Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/_2TjfVrCZo9B9qI9aJsIIj8RhAk.asa
File:                     _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (raw, json)
Hash identifier:          M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=
Subject key identifier:   FF:64:E3:7D:5A:C2:66:8F:41:F6:A2:3D:68:9B:08:22:3F:11:84:09
Certificate issuer:       /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial:       019C99464CFDBDD5C58C99A494B7CBF01D0B
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/_2TjfVrCZo9B9qI9aJsIIj8RhAk.asa
Signing time:             Thu 26 Feb 2026 09:27:26 +0000
ASPA not before:          Thu 26 Feb 2026 09:27:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211855
Providers:                AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:99:46:4c:fd:bd:d5:c5:8c:99:a4:94:b7:cb:f0:1d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
        Validity
            Not Before: Feb 26 09:27:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff64e37d5ac2668f41f6a23d689b08223f118409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:6f:ca:25:cb:c5:de:bc:5b:23:ea:98:c0:
                    a6:c7:a3:71:e4:bf:34:89:24:3c:48:bc:c7:26:40:
                    7e:2d:f2:a3:dc:82:63:63:a1:76:49:7d:ea:48:20:
                    5a:be:e4:78:cb:a9:fd:57:51:20:f1:d2:d3:41:df:
                    6f:3a:fa:90:0a:07:da:d3:6f:48:e3:73:6a:01:82:
                    95:4e:1d:e6:fa:58:66:a5:0f:d5:96:30:6d:33:ee:
                    fd:af:79:41:57:77:d8:19:10:ad:62:8d:8f:07:7f:
                    24:fe:b4:94:3f:86:ef:c8:20:21:05:7b:d9:fa:3d:
                    05:7c:a3:43:2f:e6:17:81:86:d0:cb:3e:90:cb:ad:
                    43:35:c7:de:59:e1:43:e9:20:1d:6e:24:45:e6:04:
                    d6:b2:1a:82:a3:b4:20:61:5e:c3:8b:5c:99:98:8c:
                    27:e2:e1:ba:c3:20:70:83:9e:95:db:ca:b4:5c:7a:
                    d8:c6:51:c7:d6:17:f9:37:22:2d:a4:40:45:9f:f0:
                    2b:f1:1e:39:c1:38:80:da:8c:f4:2e:a4:11:c7:d7:
                    70:78:32:ae:17:2e:2d:02:f7:e3:15:44:bc:5b:0d:
                    b7:04:fb:51:91:d8:77:5a:6e:33:30:44:63:2c:38:
                    da:5e:33:8d:8d:20:96:9f:4e:ca:ed:63:8d:7e:78:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:E3:7D:5A:C2:66:8F:41:F6:A2:3D:68:9B:08:22:3F:11:84:09
            X509v3 Authority Key Identifier:
                keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/_2TjfVrCZo9B9qI9aJsIIj8RhAk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211855

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:64:1d:31:0e:7e:35:72:9a:ce:b5:1f:01:22:9d:c5:eb:
         5f:ae:c9:7c:09:ad:81:74:f1:9a:f0:b9:fd:88:d6:02:bd:17:
         49:62:a1:7c:ba:71:20:70:e3:70:54:78:a3:0c:d1:90:73:d7:
         e9:60:66:49:f1:21:3c:91:d3:2e:c0:a3:ed:f2:55:64:d2:16:
         b5:8a:70:4e:41:26:aa:f7:64:64:68:96:ef:19:d2:05:29:de:
         f8:d3:3f:4d:04:60:20:5b:87:83:38:ea:c2:70:05:50:b2:ee:
         de:d2:40:93:b1:f3:69:dc:f7:d1:9b:1f:a5:16:ef:5d:78:8c:
         d4:78:59:52:74:f6:07:1a:4f:db:47:57:1f:92:39:13:f2:88:
         28:4f:35:db:57:d4:6a:4a:a0:bc:93:e9:21:4f:66:06:52:f5:
         39:0d:3a:56:1b:36:15:c3:72:e9:ca:d1:f4:64:66:b8:8e:39:
         95:5b:4a:65:55:32:95:74:35:c3:60:2a:bd:97:fc:ab:14:46:
         10:04:a4:16:52:2d:5c:63:11:03:45:d8:a2:c0:1f:a7:70:94:
         05:3e:14:29:7a:9f:ee:5c:21:e5:b1:70:2c:55:81:67:72:0b:
         bf:1a:19:b3:95:dc:63:90:60:be:74:74:b1:fa:4c:e2:fd:3e:
         14:3e:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:48 2026 by rpki-client