Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa
File:                     m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa (raw, json)
Hash identifier:          9lMkCyfIyGj1UpJgP+o5HSOV99to1p1lL2KxmkMnf2A=
Subject key identifier:   9B:5A:96:FA:B3:63:43:DB:6F:74:FD:42:FC:A0:AE:24:5F:C4:5E:6C
Certificate issuer:       /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial:       019C53FAD322C29C6A7ACAE59BB30D9DD849
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa
Signing time:             Thu 12 Feb 2026 22:31:12 +0000
ASPA not before:          Thu 12 Feb 2026 22:31:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215323
Providers:                AS: 3170
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:53:fa:d3:22:c2:9c:6a:7a:ca:e5:9b:b3:0d:9d:d8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
        Validity
            Not Before: Feb 12 22:31:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b5a96fab36343db6f74fd42fca0ae245fc45e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:a8:2c:ad:e4:4d:08:2a:e0:2e:27:39:70:
                    4b:34:e5:01:38:87:14:17:0a:72:42:d8:b9:35:79:
                    9f:bc:00:4a:b0:0c:76:8e:a0:55:71:ea:9d:d4:1e:
                    ff:e8:dc:94:9b:d6:be:17:80:bb:a8:57:cb:77:4a:
                    c4:f6:70:78:74:66:71:6b:4f:dc:14:bf:df:c3:a1:
                    3c:24:a0:6b:bd:f0:14:42:3f:94:3d:fd:df:db:ee:
                    9f:1c:6e:de:7e:10:3f:32:54:69:6c:ff:ac:98:b4:
                    42:34:8a:d6:16:c5:99:6d:bd:62:b3:6a:4f:9a:9d:
                    70:0e:9a:d2:3e:44:f0:c2:14:80:3b:f3:10:1d:eb:
                    bf:04:e0:3f:2e:b5:82:cf:90:40:80:dc:bb:18:7a:
                    fd:b5:b1:7c:58:50:a8:f0:39:68:97:e6:e5:66:20:
                    d4:b6:c7:d7:82:fe:d6:99:42:4b:9a:77:ab:e6:41:
                    1a:88:40:6d:81:2a:59:25:46:e6:98:c5:7b:0a:f7:
                    1a:a6:a8:b1:b9:d1:e0:d1:68:45:db:55:55:f4:ba:
                    3e:11:3a:9a:b7:23:31:08:ef:cd:d5:82:75:31:00:
                    a1:43:20:62:05:76:cc:10:94:04:91:94:f4:2e:47:
                    5e:a9:ea:e4:8b:a0:2d:64:74:c5:5d:d8:f2:d7:6c:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:96:FA:B3:63:43:DB:6F:74:FD:42:FC:A0:AE:24:5F:C4:5E:6C
            X509v3 Authority Key Identifier:
                keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215323

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:d0:6f:06:67:cd:7b:8c:d0:71:16:96:fa:7a:72:a0:ab:
         75:5e:fd:3e:d4:27:c7:97:f1:24:2f:8c:7d:31:68:c0:34:0a:
         65:34:66:70:b7:c9:fa:95:0d:a4:ff:a8:9d:49:2b:3b:bb:95:
         e4:1a:fb:b2:f6:e1:37:f7:8d:9c:6f:a7:81:e7:39:a6:1d:2d:
         f7:e9:d9:63:39:61:a1:e4:d8:7d:33:3a:27:66:ff:47:98:09:
         f1:d5:ba:de:d2:aa:6e:a0:b0:b8:80:cc:f8:5b:fe:b5:21:6c:
         02:16:68:ef:80:d8:d2:4d:f1:a8:e3:c4:52:e6:93:45:a1:3b:
         d6:2f:b6:2b:c1:47:34:3c:dc:67:39:6c:b4:93:f6:59:ba:b4:
         59:81:6d:59:c4:27:80:ec:9b:8e:94:67:6d:04:fd:de:28:8e:
         be:3d:81:2c:03:80:77:e0:74:cb:dc:cf:be:fb:24:8a:83:a2:
         e1:8b:67:fd:a5:2b:f1:e0:2e:ef:78:13:27:18:3d:a0:84:ce:
         fd:2f:e5:ac:2e:b8:1f:ac:e0:0b:1d:a4:e9:0e:6a:3c:e3:d5:
         94:56:04:73:36:74:4e:02:f6:99:9d:77:fc:8f:5e:41:ed:cd:
         2d:ed:66:61:af:dc:b6:31:fb:c7:9f:80:be:10:2a:3d:e2:6e:
         17:f2:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:51 2026 by rpki-client