Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/G8RFytPvzRvt40zF-8ij3e9xAzo.asa
File:                     G8RFytPvzRvt40zF-8ij3e9xAzo.asa (raw, json)
Hash identifier:          FwLcwIjPDnw22VGtcI3EeOf1DJkoMhlqRqB2wRMGjI0=
Subject key identifier:   1B:C4:45:CA:D3:EF:CD:1B:ED:E3:4C:C5:FB:C8:A3:DD:EF:71:03:3A
Certificate issuer:       /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial:       019D91AC700567AF25BEF828D72BE4BF7609
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/G8RFytPvzRvt40zF-8ij3e9xAzo.asa
Signing time:             Wed 15 Apr 2026 15:04:50 +0000
ASPA not before:          Wed 15 Apr 2026 15:04:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216145
Providers:                AS: 34565
                          AS: 44901
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:91:ac:70:05:67:af:25:be:f8:28:d7:2b:e4:bf:76:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
        Validity
            Not Before: Apr 15 15:04:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1bc445cad3efcd1bede34cc5fbc8a3ddef71033a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:bb:0c:04:45:36:68:58:2d:6f:e9:86:ea:
                    dc:46:52:10:63:b7:17:1c:b5:23:03:2c:5a:42:74:
                    5a:f2:4b:ae:31:0d:6e:0f:5c:ae:6f:66:83:ee:cc:
                    29:50:cd:f7:af:9a:fa:10:8c:c5:04:a1:03:de:b5:
                    aa:50:0f:08:a1:9c:20:8e:23:9b:0a:fc:c6:7d:b2:
                    0e:55:b6:df:27:3e:43:6c:5c:cc:ab:85:04:47:95:
                    b2:58:f8:51:f5:81:09:a0:85:43:c0:26:b8:8c:2f:
                    d2:e6:27:a6:f1:75:75:6e:06:fa:ed:b5:e4:7f:4d:
                    f0:db:64:c8:ca:6b:74:7b:78:ac:94:af:ab:ee:2d:
                    72:94:22:4a:fb:d1:9c:27:b3:2f:0a:a2:3f:c7:6a:
                    30:64:f1:2b:a0:0c:a0:94:d5:0c:f2:43:2f:84:f7:
                    94:14:bb:5d:de:79:02:ff:74:ad:7b:ae:e2:75:e5:
                    76:d2:3d:89:22:dc:37:7a:64:3d:78:61:90:fa:81:
                    ef:cc:71:4c:8d:ee:dd:d7:21:bd:6f:4c:7f:30:75:
                    be:9b:83:6e:a4:e8:23:1f:33:25:dc:bc:94:9e:82:
                    c1:48:37:e5:b2:f9:52:6b:28:aa:c3:49:38:19:ef:
                    d7:c7:4c:b1:69:01:69:b1:19:48:5f:9d:ea:13:bd:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C4:45:CA:D3:EF:CD:1B:ED:E3:4C:C5:FB:C8:A3:DD:EF:71:03:3A
            X509v3 Authority Key Identifier:
                keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/G8RFytPvzRvt40zF-8ij3e9xAzo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216145

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:26:9d:45:02:cb:60:1b:5f:78:85:a9:d2:46:4c:b9:35:
         5e:14:3e:2b:6b:39:96:ee:d8:8d:d7:b7:1d:d5:ea:e3:1d:b0:
         71:02:0e:9d:06:61:b2:94:dc:5d:8f:2e:be:5b:e0:dd:3a:11:
         26:cb:45:56:6d:40:6e:1f:17:a4:97:d7:fe:93:f1:b2:09:62:
         9b:05:59:c7:9e:96:35:a9:69:af:fe:fc:e8:36:56:bf:93:71:
         80:a9:80:1b:cb:38:44:56:0f:cb:ff:b0:cd:16:aa:30:e7:4d:
         6d:6c:0d:d5:ca:f4:be:b9:1a:fb:33:f8:22:1d:07:e5:03:7e:
         5c:dd:d0:47:c1:96:a1:22:c4:c3:eb:b4:3c:d7:3d:f2:95:1f:
         b8:78:20:23:3b:f7:f0:af:d0:28:96:e0:46:af:94:86:90:2e:
         ea:ba:78:b2:0b:da:f3:16:ef:7c:ae:36:ba:8b:32:e6:2d:cc:
         9b:a9:a6:61:18:87:76:d2:98:21:b8:56:10:45:28:54:9c:df:
         c8:56:42:64:8f:11:53:f5:8b:36:ae:d2:1b:6d:e8:f9:d3:c0:
         52:3f:62:cc:06:48:31:19:c1:df:06:3c:3d:8f:00:a6:76:ab:
         bd:23:dc:fb:17:84:08:c0:8b:32:c8:b6:a6:3b:8d:27:28:2b:
         dd:dc:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:43 2026 by rpki-client