Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/xjRDHoH9VVkWUDWO-Ry0GGyawd4.asa
File:                     xjRDHoH9VVkWUDWO-Ry0GGyawd4.asa (raw, json)
Hash identifier:          pNAcDhF+yibOyjLObi256DsJ9lWEYID4S1FBHePgXgs=
Subject key identifier:   C6:34:43:1E:81:FD:55:59:16:50:35:8E:F9:1C:B4:18:6C:9A:C1:DE
Certificate issuer:       /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial:       019CA61EDFF2ED1C2FCA631148CD70C60CFC
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/xjRDHoH9VVkWUDWO-Ry0GGyawd4.asa
Signing time:             Sat 28 Feb 2026 21:19:26 +0000
ASPA not before:          Sat 28 Feb 2026 21:19:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201616
Providers:                AS: 8283
                          AS: 41051
                          AS: 48070
                          AS: 212635
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a6:1e:df:f2:ed:1c:2f:ca:63:11:48:cd:70:c6:0c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
        Validity
            Not Before: Feb 28 21:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c634431e81fd55591650358ef91cb4186c9ac1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:ad:06:ec:83:9f:ef:51:63:08:54:5f:83:
                    06:46:58:b0:96:6f:30:29:f5:95:cc:a8:c9:e7:27:
                    96:7a:50:f8:c1:e1:c2:11:9d:07:58:ca:24:c4:00:
                    36:a8:6f:3a:6b:2d:0b:45:76:29:df:12:4b:3e:48:
                    a3:27:7e:8a:1b:5d:78:a1:15:7f:fc:ca:a7:41:a2:
                    68:be:e4:23:a8:8a:95:49:3b:45:28:69:6a:7a:37:
                    df:dc:de:d7:89:28:b9:54:6f:0a:c0:a4:e4:da:8a:
                    f1:a7:17:ed:43:e4:9c:95:7f:9b:2a:57:91:56:bb:
                    99:7b:6a:7c:2d:85:76:e1:dc:a5:37:16:06:9c:2d:
                    2f:50:e9:20:55:3b:54:4d:b8:49:e7:d7:4c:2e:35:
                    61:a1:3e:56:a3:a1:ab:f9:c0:b4:24:fe:64:fb:27:
                    5f:be:44:19:3b:36:20:a4:e6:fa:a7:f0:da:bf:e9:
                    80:15:18:f4:1f:53:39:91:f3:ef:78:0b:c9:60:34:
                    bb:5d:cc:7f:d4:5b:2a:fa:c3:6c:cb:76:db:14:c6:
                    d0:f7:d9:12:d7:1e:20:77:2a:20:db:a3:6d:e1:dc:
                    64:83:4c:49:5b:f6:4e:d6:f7:bb:5f:72:15:46:53:
                    ac:36:b5:fc:82:c6:23:2b:48:4f:44:f4:e2:c9:a7:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:43:1E:81:FD:55:59:16:50:35:8E:F9:1C:B4:18:6C:9A:C1:DE
            X509v3 Authority Key Identifier:
                keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/xjRDHoH9VVkWUDWO-Ry0GGyawd4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201616

    Signature Algorithm: sha256WithRSAEncryption
         af:64:84:97:37:67:3c:b7:fe:87:e3:d1:4f:1d:69:8f:b0:b7:
         5e:f6:0e:c1:ca:cc:23:9f:00:68:a9:aa:7b:d2:b1:b9:1d:97:
         a7:7d:32:12:52:c8:16:7d:54:b0:65:75:c3:b0:5a:bd:06:b2:
         67:9c:50:81:ce:cc:2d:ce:83:88:39:57:c9:c2:ff:8f:b5:75:
         de:35:64:ef:2b:18:52:3a:62:26:bc:c9:35:4c:58:6a:7f:83:
         aa:e1:c3:ac:17:1a:0b:1c:62:fb:9c:0c:82:67:30:56:1b:5c:
         37:5e:e8:66:19:b5:ea:73:72:fa:3e:50:27:12:2f:5d:17:ab:
         1c:14:c2:7e:98:c2:ac:1a:20:39:77:41:6d:56:d8:fc:dc:2a:
         3d:94:aa:6f:db:d3:f3:f2:91:c6:c7:c1:77:e2:26:78:8f:41:
         52:78:2b:72:83:81:de:1d:a6:f3:39:eb:75:94:a6:49:7c:7a:
         a7:d5:ee:8a:be:7d:59:79:5d:4b:9d:c8:32:ae:83:4a:59:50:
         d7:29:bd:20:73:ff:b3:31:43:e1:d6:0f:19:dd:e9:37:17:46:
         18:3d:51:d1:00:24:b9:37:ed:30:fc:04:91:1e:fc:1e:34:cf:
         88:47:2b:f4:b6:4a:31:b0:22:e5:5e:99:dd:41:12:b1:86:97:
         c6:91:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:36 2026 by rpki-client