Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/bMET0vgbMSpak17KuCwZIPjOPiA.asa
File:                     bMET0vgbMSpak17KuCwZIPjOPiA.asa (raw, json)
Hash identifier:          gPoFxfWrrJ7T/UwOlotNIRMMkTMt1S7z/4qqFihH3N0=
Subject key identifier:   6C:C1:13:D2:F8:1B:31:2A:5A:93:5E:CA:B8:2C:19:20:F8:CE:3E:20
Certificate issuer:       /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial:       019C8C92584373CC1935275A30DB4CFD9B40
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/bMET0vgbMSpak17KuCwZIPjOPiA.asa
Signing time:             Mon 23 Feb 2026 22:15:26 +0000
ASPA not before:          Mon 23 Feb 2026 22:15:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200240
Providers:                AS: 42831
                          AS: 59796
                          AS: 398999
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8c:92:58:43:73:cc:19:35:27:5a:30:db:4c:fd:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
        Validity
            Not Before: Feb 23 22:15:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cc113d2f81b312a5a935ecab82c1920f8ce3e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:8f:b0:40:30:4b:40:b6:6d:f7:48:42:95:
                    67:da:5b:ce:41:0d:bb:62:ea:45:c3:68:bd:f2:2a:
                    dd:ca:f0:e9:39:7d:74:b3:d8:85:4d:83:ef:66:36:
                    c7:a0:5c:41:95:50:0c:1c:fc:3d:d2:dd:cc:5d:88:
                    56:84:7b:6a:3e:ed:1e:bf:5c:78:ca:3c:fa:08:fb:
                    93:79:2d:78:ae:90:aa:3c:af:d2:5b:ac:60:b6:a0:
                    7d:2d:09:a0:65:19:b5:42:00:1f:43:3c:81:68:bf:
                    d3:a5:7f:15:89:46:10:1e:c9:de:11:3b:40:00:9b:
                    dd:00:e2:a4:7a:1d:b1:89:45:39:40:e4:e9:03:80:
                    10:02:35:09:eb:d8:5d:e9:ba:6a:c6:53:57:8e:9d:
                    7d:91:e9:13:56:cb:a2:17:8d:95:18:57:8d:aa:97:
                    36:9f:d8:e6:aa:85:ae:6e:48:88:2f:e2:6a:5f:23:
                    8d:1a:5d:56:16:99:f1:25:e2:26:de:df:48:7b:e9:
                    a7:30:11:3c:0a:a9:c7:b5:48:fb:18:e6:9b:3a:db:
                    54:4c:30:eb:10:b2:1f:6d:ee:59:0c:e7:21:f8:b1:
                    8a:37:78:7d:4e:0b:75:02:ec:e4:10:21:4a:a4:31:
                    6a:a0:97:23:d8:ae:d5:15:6f:15:d6:ab:49:11:63:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:13:D2:F8:1B:31:2A:5A:93:5E:CA:B8:2C:19:20:F8:CE:3E:20
            X509v3 Authority Key Identifier:
                keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/bMET0vgbMSpak17KuCwZIPjOPiA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200240

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:2c:18:05:af:ca:16:46:d5:c1:83:b5:db:dd:1f:30:29:
         8b:97:c8:a1:3f:98:ab:67:10:3a:1c:25:30:14:7c:ea:c5:ad:
         36:ef:5e:48:9c:8c:85:53:80:29:7c:5e:ad:22:ae:7a:e1:49:
         4c:ee:52:6b:ab:7a:c4:00:80:45:e2:e9:55:2a:c3:ab:a2:a3:
         62:58:54:98:5d:86:8c:75:83:ad:d7:6a:e5:f6:5f:38:51:6a:
         92:9a:c0:38:8e:91:b4:dd:9e:87:03:aa:d1:78:88:ad:1c:23:
         f4:b6:58:4d:e8:a6:4c:58:54:3c:60:94:bd:fe:bc:4e:42:9d:
         b8:25:f5:7d:b2:0e:08:61:12:a3:87:f2:31:8c:e9:aa:80:72:
         09:e6:80:38:62:ee:de:cd:12:09:57:11:e1:4f:5b:51:bc:fb:
         11:5b:30:29:69:2f:32:d4:b1:d4:1f:4e:3e:c4:b5:1b:1c:bb:
         01:ab:42:e8:aa:6c:2a:8c:63:67:2b:5a:8e:02:79:d6:c5:96:
         29:26:35:01:86:1a:0e:cc:6a:d3:75:79:87:61:34:f6:d0:9b:
         51:a7:35:58:c2:fa:68:be:00:f1:c1:4f:1c:1c:c5:78:78:ca:
         e1:7d:0d:98:be:ce:a9:28:c8:4d:56:71:84:a6:67:30:5f:fb:
         b9:91:cc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:58 2026 by rpki-client