Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa
File:                     4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (raw, json)
Hash identifier:          8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=
Subject key identifier:   E2:33:55:3C:02:66:2C:EF:5C:EA:92:FF:CB:1A:DE:FF:B4:20:F3:74
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019C708028056EA01CA3A1EF8D9F85FCA435
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa
Signing time:             Wed 18 Feb 2026 11:26:12 +0000
ASPA not before:          Wed 18 Feb 2026 11:26:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196610
Providers:                AS: 12306
                          AS: 47536
                          AS: 51531
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:70:80:28:05:6e:a0:1c:a3:a1:ef:8d:9f:85:fc:a4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Feb 18 11:26:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e233553c02662cef5cea92ffcb1adeffb420f374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:88:38:28:af:1d:41:0e:d6:38:51:f6:87:
                    03:09:82:b7:9a:c6:66:f1:4a:af:90:cc:2b:15:89:
                    56:b3:41:a8:93:1d:5a:e8:d1:81:25:ce:25:6a:5b:
                    c4:de:da:3d:ec:d1:e8:25:50:d3:de:72:47:ff:32:
                    a6:bf:61:16:15:5a:6e:be:c1:4f:b9:61:21:40:c6:
                    17:94:5d:d8:f7:98:35:c6:72:f0:3b:7f:a6:12:21:
                    51:68:4c:2b:78:da:7d:c7:fe:91:70:73:a3:a4:93:
                    69:d8:7e:65:12:9b:5e:4a:8d:91:4d:10:67:2a:4a:
                    b3:47:99:b7:e8:90:dc:57:3e:4b:eb:53:b5:b4:ad:
                    c2:f4:b4:61:62:5e:07:cd:83:00:b1:ae:00:91:c8:
                    8a:4c:21:a9:77:07:bc:20:23:99:d9:02:f4:7b:33:
                    93:1d:b4:ef:56:69:4b:20:9d:c9:fb:c6:a2:cd:40:
                    c5:d0:dd:95:42:53:e1:3c:a7:19:bc:11:6b:61:06:
                    25:0e:c9:03:7d:0e:14:c2:ca:dc:7b:c4:c4:df:1d:
                    45:bb:76:ad:db:3a:e4:fc:bb:0f:03:7e:7a:be:b2:
                    a4:6e:cc:bf:90:0e:b6:df:30:ba:fb:60:ba:70:a0:
                    33:d3:77:11:5a:ef:67:db:6b:1c:37:7d:f7:f2:8b:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:33:55:3C:02:66:2C:EF:5C:EA:92:FF:CB:1A:DE:FF:B4:20:F3:74
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196610

    Signature Algorithm: sha256WithRSAEncryption
         65:84:a9:6b:c2:38:9c:a0:93:39:79:31:42:06:73:c4:79:a0:
         52:5d:50:68:c7:4e:67:14:8c:99:27:ed:7f:45:b5:3b:7e:38:
         b1:57:92:66:dc:6c:cd:28:ba:b4:ed:f9:2b:7b:75:f4:e4:f4:
         8a:57:60:d9:9f:16:fd:0d:cd:96:24:de:fc:9b:96:f7:ae:55:
         11:aa:ac:73:00:c5:84:f5:09:dd:e2:59:7a:3d:ca:52:26:31:
         01:c2:37:30:3c:2a:26:93:12:87:53:10:b8:35:47:0e:3f:61:
         61:95:7a:5c:7a:14:b3:38:8a:9e:59:45:4c:c3:82:3f:76:77:
         55:55:d2:d3:2f:4b:e1:00:3e:dd:e5:39:49:49:40:d2:ab:86:
         d7:32:bd:27:7d:2f:b8:60:84:0d:b5:eb:b2:5c:f6:a3:3e:42:
         21:23:28:a6:f6:0d:67:43:6a:12:42:a6:bc:45:38:e0:30:aa:
         6b:af:b2:e3:29:f4:d0:02:81:cc:49:79:d8:b2:1f:dd:79:e0:
         95:db:b0:07:95:cf:59:4b:f5:b9:47:d4:f9:cb:b5:ca:d6:e1:
         56:6f:79:d9:59:44:93:9e:df:d2:31:98:05:62:16:94:ed:87:
         7a:3b:e8:6f:98:4a:d8:14:4d:c2:d0:84:c7:c9:ac:2e:64:2b:
         0c:1a:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:56 2026 by rpki-client