Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/INbvbexKikJqE06AvP-OgH6xyns.asa
File:                     INbvbexKikJqE06AvP-OgH6xyns.asa (raw, json)
Hash identifier:          6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=
Subject key identifier:   20:D6:EF:6D:EC:4A:8A:42:6A:13:4E:80:BC:FF:8E:80:7E:B1:CA:7B
Certificate issuer:       /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial:       019C75B614887E8FFE5389CBF4BEF054338A
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/INbvbexKikJqE06AvP-OgH6xyns.asa
Signing time:             Thu 19 Feb 2026 11:43:12 +0000
ASPA not before:          Thu 19 Feb 2026 11:43:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39790
Providers:                AS: 25248
                          AS: 199803
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:75:b6:14:88:7e:8f:fe:53:89:cb:f4:be:f0:54:33:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Validity
            Not Before: Feb 19 11:43:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20d6ef6dec4a8a426a134e80bcff8e807eb1ca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:96:20:f5:93:5a:2b:3d:89:5c:a7:82:1a:
                    25:c0:52:aa:82:ea:c5:5e:e4:7a:44:d9:3f:07:3e:
                    06:71:2c:23:88:0c:10:63:8b:91:2b:e0:77:ed:f1:
                    97:95:a1:1d:60:b2:3b:f8:f6:12:3f:45:33:62:18:
                    83:04:57:ae:16:fa:f0:ae:12:70:49:6f:0e:4d:21:
                    5c:50:96:a8:cb:ce:24:83:03:0e:4c:59:6c:20:40:
                    5c:a7:30:74:39:07:24:15:cb:49:f4:44:bb:ba:5f:
                    05:a2:60:aa:60:1a:d7:52:6e:95:8f:bc:0f:a0:48:
                    da:e7:20:53:1b:73:51:ba:e8:2e:ff:c6:0d:53:7d:
                    ac:d8:16:5b:bc:33:a4:30:c7:12:54:b6:d1:54:68:
                    f7:23:b7:c4:b0:d5:15:68:7e:5f:88:1c:24:02:58:
                    6e:61:7d:b6:29:6c:0e:33:9b:98:a4:23:8b:b4:8a:
                    58:52:34:64:3c:58:bd:9f:e9:88:df:54:74:e9:7b:
                    1d:1a:93:43:91:e0:5c:78:d8:0e:39:4d:01:b6:a8:
                    18:7e:fd:ff:a1:24:cc:a5:9f:64:51:cb:42:a3:13:
                    5d:d9:bb:3d:1e:f2:7b:2d:da:9e:0a:41:fb:63:39:
                    de:6f:a3:98:90:b9:40:19:65:55:f0:e2:16:35:9a:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:EF:6D:EC:4A:8A:42:6A:13:4E:80:BC:FF:8E:80:7E:B1:CA:7B
            X509v3 Authority Key Identifier:
                keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/INbvbexKikJqE06AvP-OgH6xyns.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39790

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:4a:8e:03:78:2f:74:b3:a2:24:24:9e:9a:80:f3:2e:04:
         94:f2:7b:7f:7f:ad:b1:df:fc:b0:62:20:5d:94:a5:a5:55:8b:
         dd:79:b7:ba:82:5e:66:38:b6:34:18:5a:96:48:cf:72:83:7e:
         89:b9:ed:df:21:97:64:d6:2b:4d:95:c1:dd:4b:69:3e:6d:d9:
         bd:ff:48:b3:dc:8c:45:66:95:f0:f2:2e:a1:54:53:f5:44:f9:
         78:b5:d5:62:b0:c3:79:8c:41:2b:6a:e8:ec:ee:2f:dc:88:7a:
         07:0e:93:cb:1c:ae:81:1c:b3:53:b2:c9:2a:ed:b2:ae:9f:cb:
         c7:a1:40:d9:97:e8:6b:a4:de:af:f0:e4:96:dd:c0:f7:c7:7f:
         d7:1e:60:3c:05:ee:1d:9a:3b:c0:28:34:ec:f2:1f:57:15:be:
         df:79:82:7c:b1:52:65:7b:c9:a4:6e:c2:d2:0e:74:5c:52:40:
         5e:64:1e:08:17:d5:1c:25:c6:96:04:05:2c:ff:ce:67:67:06:
         01:dd:3b:6f:b6:50:3c:f0:c9:28:7c:04:b3:ee:ef:ea:3b:d5:
         9d:04:49:d1:59:b4:b6:07:30:c4:ef:06:bb:7f:15:dc:bd:20:
         08:90:6b:c8:e9:17:12:ce:e5:81:a0:54:34:a0:7c:f1:8f:63:
         e3:63:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:12 2026 by rpki-client