Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/n1eln3hii-6jQCfnsdsPg2OfKhg.asa
File:                     n1eln3hii-6jQCfnsdsPg2OfKhg.asa (raw, json)
Hash identifier:          cqPBPZ+/o2vFgxaUSr+IFIeKeY6Seqc0MYo8fZ78ufA=
Subject key identifier:   9F:57:A5:9F:78:62:8B:EE:A3:40:27:E7:B1:DB:0F:83:63:9F:2A:18
Certificate issuer:       /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial:       019C57ED913CA8B27D0E4A84C4B90154D3C1
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/n1eln3hii-6jQCfnsdsPg2OfKhg.asa
Signing time:             Fri 13 Feb 2026 16:55:12 +0000
ASPA not before:          Fri 13 Feb 2026 16:55:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57511
Providers:                AS: 9009
                          AS: 49832
                          AS: 57043
                          AS: 215710
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:57:ed:91:3c:a8:b2:7d:0e:4a:84:c4:b9:01:54:d3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
        Validity
            Not Before: Feb 13 16:55:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f57a59f78628beea34027e7b1db0f83639f2a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:b0:8a:7d:db:16:e1:b4:12:c5:02:4a:27:
                    cf:ef:46:44:e4:0f:c1:b1:7f:3b:aa:e6:65:ef:1c:
                    e3:b1:84:61:18:f1:aa:8b:f1:60:94:e5:d8:0d:7e:
                    03:bd:c1:de:11:46:b9:22:06:58:ba:e3:77:b0:0d:
                    a6:35:d7:50:52:64:23:da:35:0f:15:93:a8:95:dc:
                    02:85:3e:c6:e9:5e:92:23:d5:77:cb:31:ce:42:ae:
                    d6:0e:f1:31:47:2d:c4:da:bd:b8:c1:de:b7:b1:31:
                    1f:64:10:b7:e0:c4:9f:04:82:fb:fe:46:85:3b:7a:
                    a3:97:8d:6d:75:0f:45:22:d6:58:ce:32:f4:75:5a:
                    77:6b:72:bb:bc:b0:4c:96:72:3e:b5:86:8c:6a:b3:
                    f2:fe:a8:05:11:f4:87:b2:a8:85:5b:58:ef:51:08:
                    26:a1:e5:c3:6b:d6:c6:7f:3d:e6:95:3a:4d:69:36:
                    16:fb:55:e5:43:cb:e6:97:84:f5:66:7f:a7:b7:dd:
                    3b:a2:d0:e6:00:62:9f:9f:79:24:e2:53:ae:fe:25:
                    f2:43:c6:91:9e:9b:f4:3a:b6:a6:70:fa:31:71:26:
                    ba:85:5b:13:d5:8d:7d:78:d0:f4:9e:53:50:40:97:
                    a4:bd:bc:75:16:91:69:0f:5e:3c:01:32:2a:27:b5:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:A5:9F:78:62:8B:EE:A3:40:27:E7:B1:DB:0F:83:63:9F:2A:18
            X509v3 Authority Key Identifier:
                keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/n1eln3hii-6jQCfnsdsPg2OfKhg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57511

    Signature Algorithm: sha256WithRSAEncryption
