Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/3_FU6n2IWx1l9fsCjS97MyAKAdM.asa
File:                     3_FU6n2IWx1l9fsCjS97MyAKAdM.asa (raw, json)
Hash identifier:          VN6qu8DE/I6YAPYBBzie4lL8J8fom3nZVKg50BSdJzg=
Subject key identifier:   DF:F1:54:EA:7D:88:5B:1D:65:F5:FB:02:8D:2F:7B:33:20:0A:01:D3
Certificate issuer:       /CN=646416ca4bee1d152bed121bdd42043047092e75
Certificate serial:       01A1120DA34CEC0D2B9D2A194C1A999CA296
Authority key identifier: 64:64:16:CA:4B:EE:1D:15:2B:ED:12:1B:DD:42:04:30:47:09:2E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/3_FU6n2IWx1l9fsCjS97MyAKAdM.asa
Signing time:             Tue 06 Oct 2026 16:30:45 +0000
ASPA not before:          Tue 06 Oct 2026 16:30:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33901
Providers:                AS: 50607
                          AS: 62081
                          AS: 201054
                          AS: 212261
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:0d:a3:4c:ec:0d:2b:9d:2a:19:4c:1a:99:9c:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646416ca4bee1d152bed121bdd42043047092e75
        Validity
            Not Before: Oct  6 16:30:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dff154ea7d885b1d65f5fb028d2f7b33200a01d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:40:0a:d1:83:59:44:19:ca:52:6b:93:45:
                    5e:5b:83:b1:79:2f:49:e8:1b:4d:f8:40:37:c3:37:
                    98:1a:06:b2:5c:7b:9c:86:34:81:8e:12:2b:8e:90:
                    f0:bf:62:fd:7b:55:e5:23:14:25:52:7c:9c:8e:b2:
                    22:b0:24:ee:e0:e1:0e:6b:c1:c8:6a:00:4f:be:e3:
                    8e:99:cb:74:9e:1e:17:fd:a7:13:54:0d:de:1c:50:
                    d4:04:ba:99:3a:3d:ec:6e:5c:03:b8:56:f2:80:06:
                    f3:22:ab:f6:bf:b1:8e:12:95:97:e0:e9:9d:8c:43:
                    48:18:bb:93:cc:c2:cf:bc:b0:ed:13:6d:c0:85:06:
                    82:63:ef:6d:78:cd:c5:0b:69:67:52:8e:55:96:53:
                    12:50:17:29:00:48:d8:67:cc:86:bd:11:13:eb:24:
                    55:33:a0:42:5f:fd:c0:b5:f7:c3:55:88:de:75:ff:
                    6e:6d:7a:6a:65:a5:ed:45:7c:67:74:1f:22:f6:f8:
                    0b:05:c4:53:c8:a8:0c:85:09:de:09:a8:fa:33:df:
                    c4:7d:e8:33:81:90:cf:ed:72:06:c0:c2:bb:d6:21:
                    fb:b9:47:ff:40:f0:17:44:ef:df:f7:2b:e8:58:f3:
                    34:ec:55:91:76:5a:08:bb:bd:69:70:6a:52:48:9f:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:54:EA:7D:88:5B:1D:65:F5:FB:02:8D:2F:7B:33:20:0A:01:D3
            X509v3 Authority Key Identifier:
                keyid:64:64:16:CA:4B:EE:1D:15:2B:ED:12:1B:DD:42:04:30:47:09:2E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/3_FU6n2IWx1l9fsCjS97MyAKAdM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33901

    Signature Algorithm: sha256WithRSAEncryption
         35:af:66:b4:33:96:2b:b5:67:d6:68:9b:65:a6:9b:96:de:fd:
         2d:e8:88:5a:7e:41:7b:c9:42:2b:5f:55:41:f1:56:6d:6e:cf:
         ce:57:be:43:9a:77:e8:31:2a:71:60:36:b0:cf:a1:8a:2e:a9:
         54:e5:27:15:e8:ca:72:f5:0c:43:f5:3c:cb:91:b9:71:ba:3c:
         f5:89:3b:62:26:8e:09:7d:d3:63:30:12:12:69:7e:c4:48:1c:
         0f:00:6f:dd:b6:51:3f:92:6a:70:13:89:15:b6:05:56:a1:85:
         cd:d1:84:91:da:87:7f:c8:cd:9f:20:3a:6f:fd:b0:20:b1:47:
         48:b2:b6:1a:aa:81:c3:54:08:02:7c:6c:9c:d0:f7:28:39:56:
         ed:77:ca:ae:10:ea:db:72:70:4b:c6:d6:63:e6:0c:26:fa:ae:
         a6:3e:62:ac:1c:48:c0:0a:6f:d5:d8:b4:98:e1:2a:36:64:05:
         a5:80:94:0d:5b:bb:e5:a3:00:25:13:26:10:9d:93:e9:a7:7e:
         38:6e:58:ef:39:02:0e:42:a6:97:36:40:04:8e:d5:da:dd:c0:
         3b:df:71:3c:72:3c:f1:ac:5b:9a:64:0d:dc:d6:f5:79:4e:fd:
         5e:7a:94:44:7e:86:7b:b9:50:ab:07:59:af:ec:cb:22:76:57:
         06:1a:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:46:20 2026 by rpki-client