Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/1BS5FFAL8Xioj9xP3XF2T09PUyo.asa
File:                     1BS5FFAL8Xioj9xP3XF2T09PUyo.asa (raw, json)
Hash identifier:          KMqK1OYqPcxopPsLzmWQHtxtVOo5iXf0iz6640QVzZ0=
Subject key identifier:   D4:14:B9:14:50:0B:F1:78:A8:8F:DC:4F:DD:71:76:4F:4F:4F:53:2A
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       019C524C871638D9EE73561ACC95C16A3060
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/1BS5FFAL8Xioj9xP3XF2T09PUyo.asa
Signing time:             Thu 12 Feb 2026 14:41:12 +0000
ASPA not before:          Thu 12 Feb 2026 14:41:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207067
Providers:                AS: 56595
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:52:4c:87:16:38:d9:ee:73:56:1a:cc:95:c1:6a:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Feb 12 14:41:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d414b914500bf178a88fdc4fdd71764f4f4f532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:c6:48:a0:5e:63:17:87:26:1f:21:31:34:
                    63:64:c4:95:d0:58:cd:e6:00:75:3a:44:b8:a9:ce:
                    54:80:e6:a5:08:28:80:1e:75:63:93:9f:21:eb:13:
                    c4:67:83:ac:e9:6a:95:71:63:2e:9a:14:8c:9a:fe:
                    55:9d:1c:39:0f:68:d2:1a:2c:fe:f6:f5:0a:4d:86:
                    a2:c0:05:18:d1:3a:44:98:81:79:10:6d:5f:a4:0b:
                    e7:b3:b1:5b:49:ac:d8:01:21:e5:46:d7:fb:d2:d6:
                    70:99:b6:01:e2:49:c0:4a:11:65:36:3b:95:13:77:
                    01:c8:94:a4:f2:6a:66:fd:91:a0:00:80:25:8b:fe:
                    77:86:b8:e6:26:40:a6:af:d5:12:69:cb:81:90:b8:
                    db:ab:06:52:9a:12:1e:0a:41:c1:b0:a8:bf:ac:11:
                    73:03:8c:23:e7:b6:de:95:17:f0:5b:b7:b2:1e:25:
                    25:85:37:77:ff:fb:74:6a:fd:a2:cd:24:a5:40:99:
                    ba:f1:e0:1f:92:c7:2c:18:65:23:c4:2e:09:14:05:
                    76:06:dd:21:c5:89:a9:ea:bb:72:e6:77:74:8e:d4:
                    5d:d5:5a:01:3e:f1:82:c8:71:aa:c3:8a:d8:00:5e:
                    6d:8d:12:44:d7:96:70:bc:f2:4f:fe:84:ef:d4:87:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:B9:14:50:0B:F1:78:A8:8F:DC:4F:DD:71:76:4F:4F:4F:53:2A
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/1BS5FFAL8Xioj9xP3XF2T09PUyo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207067

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:5e:e4:3e:fc:2e:63:22:1d:bb:ed:14:71:04:f5:e6:0c:
         59:ac:b1:8b:13:a4:7d:34:52:1f:03:df:51:ae:d6:de:38:90:
         e7:bb:cf:5d:2c:56:81:d2:f1:4b:ee:6d:eb:a0:29:f3:85:c5:
         48:e6:00:22:48:15:27:12:88:26:d6:63:84:81:a7:88:7a:92:
         04:86:a6:f5:9b:aa:78:1e:ea:8f:72:95:ee:b6:ef:dc:be:1c:
         c1:ca:47:12:c9:8f:5c:54:f5:6a:ef:42:91:40:11:71:58:d3:
         60:f1:01:b1:eb:f7:ae:4a:47:b2:00:8d:cf:85:59:ad:17:c0:
         a0:06:12:0c:07:66:3b:a3:a6:3f:d5:a1:15:1b:45:e6:5a:4d:
         26:df:2b:00:a0:f6:77:55:28:77:6c:53:0c:c7:30:8c:5f:09:
         d8:bd:1e:e9:0e:21:6c:5b:83:37:58:6d:40:48:b6:2a:5b:65:
         ee:89:e3:a9:06:37:1b:8d:69:31:b1:c9:f8:5f:be:1c:cc:90:
         b9:ee:84:29:2b:5b:bb:7b:2b:c5:ca:e6:ed:0a:f2:13:f5:0a:
         0b:75:61:e1:a2:94:6b:eb:47:3e:a2:a6:41:e3:d8:95:b0:92:
         dd:38:0f:2f:c0:85:78:11:3d:b1:64:ef:a8:10:58:1c:e6:79:
         8b:75:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:06 2026 by rpki-client