Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/hEoypnAbDinC0QGassGs76xtnAw.asa
File:                     hEoypnAbDinC0QGassGs76xtnAw.asa (raw, json)
Hash identifier:          xkbrTyJaG9QSCNIjm8fjAkbI7ZEMVBfs8nTofEueXdQ=
Subject key identifier:   84:4A:32:A6:70:1B:0E:29:C2:D1:01:9A:B2:C1:AC:EF:AC:6D:9C:0C
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       019C56771DA302CC3D03788788E0970F03B3
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/hEoypnAbDinC0QGassGs76xtnAw.asa
Signing time:             Fri 13 Feb 2026 10:06:12 +0000
ASPA not before:          Fri 13 Feb 2026 10:06:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35676
Providers:                AS: 174
                          AS: 5511
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:77:1d:a3:02:cc:3d:03:78:87:88:e0:97:0f:03:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Feb 13 10:06:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=844a32a6701b0e29c2d1019ab2c1acefac6d9c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:23:88:10:0a:c3:fa:12:6f:8d:96:06:d7:
                    c7:37:50:9e:e9:d0:ec:67:88:00:f2:37:46:09:51:
                    ce:17:95:2a:e7:a8:99:c2:94:51:f6:aa:c9:27:89:
                    c6:bd:48:fd:06:8b:87:d9:c4:99:8a:bb:07:98:05:
                    3b:16:04:7c:c6:b1:a5:0a:bd:84:4c:34:b1:69:6b:
                    eb:bb:46:53:f3:1a:cc:de:7e:f1:d2:95:30:01:4c:
                    e0:6a:d5:a0:3e:f8:cd:85:dd:6e:be:0b:e5:3a:58:
                    06:95:91:d9:ca:9d:1f:d7:c5:31:b3:19:98:ab:ee:
                    6b:88:e9:90:44:12:c7:8f:e0:b6:94:2f:f0:8e:40:
                    25:14:ac:7b:d0:0f:c0:e0:52:c3:af:2d:68:92:f7:
                    14:08:42:bf:9a:72:35:d0:c1:c1:60:90:62:39:c2:
                    f0:c2:28:4b:ed:97:4d:33:d1:b3:98:f0:39:ce:ac:
                    81:aa:a0:93:9e:94:53:6e:18:f1:06:68:a3:ae:b2:
                    86:af:4f:4b:e3:ff:64:59:76:18:d0:8a:de:03:78:
                    a4:bd:4d:37:f8:51:52:50:e6:f5:83:49:47:6f:9e:
                    76:97:6a:c9:72:7e:4c:03:c8:cf:b4:7d:6d:a7:0e:
                    9a:be:8f:71:a0:95:29:52:46:fe:8a:ec:fe:a2:9c:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4A:32:A6:70:1B:0E:29:C2:D1:01:9A:B2:C1:AC:EF:AC:6D:9C:0C
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/hEoypnAbDinC0QGassGs76xtnAw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35676

    Signature Algorithm: sha256WithRSAEncryption
         73:46:2a:ac:73:33:a7:f0:5e:13:ea:f0:98:6b:a0:0d:0f:6f:
         5a:b0:47:1d:ec:6e:4a:8c:54:bb:a6:54:a5:b0:4b:5a:4b:9a:
         32:2a:c2:c2:2f:83:90:25:0b:0c:b6:a4:f3:2d:cc:c8:db:78:
         8b:2e:2f:2f:57:81:f1:1b:be:91:f8:c5:7a:50:8a:ad:86:2a:
         0c:2a:25:5c:e8:9c:68:a6:f0:b3:00:9b:59:5e:8a:b8:48:f6:
         5b:f1:96:0c:ce:9d:57:2f:3c:ef:50:46:73:ae:3f:98:f2:85:
         fd:2e:fb:c1:e0:1c:04:3f:ad:0f:c8:15:f7:87:69:24:13:74:
         7d:77:f8:9f:76:e3:49:42:59:1a:c2:e9:69:0f:58:be:63:eb:
         9b:77:55:62:5a:d4:02:f6:37:91:97:3c:26:0b:69:29:56:64:
         75:4a:c5:6a:df:73:11:58:96:e8:24:c4:0b:20:f9:bb:3a:e4:
         c4:66:1c:a0:f4:02:14:99:0b:6a:87:10:bb:f9:88:22:b1:35:
         8a:af:b9:9d:cd:33:10:ff:9d:2c:6a:2c:9c:cc:eb:23:be:35:
         3d:fc:42:42:c4:39:0a:2e:a7:2f:c5:bc:5c:62:cf:cc:24:18:
         f6:f3:7d:67:c4:70:53:cd:3e:7a:6a:ec:ec:99:83:14:ae:f5:
         71:27:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:02 2026 by rpki-client