Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/q0LlzmM8E8pM2I1fVThdkBbhcsc.asa
File:                     q0LlzmM8E8pM2I1fVThdkBbhcsc.asa (raw, json)
Hash identifier:          KUK6/Ec9nAX5NcTnuxJ3vbPAN4QtO/b7t3p4IVGMuRU=
Subject key identifier:   AB:42:E5:CE:63:3C:13:CA:4C:D8:8D:5F:55:38:5D:90:16:E1:72:C7
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       019C8EA110F76F2565906A907BACEC298653
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/q0LlzmM8E8pM2I1fVThdkBbhcsc.asa
Signing time:             Tue 24 Feb 2026 07:50:46 +0000
ASPA not before:          Tue 24 Feb 2026 07:50:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15935
Providers:                AS: 174
                          AS: 1299
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8e:a1:10:f7:6f:25:65:90:6a:90:7b:ac:ec:29:86:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Feb 24 07:50:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab42e5ce633c13ca4cd88d5f55385d9016e172c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:0f:ae:bd:fa:f8:9a:0b:88:d7:ab:07:65:
                    34:30:9a:9d:f7:a7:a8:5a:72:4a:46:33:a9:10:79:
                    20:33:8e:7a:a3:57:83:7b:69:3c:58:f6:a9:c5:58:
                    33:79:2d:e0:5a:66:8a:91:26:a1:b3:d2:20:94:a0:
                    98:99:1e:04:a1:67:07:0e:d1:20:cc:d2:3d:17:30:
                    32:2d:b0:5e:6f:f8:28:b9:96:98:44:ff:54:8f:63:
                    5f:c7:11:60:b3:c2:64:7d:1d:c9:53:36:66:c1:7d:
                    20:19:75:d3:42:0e:5f:22:aa:02:05:be:9c:79:14:
                    34:83:c3:f1:b0:ed:b3:6c:3b:f7:f3:af:66:02:73:
                    40:1f:85:64:a3:ea:d3:4a:e6:bf:7f:17:af:2f:25:
                    7c:16:49:67:5c:e4:84:3b:02:35:51:d3:7e:4e:fe:
                    4f:b4:ff:6f:aa:fe:c2:8e:88:ef:2e:5c:0e:30:ab:
                    cd:1a:64:af:0e:4f:36:dc:25:1f:37:33:2c:71:5c:
                    0a:76:a1:82:a9:15:92:a1:bc:52:10:d2:86:20:b8:
                    b8:a8:2a:20:47:fe:ad:4a:d4:02:2f:ce:91:bc:08:
                    c4:11:a6:d2:72:17:01:50:75:0b:a2:ce:1f:f8:7f:
                    bc:50:c8:6f:ce:ce:dd:99:a4:c4:c9:67:b3:6f:ae:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:E5:CE:63:3C:13:CA:4C:D8:8D:5F:55:38:5D:90:16:E1:72:C7
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/q0LlzmM8E8pM2I1fVThdkBbhcsc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15935

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:39:e0:57:87:23:97:bf:3d:ee:d0:22:07:53:ea:ab:d3:
         d0:6b:4e:0b:28:37:0e:88:af:8b:22:6f:fd:ce:87:95:5c:ef:
         e2:fd:1e:ed:75:9f:8f:15:07:93:51:0b:39:13:54:09:85:b3:
         89:ec:38:4c:12:e8:15:ba:01:d7:d3:41:fd:e1:40:94:4e:aa:
         ef:1e:59:bf:46:96:94:27:7f:88:e1:8f:dd:d8:84:7b:91:ad:
         f4:70:bb:eb:77:11:c3:35:1d:82:0f:a5:42:c8:92:be:bc:37:
         e3:59:ef:e1:be:1a:fc:59:bc:d0:4a:59:30:52:44:71:af:22:
         21:43:4a:2e:a8:30:c3:bc:95:1a:4b:3f:f9:8d:c2:a4:eb:cc:
         4a:a1:d5:20:ad:4c:6c:df:8b:e1:d9:bf:3b:1a:a1:f9:21:32:
         ae:13:ed:2f:50:8c:58:b7:0e:2e:97:34:76:09:c7:db:44:a7:
         79:de:32:9b:97:6e:eb:ea:29:cc:f3:a2:27:79:d7:fe:33:a3:
         bf:e2:99:3a:1b:32:12:99:14:b3:c2:0f:65:77:ee:94:41:69:
         35:3c:7f:b1:6f:df:81:16:b5:b1:57:52:cd:08:b9:1a:58:5f:
         e3:d6:ae:a1:12:67:2f:72:17:35:e1:73:56:f9:06:4c:12:5c:
         07:77:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:43 2026 by rpki-client