         67:02:2d:68:73:b1:a2:69:48:c8:00:ab:71:ea:04:a6:f9:ad:
         ba:4e:a5:8e:1f:01:87:2d:37:45:ed:b0:11:d7:e0:28:91:da:
         d8:9f:f5:cd:24:84:c4:5a:3d:6a:57:ac:72:7f:cd:9c:fd:01:
         a0:ee:cb:26:ae:34:e0:b6:0f:a6:9d:30:4a:6d:55:3c:6f:9f:
         8b:97:b3:c5:28:ea:62:85:eb:4f:6e:97:0d:d7:2b:f9:5f:ad:
         aa:b7:44:84:0b:b3:2d:fd:a2:52:02:77:51:ea:23:5c:b8:e3:
         d3:41:31:02:03:bb:b6:05:5a:b5:8a:59:44:fe:ed:03:2c:36:
         be:05:08:6b:fa:a9:ae:3d:9e:b1:0d:c2:a6:2a:06:9d:ae:b6:
         2d:95:2e:06:48:82:d4:1b:58:8f:50:72:27:ed:b1:d7:ef:cd:
         4a:e8:da:19:b6:98:61:7c:84:c5:cf:f9:86:fd:e2:00:1a:4c:
         50:00:c4:60:5f:73:09:86:e7:11:e7:ac:87:b1:53:d5:d2:d9:
         8c:9c:cb:89:df:60:cb:44:4e:a2:66:fe:bc:3a:7b:db:d2:72:
         99:1a:cf:9f:6b:10:cf:be:31:42:83:06:7a:8b:1d:d6:d4:96:
         ba:95:f4:98:7d:89:c4:01:d9:78:2a:aa:ca:7d:19:9f:74:f1:
         ef:b2:1a:7f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxX7ZE8qLJ9DkqExLkBVNPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDE4MzYyM2ZjMTZkYzc0Y2I3NzU0NjJjMzZkMzEwMTZh
NDBhYzEwHhcNMjYwMjEzMTY1NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjU3YTU5Zjc4NjI4YmVlYTM0MDI3ZTdiMWRiMGY4MzYzOWYyYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVGwin3bFuG0EsUCSifP70ZE5A/B
sX87quZl7xzjsYRhGPGqi/FglOXYDX4DvcHeEUa5IgZYuuN3sA2mNddQUmQj2jUP
FZOoldwChT7G6V6SI9V3yzHOQq7WDvExRy3E2r24wd63sTEfZBC34MSfBIL7/kaF
O3qjl41tdQ9FItZYzjL0dVp3a3K7vLBMlnI+tYaMarPy/qgFEfSHsqiFW1jvUQgm
oeXDa9bGfz3mlTpNaTYW+1XlQ8vml4T1Zn+nt907otDmAGKfn3kk4lOu/iXyQ8aR
npv0OramcPoxcSa6hVsT1Y19eND0nlNQQJekvbx1FpFpD148ATIqJ7Wb5QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ9XpZ94Yovuo0An57HbD4NjnyoYMB8GA1UdIwQY
MBaAFBUBg2I/wW3HTLd1Riw20xAWpArBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFHRFlqX0JiY2RNdDNWR0xEYlRFQmFrQ3NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mM2ZiMjQtOWEyMC00NDllLWFmNjIt
MjhmNTIwNTJjMWRkLzEvbjFlbG4zaGlpLTZqUUNmbnNkc1BnMk9mS2hnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mM2ZiMjQtOWEyMC00NDllLWFmNjItMjhmNTIwNTJjMWRk
LzEvRlFHRFlqX0JiY2RNdDNWR0xEYlRFQmFrQ3NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgpzANBgkqhkiG
9w0BAQsFAAOCAQEAZwItaHOxomlIyACrceoEpvmtuk6ljh8Bhy03Re2wEdfgKJHa
2J/1zSSExFo9alescn/NnP0BoO7LJq404LYPpp0wSm1VPG+fi5ezxSjqYoXrT26X
Ddcr+V+tqrdEhAuzLf2iUgJ3UeojXLjj00ExAgO7tgVatYpZRP7tAyw2vgUIa/qp
rj2esQ3CpioGna62LZUuBkiC1BtYj1ByJ+2x1+/NSujaGbaYYXyExc/5hv3iABpM
UADEYF9zCYbnEeesh7FT1dLZjJzLid9gy0ROomb+vDp729JymRrPn2sQz74xQoMG
eosd1tSWupX0mH2JxAHZeCqqyn0Zn3Tx77Iafw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:28 2026 by rpki-client