Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/oBzHyyxslIWYAlgzEZmuiGQNdh4.asa
File:                     oBzHyyxslIWYAlgzEZmuiGQNdh4.asa (raw, json)
Hash identifier:          SArG3TIu0q9Uc8eXHUWtZtgsSxdPEklj/U/czLGX10g=
Subject key identifier:   A0:1C:C7:CB:2C:6C:94:85:98:02:58:33:11:99:AE:88:64:0D:76:1E
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       019C659BBB0F81C00E3AAFA12CA8ECDF2251
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/oBzHyyxslIWYAlgzEZmuiGQNdh4.asa
Signing time:             Mon 16 Feb 2026 08:40:30 +0000
ASPA not before:          Mon 16 Feb 2026 08:40:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212539
Providers:                AS: 208437
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:65:9b:bb:0f:81:c0:0e:3a:af:a1:2c:a8:ec:df:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Feb 16 08:40:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a01cc7cb2c6c9485980258331199ae88640d761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:b4:86:f6:f5:39:e9:16:90:46:0b:92:89:
                    e8:2e:0f:4d:16:f8:d0:d0:38:9b:27:36:75:c8:3b:
                    41:99:e7:d3:79:04:e3:6e:a0:ee:78:04:c7:03:45:
                    15:16:82:a3:39:6c:3d:36:d8:12:2a:25:24:82:89:
                    41:ce:3a:4c:d0:95:db:1f:a7:8c:63:0d:06:c2:a7:
                    1c:f3:e4:f9:e9:05:da:76:7c:90:83:d3:19:d6:9b:
                    f4:e0:68:b0:d5:e8:51:dc:0e:73:b6:42:6c:d7:4d:
                    96:e4:95:9f:d2:90:32:31:8b:fb:be:83:44:da:ad:
                    6f:d8:fb:4c:c9:d7:14:41:4b:88:f4:30:24:4b:ed:
                    4f:88:08:bf:21:b4:3d:98:e7:de:6c:cd:05:cd:e5:
                    4f:13:76:65:d0:67:e7:82:08:a7:a9:11:d3:41:03:
                    43:b3:72:1a:29:f0:40:60:40:aa:11:29:d0:cf:86:
                    d8:33:27:84:fa:db:69:fc:62:25:15:d3:af:8b:cc:
                    eb:5d:5a:c7:60:60:0d:87:49:bc:c0:33:7f:1f:4a:
                    62:a6:c3:c0:d1:50:66:db:d7:48:7e:c3:0b:64:f2:
                    fe:50:8a:12:e4:b6:f1:d2:91:da:53:07:92:92:8b:
                    31:43:52:f6:6d:75:4b:57:a8:cf:2d:f2:74:df:40:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1C:C7:CB:2C:6C:94:85:98:02:58:33:11:99:AE:88:64:0D:76:1E
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/oBzHyyxslIWYAlgzEZmuiGQNdh4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212539

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:6e:8f:6b:3b:b0:98:80:0f:df:78:37:2c:61:03:d1:58:
         ed:1d:cf:d7:cf:d3:37:17:1c:24:71:45:7a:13:fd:18:7e:0f:
         d7:18:28:d0:59:7c:41:1f:85:20:21:da:df:b3:6a:f6:6c:d3:
         91:95:04:f9:24:7b:8e:85:29:b6:de:d8:18:ef:15:9f:ef:89:
         31:c5:08:84:57:db:ff:7a:c7:6f:db:a5:3f:35:15:df:93:04:
         6f:b8:b6:21:a3:3d:01:cc:e1:51:1b:5a:ce:c6:ee:80:b2:89:
         7d:cc:77:04:00:a1:e4:cf:d6:c7:5b:8c:ac:77:9f:5f:05:9b:
         1c:72:74:f6:83:4f:a2:13:47:d9:11:f7:71:3d:dd:59:ba:f8:
         53:48:fe:e6:c3:e4:85:d5:d6:9a:9b:a3:58:42:97:ff:ff:db:
         77:62:b4:5d:d9:1b:5c:06:6a:14:d3:34:d0:11:c2:25:a2:f8:
         32:0c:12:a1:42:fb:bf:1b:33:fc:8a:15:cb:5e:cf:aa:5c:ec:
         fc:91:c2:98:7a:07:54:26:a6:8b:d4:fe:18:97:90:26:72:12:
         1a:a3:39:89:60:04:4a:f1:ac:5a:59:92:97:ed:d1:67:50:ea:
         ef:65:56:82:ed:49:95:96:a3:91:35:4a:08:4a:05:1d:74:1a:
         91:80:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:15:26 2026 by rpki-client