Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/f56SXyzVaFxPipkSbWjQspBnG6k.asa
File:                     f56SXyzVaFxPipkSbWjQspBnG6k.asa (raw, json)
Hash identifier:          kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=
Subject key identifier:   7F:9E:92:5F:2C:D5:68:5C:4F:8A:99:12:6D:68:D0:B2:90:67:1B:A9
Certificate issuer:       /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial:       019C5116298DC7CDFD1591BCDDF0CF3B7361
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/f56SXyzVaFxPipkSbWjQspBnG6k.asa
Signing time:             Thu 12 Feb 2026 09:02:12 +0000
ASPA not before:          Thu 12 Feb 2026 09:02:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198731
Providers:                AS: 174
                          AS: 8903
                          AS: 29119
                          AS: 202766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:51:16:29:8d:c7:cd:fd:15:91:bc:dd:f0:cf:3b:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
        Validity
            Not Before: Feb 12 09:02:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f9e925f2cd5685c4f8a99126d68d0b290671ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:87:58:fa:23:55:c1:76:50:f7:8a:6b:b8:
                    7c:7a:15:f5:37:4e:56:cf:2e:5c:65:10:d4:21:8e:
                    73:88:77:aa:a8:c2:b5:69:1e:f9:01:18:42:ec:eb:
                    77:04:ff:e9:78:34:52:81:bc:98:be:ce:e8:b6:9a:
                    a0:44:72:a8:cf:93:fb:c6:16:c6:03:30:56:ba:9e:
                    8d:cd:f8:eb:1a:f2:3a:ab:74:11:96:3b:69:c0:21:
                    7d:7c:fa:b4:32:7e:48:87:97:0f:c9:20:41:f6:6a:
                    ed:2d:a6:73:2a:37:3d:7b:ca:c6:ad:b0:4c:30:b5:
                    f3:69:1b:8f:66:a3:a5:1f:ae:83:ac:d4:10:af:33:
                    b4:d5:de:e1:49:16:50:0f:d2:d2:8b:fc:97:cb:01:
                    66:98:8f:1c:78:8e:30:b4:86:bc:db:51:09:7a:c7:
                    92:5f:8a:52:69:fc:7f:07:02:e4:b5:d3:e4:05:02:
                    7b:b5:32:94:59:b3:cf:31:04:22:95:81:09:30:59:
                    11:97:10:1d:0d:c5:af:fb:b0:19:b4:b7:fa:a4:47:
                    bb:50:9d:d9:8d:45:d0:4e:09:b8:c7:0b:1e:2b:e0:
                    02:7f:c8:dd:c6:e5:ce:f7:09:e1:be:df:a6:9d:a8:
                    ed:dc:bd:5d:eb:ed:8c:8d:23:6e:53:34:3c:93:5e:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:92:5F:2C:D5:68:5C:4F:8A:99:12:6D:68:D0:B2:90:67:1B:A9
            X509v3 Authority Key Identifier:
                keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/f56SXyzVaFxPipkSbWjQspBnG6k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198731

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:fd:91:85:9a:67:da:be:91:87:43:50:5b:a9:f6:e4:7a:
         a9:8c:64:3a:1b:8b:3c:9b:ae:06:71:e6:26:44:0a:ff:0c:e1:
         9f:35:17:ca:ad:29:01:8d:5b:ee:74:66:88:0d:23:11:d0:27:
         a9:d7:3b:8f:05:3d:9b:57:cc:43:12:d3:67:e5:a0:28:91:6e:
         e7:82:d6:57:c9:dc:b2:1b:d0:44:1f:51:62:c6:26:4c:5d:4d:
         1c:5a:44:c2:9c:0a:e4:04:cd:a3:2d:e9:ce:dd:df:38:8f:79:
         49:91:31:35:f7:62:96:18:75:7b:a4:e6:be:50:4b:ae:a3:2f:
         a9:cf:b0:75:53:66:49:8c:98:7a:d7:03:e1:63:c5:32:6b:e1:
         3e:df:e9:b4:df:18:7b:38:cc:ff:fb:0e:28:4f:76:40:48:6d:
         90:5c:14:6a:17:f9:35:2a:a8:8a:f9:71:3e:24:e3:c0:41:dc:
         f1:7e:66:ff:2c:65:79:93:94:72:c1:35:1c:13:bf:f0:de:08:
         f1:1a:23:dc:30:39:8b:de:65:ee:4f:e2:df:f7:cd:21:55:82:
         7b:d5:e3:ec:83:a3:df:54:03:ce:47:61:91:4a:f0:f0:a1:cc:
         57:38:63:f1:4b:0a:1b:ca:7b:c5:a5:0b:9b:91:e3:0a:23:4f:
         5d:ea:0b:ac
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxRFimNx839FZG83fDPO3NhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjYwMjEyMDkwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjllOTI1ZjJjZDU2ODVjNGY4YTk5MTI2ZDY4ZDBiMjkwNjcxYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmHWPojVcF2UPeKa7h8ehX1N05W
zy5cZRDUIY5ziHeqqMK1aR75ARhC7Ot3BP/peDRSgbyYvs7otpqgRHKoz5P7xhbG
AzBWup6NzfjrGvI6q3QRljtpwCF9fPq0Mn5Ih5cPySBB9mrtLaZzKjc9e8rGrbBM
MLXzaRuPZqOlH66DrNQQrzO01d7hSRZQD9LSi/yXywFmmI8ceI4wtIa821EJeseS
X4pSafx/BwLktdPkBQJ7tTKUWbPPMQQilYEJMFkRlxAdDcWv+7AZtLf6pEe7UJ3Z
jUXQTgm4xwseK+ACf8jdxuXO9wnhvt+mnajt3L1d6+2MjSNuUzQ8k15ddQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFH+ekl8s1WhcT4qZEm1o0LKQZxupMB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvZjU2U1h5elZhRnhQaXBrU2JXalFzcEJuRzZrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMISzANBgkqhkiG
9w0BAQsFAAOCAQEAgLr9kYWaZ9q+kYdDUFup9uR6qYxkOhuLPJuuBnHmJkQK/wzh
nzUXyq0pAY1b7nRmiA0jEdAnqdc7jwU9m1fMQxLTZ+WgKJFu54LWV8ncshvQRB9R
YsYmTF1NHFpEwpwK5ATNoy3pzt3fOI95SZExNfdilhh1e6TmvlBLrqMvqc+wdVNm
SYyYetcD4WPFMmvhPt/ptN8YezjM//sOKE92QEhtkFwUahf5NSqoivlxPiTjwEHc
8X5m/yxleZOUcsE1HBO/8N4I8Roj3DA5i95l7k/i3/fNIVWCe9Xj7IOj31QDzkdh
kUrw8KHMVzhj8UsKG8p7xaULm5HjCiNPXeoLrA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:28 2026 by rpki-client