Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa
File:                     IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (raw, json)
Hash identifier:          NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=
Subject key identifier:   21:B2:78:C8:42:EF:B6:6F:07:5D:DB:B4:62:9F:C2:09:11:D5:94:FF
Certificate issuer:       /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial:       019C7106BCEC065B78CC9BC884E656C42800
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa
Signing time:             Wed 18 Feb 2026 13:53:12 +0000
ASPA not before:          Wed 18 Feb 2026 13:53:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49206
Providers:                AS: 174
                          AS: 1299
                          AS: 39392
                          AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:71:06:bc:ec:06:5b:78:cc:9b:c8:84:e6:56:c4:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
        Validity
            Not Before: Feb 18 13:53:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21b278c842efb66f075ddbb4629fc20911d594ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:86:83:d2:c8:9c:06:3f:fc:a4:d7:fb:a3:
                    c0:27:16:dc:b0:9c:2e:04:cb:11:13:50:2d:a2:af:
                    fb:e5:94:16:5a:7e:c0:30:c4:b8:d4:5a:44:6b:ae:
                    37:37:12:85:7d:8e:c3:99:3a:ec:c9:43:c0:52:87:
                    7b:b8:ff:4d:c7:76:c1:da:b1:2f:c3:a6:ee:34:20:
                    0f:14:b3:4a:20:2d:67:f2:7b:73:31:00:ac:2d:0f:
                    0a:f7:64:55:84:dc:b3:8b:f1:1b:37:89:da:35:2a:
                    dc:c0:40:ca:f9:d9:9b:1a:67:a6:98:69:d5:1a:18:
                    97:28:e2:cf:8d:be:45:b5:f1:05:17:73:be:7d:15:
                    66:35:8b:6a:1b:7e:06:56:28:6f:a1:2e:56:a1:ac:
                    39:58:f9:f5:54:29:0a:5a:7d:3b:4e:4d:59:2c:cd:
                    91:07:ab:9c:54:2a:4c:8f:09:5c:7b:70:f4:86:c9:
                    0d:39:18:dc:84:13:5b:9a:39:95:fb:82:31:62:73:
                    84:82:56:49:61:f8:0e:de:d3:fb:46:ff:78:13:cf:
                    10:dd:a6:7b:74:b6:88:70:59:58:1d:7d:3c:ad:fd:
                    e8:02:cb:ed:6b:17:39:74:0a:2e:37:84:92:49:ef:
                    b3:92:07:2a:ca:dd:ef:1d:aa:6e:c9:80:12:ce:7a:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:78:C8:42:EF:B6:6F:07:5D:DB:B4:62:9F:C2:09:11:D5:94:FF
            X509v3 Authority Key Identifier:
                keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49206

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:54:fa:f6:b4:33:94:a0:b1:01:3c:ff:d8:a3:ec:a9:ff:
         d8:5f:f2:e6:1d:66:99:07:c3:f2:1a:5c:c9:e7:d0:65:17:3e:
         19:69:00:5c:2c:c2:1a:4c:72:aa:45:77:c2:e3:60:fc:5a:74:
         3c:44:92:fd:21:12:5b:42:79:3e:ee:18:8e:95:28:00:be:af:
         e8:b6:b5:44:db:cb:23:da:59:d6:05:23:ef:4c:9c:b0:fe:aa:
         d2:66:9a:2e:be:25:7e:8e:97:7b:56:b1:c1:48:70:ce:8c:c7:
         c1:4a:0a:c3:92:b8:46:c0:19:ab:8d:25:95:b4:f6:d1:82:d6:
         b4:f2:3c:8f:e3:01:55:22:8c:dc:75:47:25:26:a0:b4:46:89:
         c1:a2:51:12:18:e8:41:5b:b0:e5:17:8e:9c:6c:28:d1:84:ef:
         9e:1d:39:5e:47:95:1f:d1:0b:e1:23:36:ae:d2:56:73:eb:f6:
         f4:2e:f1:78:89:46:74:54:2e:d3:d1:a8:8a:5b:96:67:21:d4:
         b3:b6:9e:d3:2f:5a:fb:88:ab:f7:4e:3f:02:db:d1:3c:ae:1b:
         34:4b:b0:d4:af:2b:6f:f0:ef:32:93:69:d2:09:03:02:92:81:
         92:7b:7c:7f:4a:24:a6:fc:ea:4c:a7:5b:a4:0a:2d:75:8d:1a:
         b7:c6:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:08 2026 by rpki-client