Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/Gki0ECoPAysMOyKXl5MRgDPOl8U.asa
File:                     Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (raw, json)
Hash identifier:          E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=
Subject key identifier:   1A:48:B4:10:2A:0F:03:2B:0C:3B:22:97:97:93:11:80:33:CE:97:C5
Certificate issuer:       /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial:       019C954E105FCFC5C19C1602AC07AB277246
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/Gki0ECoPAysMOyKXl5MRgDPOl8U.asa
Signing time:             Wed 25 Feb 2026 14:57:26 +0000
ASPA not before:          Wed 25 Feb 2026 14:57:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201719
Providers:                AS: 9146
                          AS: 21107
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:95:4e:10:5f:cf:c5:c1:9c:16:02:ac:07:ab:27:72:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
        Validity
            Not Before: Feb 25 14:57:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a48b4102a0f032b0c3b22979793118033ce97c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a3:42:dc:fb:22:88:14:02:74:1c:92:3b:c5:
                    45:ea:ee:ee:17:81:03:5c:c0:9a:b8:66:fa:40:45:
                    a2:f4:82:bf:2f:a3:27:9d:52:27:be:bc:ad:6f:a2:
                    c5:48:f3:4a:71:f1:84:3a:b8:06:ca:16:7f:f8:fa:
                    2f:9b:73:ed:0e:16:59:f4:6b:f0:09:b4:a4:76:7d:
                    a2:f0:e2:b5:86:17:37:03:a4:94:f1:d7:17:9c:0b:
                    00:05:de:12:53:be:8c:ed:f4:a5:cc:d1:45:ff:24:
                    63:f3:76:9c:f5:4a:de:16:bb:88:a8:b5:e0:10:43:
                    d6:fc:9b:74:fd:bd:7d:8c:64:7b:9b:ac:a1:31:01:
                    e4:9f:df:d3:bf:1e:0f:94:8f:1a:99:46:25:0a:53:
                    13:d5:89:61:8f:ea:5d:24:99:26:68:d1:fa:c2:60:
                    62:30:f8:27:4f:3e:2a:ef:c6:32:c2:07:cf:60:46:
                    14:6d:44:ea:7a:89:a0:43:e9:72:35:1b:38:79:4e:
                    aa:6e:f1:c3:39:dd:17:ce:d6:13:86:c0:03:ec:88:
                    6d:7a:79:96:6d:73:b7:4b:51:60:c1:8f:8b:bd:e1:
                    aa:c9:51:1f:01:ee:1d:1a:05:3f:7c:f8:db:4c:0c:
                    ab:b4:75:4a:c0:44:b1:79:66:06:bc:8e:1d:9c:19:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:B4:10:2A:0F:03:2B:0C:3B:22:97:97:93:11:80:33:CE:97:C5
            X509v3 Authority Key Identifier:
                keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/Gki0ECoPAysMOyKXl5MRgDPOl8U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201719

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:12:e0:19:6b:6a:84:8c:7b:79:e9:38:c0:1e:b0:d2:31:
         98:a8:25:e2:d4:7b:ea:57:3c:b3:30:7e:9c:ac:d0:0e:ac:02:
         ff:89:67:36:b7:2b:3d:c6:2f:ff:e6:f8:c0:f5:5f:84:9c:1a:
         03:4f:2d:d5:3c:2c:ce:c4:01:db:17:69:62:9f:fa:1d:9a:b1:
         d0:27:5c:2d:30:37:d5:1d:2f:3a:61:ed:4c:b9:98:fc:dd:21:
         24:40:37:e5:e2:f7:83:86:c4:5d:25:62:f7:29:ba:99:da:e9:
         db:b9:b5:63:fd:b7:e5:3f:48:05:75:0f:9e:9b:8f:59:92:27:
         28:bc:81:35:1c:79:cb:ba:12:66:eb:1a:8a:f5:60:f4:a3:68:
         38:af:f4:b1:eb:a3:15:24:25:91:7f:c0:91:18:16:0a:a3:2e:
         88:bf:a6:4c:54:03:c1:f8:a5:1c:ba:27:27:fa:4c:f8:71:13:
         05:22:30:92:89:53:bc:a3:b9:1e:f5:19:6f:9e:e1:93:39:76:
         db:72:38:75:4f:a9:2b:f7:14:ff:c6:f6:71:6d:90:60:01:f3:
         2e:37:f0:27:13:0d:74:d2:63:59:bd:4e:98:4a:9a:65:a0:de:
         1d:d9:8c:df:e6:b9:b0:ab:2e:0f:9b:10:a8:f1:c8:a0:6b:45:
         19:dd:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:51 2026 by rpki-client