Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/idT0R1HkBpvz-S3yQxmn_MoANr0.asa
File:                     idT0R1HkBpvz-S3yQxmn_MoANr0.asa (raw, json)
Hash identifier:          lR17MLIKlOQLm8nrwr7pO36RN7SXU12UrDM6XUqOiZI=
Subject key identifier:   89:D4:F4:47:51:E4:06:9B:F3:F9:2D:F2:43:19:A7:FC:CA:00:36:BD
Certificate issuer:       /CN=155c8639489f1463a68553cdc05d1964a017a1a7
Certificate serial:       01A0534BD0C06448049E22C6E1620F317FAC
Authority key identifier: 15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/idT0R1HkBpvz-S3yQxmn_MoANr0.asa
Signing time:             Sun 30 Aug 2026 15:31:12 +0000
ASPA not before:          Sun 30 Aug 2026 15:31:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203686
Providers:                AS: 8772
                          AS: 8849
                          AS: 29632
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:53:4b:d0:c0:64:48:04:9e:22:c6:e1:62:0f:31:7f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155c8639489f1463a68553cdc05d1964a017a1a7
        Validity
            Not Before: Aug 30 15:31:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=89d4f44751e4069bf3f92df24319a7fcca0036bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:5b:54:b2:1f:58:74:b6:89:bb:34:b5:f5:
                    a1:8b:57:72:e8:6e:57:86:af:46:29:32:a7:3e:68:
                    34:46:cc:43:0b:7d:71:0e:a7:a5:35:47:b7:51:a7:
                    6e:30:9c:98:d9:ac:80:51:ed:18:66:7b:a4:86:e4:
                    a5:66:9a:84:ba:de:c6:55:ad:7f:ca:bf:a0:74:4a:
                    0b:f6:3f:3f:b9:e1:47:24:72:5c:04:f0:32:d5:a7:
                    6d:04:37:2d:a1:3d:9b:d4:0f:ac:f4:a9:bf:46:e2:
                    86:5d:7b:5d:af:87:38:df:c5:58:42:3c:1f:71:59:
                    63:d8:76:68:68:ac:c5:7c:b1:1c:e7:a8:60:75:16:
                    48:63:b3:00:01:c3:07:f9:b6:a3:51:90:38:b7:e9:
                    b4:9d:93:67:77:1d:a6:6c:a0:7d:f6:2d:8e:fb:41:
                    15:2b:5f:bc:d8:6e:04:c9:ef:71:6b:4d:50:7e:b6:
                    1a:68:7b:cc:ef:5b:be:90:5b:96:00:52:f6:ab:4d:
                    68:f2:6c:6a:d8:37:bf:99:b7:5f:c9:ad:14:78:51:
                    c0:a9:d8:8b:bd:e4:dc:d8:4e:ac:2a:3e:96:8d:0c:
                    76:a0:68:11:4e:7e:bf:47:1f:ee:25:8f:f2:3c:0e:
                    e3:6e:f2:46:b7:28:d5:0f:bd:13:f6:37:04:93:37:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:F4:47:51:E4:06:9B:F3:F9:2D:F2:43:19:A7:FC:CA:00:36:BD
            X509v3 Authority Key Identifier:
                keyid:15:5C:86:39:48:9F:14:63:A6:85:53:CD:C0:5D:19:64:A0:17:A1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVyGOUifFGOmhVPNwF0ZZKAXoac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/idT0R1HkBpvz-S3yQxmn_MoANr0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/aa87c7-edef-4b84-9164-368e3ffb9f50/1/FVyGOUifFGOmhVPNwF0ZZKAXoac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203686

    Signature Algorithm: sha256WithRSAEncryption
         33:dc:b5:33:0f:66:4d:c6:39:46:4c:6a:fe:26:52:13:19:36:
         b9:a9:d3:fd:92:58:0a:6a:b0:ae:bc:99:57:bc:3b:90:80:45:
         cf:d4:28:56:02:a5:12:0b:77:80:c9:9b:a0:d0:ec:63:7a:90:
         1d:2d:97:39:7b:63:41:94:6d:d5:eb:a9:fe:9f:fc:d1:dc:35:
         06:c5:dc:a9:89:90:3d:3e:f8:30:9f:c6:73:13:8c:a3:e4:07:
         5e:be:e8:12:12:bc:0d:dc:e3:48:1d:25:ec:88:9a:76:34:10:
         09:a5:54:4e:38:73:2b:58:b9:a8:2f:72:61:c3:75:6d:c2:9e:
         9f:ad:1f:cf:cd:36:d5:c4:73:17:83:47:d8:b4:58:cc:cc:af:
         01:85:c5:8e:03:7f:ea:c8:46:23:07:07:49:41:22:45:ea:b5:
         5d:97:31:ce:b0:57:8d:84:08:90:a8:90:68:d5:6b:1b:bb:24:
         0d:7f:f2:4e:70:4f:8b:fc:63:9b:b0:ed:d4:08:be:18:e1:9f:
         b9:e9:3a:64:8e:5b:1e:4c:98:b9:2e:36:3c:4b:68:13:60:0d:
         0f:83:a1:2a:4a:20:28:cd:e5:4a:b5:5a:4d:f7:82:d6:e2:d2:
         0f:36:b2:75:a8:31:7d:d9:4a:45:ed:56:23:2e:f5:58:bb:33:
         af:32:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:34 2026 by rpki-client