Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/dfxqd7-EbGdffyLZ8A8olZcFYug.asa
File:                     dfxqd7-EbGdffyLZ8A8olZcFYug.asa (raw, json)
Hash identifier:          HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=
Subject key identifier:   75:FC:6A:77:BF:84:6C:67:5F:7F:22:D9:F0:0F:28:95:97:05:62:E8
Certificate issuer:       /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial:       019C50A010DB8EC364940815C81D872F9441
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/dfxqd7-EbGdffyLZ8A8olZcFYug.asa
Signing time:             Thu 12 Feb 2026 06:53:13 +0000
ASPA not before:          Thu 12 Feb 2026 06:53:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39029
Providers:                AS: 1299
                          AS: 25400
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:50:a0:10:db:8e:c3:64:94:08:15:c8:1d:87:2f:94:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
        Validity
            Not Before: Feb 12 06:53:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75fc6a77bf846c675f7f22d9f00f2895970562e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:67:90:c9:28:ec:f3:4d:50:bc:70:3c:bb:
                    49:0b:4e:59:c2:f2:83:0e:75:a4:f9:b8:b1:c4:bc:
                    aa:f6:39:28:ef:b7:d3:0b:a5:0a:84:00:11:a4:57:
                    3a:a2:54:46:01:b4:ae:10:bf:1a:0e:52:c9:20:49:
                    0a:05:ab:cd:26:38:f7:a1:c5:3c:f1:10:b5:52:38:
                    cb:5f:bf:42:ed:e8:02:17:4a:60:00:39:4f:06:9d:
                    b2:c0:59:5f:51:95:70:ec:30:fd:d3:44:46:a6:c7:
                    92:52:4b:5a:3a:bb:b5:56:9e:33:11:87:fa:5b:73:
                    41:29:18:99:98:f6:7c:a9:97:9f:50:63:17:87:1e:
                    8f:ab:ae:d1:a9:4d:04:e8:0f:02:1a:80:df:4b:6e:
                    99:09:6e:61:01:97:08:8c:93:50:60:03:76:8b:ce:
                    ee:c6:08:c7:dd:7b:d9:fc:c7:47:95:e1:d0:73:96:
                    62:80:f5:2a:d2:e2:72:c5:7c:0b:59:ba:e9:43:e2:
                    3e:dd:e9:78:8b:90:4a:20:9b:e4:c2:06:78:35:03:
                    8e:6e:83:da:86:ff:48:5d:e9:64:a6:c1:59:46:a5:
                    da:30:80:7f:4c:6f:ca:45:17:4a:9e:b3:43:2c:2c:
                    33:d5:72:e8:00:26:5d:58:df:38:3a:39:06:03:ba:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:6A:77:BF:84:6C:67:5F:7F:22:D9:F0:0F:28:95:97:05:62:E8
            X509v3 Authority Key Identifier:
                keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/dfxqd7-EbGdffyLZ8A8olZcFYug.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39029

    Signature Algorithm: sha256WithRSAEncryption
         e1:21:a0:3d:e2:08:b7:d4:fe:67:99:18:14:86:bf:7e:aa:f8:
         c2:ee:a1:a3:a0:9a:a2:52:54:f8:42:70:ea:eb:eb:a4:80:3d:
         e4:70:e7:c1:f6:cc:23:9d:0b:8f:4d:d0:c4:14:7a:e2:2c:3e:
         f5:bb:1b:6c:7d:3c:66:c2:b6:69:12:31:52:2c:6a:55:2c:20:
         01:c2:11:31:23:b0:fc:1a:d5:c1:83:0e:69:b1:d1:4f:e6:58:
         34:cc:76:46:e1:88:c6:8d:9f:77:2d:55:39:0d:f1:39:ad:a2:
         7b:e0:d0:cb:af:7f:f7:c9:e2:23:40:d7:3d:df:fb:49:1d:f9:
         d0:72:06:67:ca:08:8a:ab:32:ae:2d:d0:54:7d:21:7e:17:6b:
         12:13:30:1a:fb:2e:ea:61:84:b7:32:18:44:a4:2c:1a:67:1d:
         ca:8a:92:07:dc:0e:7a:e2:e6:27:c9:40:31:ac:5f:d5:2a:b7:
         02:0a:c5:35:19:b0:2f:da:86:63:16:04:1b:c0:d0:18:e1:bc:
         7c:e1:24:49:86:a5:5b:a6:0b:9b:59:10:a3:65:57:80:b6:43:
         e8:02:af:c0:04:5e:f8:06:0c:5c:ef:ec:98:b3:4a:28:54:5b:
         f9:3b:aa:7e:f3:76:59:73:d9:16:47:47:c5:b7:06:85:c4:6c:
         d6:73:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:33 2026 by rpki-client