Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LfLdRDtUwafS7E6VWyXgK2UQq9g.asa
File:                     LfLdRDtUwafS7E6VWyXgK2UQq9g.asa (raw, json)
Hash identifier:          lI3eaRCZDcPeEC/xgibETDzOKxk64bCjv0zsjJHosh8=
Subject key identifier:   2D:F2:DD:44:3B:54:C1:A7:D2:EC:4E:95:5B:25:E0:2B:65:10:AB:D8
Certificate issuer:       /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial:       019C94541F365F4CC6A897401BEDAC0E82E4
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LfLdRDtUwafS7E6VWyXgK2UQq9g.asa
Signing time:             Wed 25 Feb 2026 10:24:26 +0000
ASPA not before:          Wed 25 Feb 2026 10:24:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205684
Providers:                AS: 50628
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:94:54:1f:36:5f:4c:c6:a8:97:40:1b:ed:ac:0e:82:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
        Validity
            Not Before: Feb 25 10:24:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2df2dd443b54c1a7d2ec4e955b25e02b6510abd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:17:8a:55:09:0d:b2:52:c6:d4:73:34:c1:a6:
                    c3:13:80:d4:fb:00:41:88:df:a0:32:f7:69:b2:75:
                    7b:88:34:da:b7:6b:49:04:64:1f:60:b9:bb:61:c6:
                    6c:4d:95:b8:00:b1:65:ed:8e:2f:6b:36:18:67:a5:
                    01:4f:37:41:52:1c:8e:ff:5d:af:c4:bc:17:97:16:
                    0b:2b:01:8a:ad:78:33:03:86:fc:92:64:4c:6d:78:
                    54:cb:c3:3e:1d:da:69:7e:2a:f4:09:b5:43:db:ec:
                    19:2c:5a:10:01:b9:6c:53:8c:dc:64:7c:dd:40:56:
                    c1:34:22:2b:8a:66:94:8f:59:97:04:b4:b3:f9:5f:
                    88:be:20:f0:94:3e:ff:6c:b7:7a:34:07:d9:74:a1:
                    fb:0c:31:8f:30:ef:ce:2e:5a:6a:9c:ae:bd:61:1c:
                    5a:e9:85:d1:d9:63:e6:c6:be:29:55:6a:53:80:59:
                    82:b9:4e:31:c5:54:4a:20:d1:1e:95:6d:f4:8d:5b:
                    fb:c3:dc:f9:18:08:90:79:20:4c:0f:ae:4d:17:a1:
                    27:6d:1c:ac:72:51:fd:b4:e0:e5:4b:99:a5:8d:e5:
                    5c:6b:1f:fa:36:82:f5:dc:2d:a0:b6:24:ef:74:93:
                    b2:f8:67:21:3b:7b:9d:7b:3f:36:f7:f0:6c:d0:db:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F2:DD:44:3B:54:C1:A7:D2:EC:4E:95:5B:25:E0:2B:65:10:AB:D8
            X509v3 Authority Key Identifier:
                keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/LfLdRDtUwafS7E6VWyXgK2UQq9g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205684

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:85:d4:56:8e:3d:b2:ec:9c:dc:c9:0d:97:e0:ce:bc:ee:
         98:68:c3:01:19:46:b8:7d:2d:e5:e0:d4:b2:58:8a:e6:a8:f6:
         65:1f:c5:fd:bd:de:d4:3e:46:c8:16:47:fc:76:1e:e4:60:e5:
         57:f3:ff:30:14:26:03:ae:39:0c:f4:02:6e:9b:a5:88:9b:25:
         93:9b:d1:fe:ed:e7:54:7c:33:00:55:bb:a8:e3:cd:34:07:d0:
         bc:df:0f:de:34:63:ef:62:0d:66:a1:77:5e:91:f6:a3:5e:67:
         d9:53:98:76:58:4a:37:57:82:40:7a:51:d8:73:ff:90:d0:2a:
         86:77:8b:d2:92:45:a9:1f:71:b9:65:89:b3:3f:ad:49:5d:d9:
         5b:8d:be:88:0e:c9:4a:2f:ec:25:f2:8b:8e:0b:d2:d0:a9:8d:
         7c:17:da:18:9e:6a:34:34:9e:71:fa:de:4a:2d:db:b1:20:4c:
         f5:55:af:05:03:65:04:6b:ee:61:ee:1d:3f:31:70:a3:c6:0e:
         13:d1:55:59:ee:41:13:37:0b:fb:76:23:9f:cb:81:d0:6f:9c:
         6f:eb:8f:0d:a0:10:20:0d:5d:23:56:0a:b1:17:a7:4e:29:49:
         a4:c5:30:17:87:e4:19:b6:ec:31:d1:ac:5f:65:99:88:c0:cb:
         f2:c7:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:04 2026 by rpki-client