Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa
File:                     TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (raw, json)
Hash identifier:          QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=
Subject key identifier:   4D:83:EB:DD:12:79:C8:EF:83:0E:F7:8D:F5:42:9E:DC:81:6F:BA:26
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       019C6A655A45A333F5FAEB6FDFF2ABA8AF43
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa
Signing time:             Tue 17 Feb 2026 06:59:12 +0000
ASPA not before:          Tue 17 Feb 2026 06:59:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211145
Providers:                AS: 210021
                          AS: 211090
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6a:65:5a:45:a3:33:f5:fa:eb:6f:df:f2:ab:a8:af:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Feb 17 06:59:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d83ebdd1279c8ef830ef78df5429edc816fba26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:2d:0b:23:7a:8d:f5:27:5b:7c:34:ef:b2:
                    1c:04:94:a3:a4:82:99:a8:52:f5:ad:87:62:29:25:
                    be:20:2d:46:e1:60:61:77:7a:6d:fc:d0:3a:9b:d8:
                    85:7b:63:d6:5a:ef:de:30:e5:3a:0e:19:41:2f:2a:
                    ed:44:fa:4d:d1:aa:8f:0a:f3:77:64:ff:99:c3:21:
                    50:f7:41:dd:63:2d:b0:5d:60:00:40:d6:b0:72:b2:
                    2f:a9:5e:2c:a9:af:3b:e4:61:38:ce:56:1c:7a:db:
                    e6:1f:b9:97:0c:33:28:8f:68:37:e3:d5:11:f7:2f:
                    94:73:30:da:db:20:1d:41:12:16:e7:1f:3e:20:9b:
                    ed:b2:c4:8a:e7:76:86:a0:97:47:f9:af:b4:3b:39:
                    98:89:b0:74:95:90:a2:19:2c:0e:4d:12:fc:61:76:
                    2f:2b:55:4f:6f:10:59:52:c4:bb:65:f1:57:d9:39:
                    ae:fb:98:b4:b9:6e:a4:9c:4f:48:57:00:43:da:f3:
                    5d:ab:6b:3f:d2:4d:fd:e8:db:63:80:46:e8:30:92:
                    4f:d4:a8:32:5e:98:d0:5a:ab:3d:c7:76:84:4d:ed:
                    91:fe:bb:cc:34:a9:48:69:dc:fb:18:f0:83:81:e8:
                    2a:dc:1b:61:35:b7:9f:6f:b5:35:21:d0:da:ff:a0:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:EB:DD:12:79:C8:EF:83:0E:F7:8D:F5:42:9E:DC:81:6F:BA:26
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211145

    Signature Algorithm: sha256WithRSAEncryption
         b4:86:d2:11:64:c2:fb:18:7d:91:01:86:41:91:5e:af:1f:dc:
         c4:cc:e6:a4:55:15:1d:63:f5:91:ce:1f:ba:f9:80:c9:b5:52:
         13:81:db:06:68:bc:96:07:61:09:df:27:80:98:37:41:be:b0:
         63:2c:ad:70:10:4b:f0:29:5b:52:e9:25:e7:90:39:c6:80:11:
         d3:b2:71:eb:4d:e2:ea:1d:60:00:25:77:d8:a5:ab:13:88:03:
         7c:85:a9:c3:9a:7f:14:52:34:d2:e7:a1:88:06:9e:db:0c:56:
         19:b7:7e:98:1a:44:82:fd:6a:8c:e5:2d:af:c8:36:f0:6f:16:
         3b:69:cd:47:36:38:3f:da:52:a8:9a:d6:a3:95:12:41:8d:b5:
         fa:77:97:99:e2:2e:cd:88:5d:24:48:e5:ed:04:b3:10:a2:59:
         98:f7:57:50:db:7c:90:4b:85:28:28:b0:3d:28:3e:e8:48:7e:
         6c:6b:e0:6e:a4:41:09:54:64:ca:79:fd:08:67:2b:69:91:11:
         5a:e6:ce:c0:30:63:25:f3:5c:39:86:2b:84:09:0c:6d:af:91:
         7d:d3:2b:9c:1c:71:d6:87:f3:39:d3:cb:f6:0e:99:28:0e:c5:
         2d:29:59:f6:26:de:2f:4e:73:e7:0c:7d:b2:53:53:9f:33:97:
         ec:68:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:41 2026 by rpki-client