Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/rQM6hcyKgdO32uWWqq-FwzbquX0.asa
File:                     rQM6hcyKgdO32uWWqq-FwzbquX0.asa (raw, json)
Hash identifier:          zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=
Subject key identifier:   AD:03:3A:85:CC:8A:81:D3:B7:DA:E5:96:AA:AF:85:C3:36:EA:B9:7D
Certificate issuer:       /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial:       019C7A77F32E9E87C8ADA7F76C75DE944E1E
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/rQM6hcyKgdO32uWWqq-FwzbquX0.asa
Signing time:             Fri 20 Feb 2026 09:53:27 +0000
ASPA not before:          Fri 20 Feb 2026 09:53:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41312
Providers:                AS: 41966
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7a:77:f3:2e:9e:87:c8:ad:a7:f7:6c:75:de:94:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
        Validity
            Not Before: Feb 20 09:53:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad033a85cc8a81d3b7dae596aaaf85c336eab97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:03:57:2c:14:11:3a:c5:e3:6b:1a:f5:f8:
                    ed:39:77:d4:ae:f4:d3:2b:b2:b9:77:ea:db:e4:b9:
                    95:35:db:f4:79:95:f7:67:ea:95:f5:93:27:f6:6f:
                    b0:77:d5:a1:46:e0:59:35:8a:4e:9a:2a:9e:9b:1c:
                    69:04:19:fa:44:09:d9:80:31:af:f3:24:d6:10:53:
                    49:2b:39:83:85:fa:8e:53:11:c8:0a:0a:57:54:10:
                    46:ab:48:bc:1d:98:91:4c:bd:b7:78:19:d4:14:c5:
                    e3:ed:05:5a:b3:32:0a:45:84:36:1e:f2:e5:96:8e:
                    3b:1a:6a:9b:73:10:10:cb:21:b2:fc:05:c2:e5:21:
                    d0:74:e0:d3:b7:01:04:73:2a:a5:ad:cf:cd:7a:c1:
                    96:a4:b2:cc:5b:07:e3:d5:27:45:19:66:5c:fa:23:
                    27:44:96:fa:0e:c0:6c:ab:2c:ba:32:26:eb:bc:1b:
                    73:79:64:36:8f:ef:fe:fb:f2:82:d1:a5:b3:19:20:
                    9e:94:da:0f:cd:a3:53:dd:18:c7:31:75:36:90:43:
                    25:e8:37:dc:75:0c:c0:73:92:19:4b:10:ce:35:c2:
                    33:95:6e:23:7c:01:05:b4:d2:e8:e0:29:8d:2d:27:
                    7a:84:08:b1:d0:0a:1d:74:0e:ca:7a:13:4a:e4:54:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:3A:85:CC:8A:81:D3:B7:DA:E5:96:AA:AF:85:C3:36:EA:B9:7D
            X509v3 Authority Key Identifier:
                keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/rQM6hcyKgdO32uWWqq-FwzbquX0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41312

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:60:58:cf:39:f2:43:86:b9:2d:8b:e1:ca:75:89:83:e9:
         b0:23:e4:81:00:44:95:e8:56:7b:cd:0b:ba:c2:7e:04:5a:de:
         c9:9d:97:20:1f:1c:ff:f8:c9:3f:75:16:00:df:16:ec:40:88:
         11:2b:b9:2e:fc:c6:bb:92:fc:f1:2d:83:e9:98:ae:d6:05:db:
         fb:51:4d:72:05:e3:f1:53:ee:6e:d9:ab:31:6d:2d:ef:dd:23:
         da:d5:ab:49:ec:ab:bf:30:29:b5:f6:f5:34:28:30:57:6f:05:
         30:9c:8d:ef:82:f3:1e:8e:9b:df:b2:59:e3:06:42:96:df:96:
         01:53:bf:be:32:69:91:c2:a1:d5:af:dc:63:3a:c9:28:d2:e5:
         0b:a9:6b:d0:82:6f:4e:14:48:30:01:3f:06:df:14:6c:fd:76:
         a0:cd:6f:60:fa:83:1b:b2:6d:19:7c:13:58:48:55:af:ef:8c:
         7c:ab:fa:e4:d7:bc:6a:6e:ee:c3:22:9b:60:22:d8:c6:7c:5a:
         ca:cb:47:71:52:6a:00:04:05:f6:8d:52:63:65:93:af:6a:97:
         04:e1:eb:15:2b:10:d7:64:d2:2f:e7:41:2c:18:ca:89:aa:32:
         64:a2:2c:99:11:af:10:a7:e0:4b:f1:d3:5b:cf:7c:b8:b6:a7:
         5e:32:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:47 2026 by rpki-client