Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/wfPK-VcMi8MYRaYAwMg4vaWygwo.asa
File:                     wfPK-VcMi8MYRaYAwMg4vaWygwo.asa (raw, json)
Hash identifier:          6yNA3pVOdLj0ExvOjreMr4cUDtTKaNe3nwjPRKJN048=
Subject key identifier:   C1:F3:CA:F9:57:0C:8B:C3:18:45:A6:00:C0:C8:38:BD:A5:B2:83:0A
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       019C4D1A44AF9D96FD0EE74E2B99A6A1C064
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/wfPK-VcMi8MYRaYAwMg4vaWygwo.asa
Signing time:             Wed 11 Feb 2026 14:28:12 +0000
ASPA not before:          Wed 11 Feb 2026 14:28:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            28917
Providers:                AS: 3257
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4d:1a:44:af:9d:96:fd:0e:e7:4e:2b:99:a6:a1:c0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: Feb 11 14:28:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1f3caf9570c8bc31845a600c0c838bda5b2830a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:42:1b:cc:75:a2:45:9d:0e:a7:35:10:c7:
                    0c:f8:31:fb:72:97:23:b1:af:11:ce:6f:97:8b:bf:
                    d2:a5:c8:07:4c:b7:f1:2a:3b:38:b2:72:ef:2e:89:
                    0c:fb:8e:fd:10:09:67:de:bc:84:10:9c:a0:45:0a:
                    34:8c:6a:10:58:ea:e0:20:36:20:91:f1:06:b8:cc:
                    98:88:df:04:de:23:18:cf:e7:02:2f:2e:ce:a3:56:
                    0a:21:7e:46:0b:74:7b:4d:1b:40:10:47:0c:cb:bd:
                    75:a6:ab:6f:2a:b0:0c:7b:13:10:c7:fe:78:eb:73:
                    30:02:9c:62:b3:31:e5:bd:38:08:df:9b:77:fd:31:
                    93:15:00:75:29:c3:da:80:62:07:f9:ef:4a:03:ed:
                    37:a5:f8:17:f8:37:af:91:67:6a:6f:d8:c0:63:be:
                    92:d6:bc:1d:79:20:9a:03:e3:13:09:20:dc:80:5d:
                    a9:15:07:36:d1:02:cb:07:b3:2b:b1:77:f5:73:35:
                    79:13:64:dd:d8:4e:96:73:2e:53:cf:64:55:7a:17:
                    65:d6:75:86:cc:85:e4:b2:e3:d9:ce:84:51:bb:d1:
                    b4:58:7c:26:a1:27:52:89:8a:e7:2d:7f:65:95:ad:
                    f4:02:2b:ff:1b:8d:01:f3:77:e9:dc:3c:e5:50:c7:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:CA:F9:57:0C:8B:C3:18:45:A6:00:C0:C8:38:BD:A5:B2:83:0A
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/wfPK-VcMi8MYRaYAwMg4vaWygwo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28917

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:bf:6d:60:68:e8:fd:cb:a5:81:e1:b4:3e:8c:89:2c:84:
         56:04:ed:33:c3:32:ae:d3:6d:1c:2c:23:0d:77:1b:84:94:e6:
         bc:7e:1b:bf:8f:dd:ef:80:a4:dc:10:cc:bf:92:37:51:ab:52:
         ec:6c:18:3a:4b:94:55:1b:0d:4a:51:51:3e:ae:71:7c:bc:10:
         70:75:70:13:7a:8f:bb:b6:5c:59:de:e5:be:a1:71:b5:51:18:
         62:92:3c:c4:6b:57:06:19:34:8e:04:ad:8c:14:2a:8e:4e:c3:
         76:22:10:21:5b:9f:2d:7d:b5:bc:42:da:39:13:95:bb:1e:9f:
         e5:5f:6d:58:51:c8:60:96:cc:49:5e:5b:06:49:2d:69:32:be:
         6f:3b:2c:f9:4a:9d:4e:48:94:85:89:68:4e:80:4f:c0:62:ce:
         72:e3:7c:e4:59:03:f0:0f:eb:a1:7c:c4:c2:dc:e6:f7:e4:a8:
         96:00:6b:73:50:bd:7d:73:f3:05:c4:92:a8:44:22:68:0e:4e:
         95:aa:d7:e9:35:ee:26:55:17:c0:ee:77:87:89:07:c0:4b:58:
         35:5c:d0:ff:a2:98:1c:91:a7:a5:b6:8b:0a:73:e4:ef:ef:50:
         a5:dd:d7:cb:0e:2b:bf:17:dd:c5:bd:65:66:99:40:17:42:6c:
         53:c4:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:48 2026 by rpki-client