
         2f:ca:96:e4:07:5a:16:36:c5:58:c3:2a:e2:73:66:6d:18:bb:
         ab:0f:7c:a3:98:28:db:d9:32:ba:e2:1b:41:7b:a1:61:6e:50:
         65:9f:e9:42:e6:88:37:e7:9b:a4:01:74:38:62:69:12:d5:3a:
         d8:0a:93:2f:fd:73:5c:5c:8c:cd:78:68:09:3a:7d:e7:49:59:
         ce:dc:59:38:47:11:a3:5c:1a:92:5e:56:48:d8:c1:56:32:29:
         60:e0:27:c5:a0:10:81:76:d0:8c:8d:d0:eb:ea:ef:25:ea:9b:
         51:cd:ef:cb:d0:df:6b:b2:ad:e0:5f:2e:70:54:43:02:d7:e8:
         44:4d:38:f1:8a:95:ef:64:b7:c3:e3:c6:28:45:96:83:0b:82:
         d2:b7:cd:d2:da:c9:2b:b4:5f:b6:bd:32:96:89:e5:cf:75:6c:
         d7:fd:7b:c3:ae:11:1b:da:21:10:fd:3d:4e:a5:49:11:f0:86:
         7e:d2:ca:fe:d1:de:f5:59:52:e5:70:55:1e:67:53:7e:1a:b6:
         37:86:d0:3f:3b:1c:aa:6a:50:71:cc:92:8c:b7:39:ce:b3:c6:
         6c:d5:9f:5b:35:8e:dc:0e:51:dd:5f:f6:1c:90:51:ae:a4:cc:
         cb:6e:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:37 2026 by rpki-client