Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/98BJtZ8NH6aSevEqWqlLkfFiuQw.asa
File:                     98BJtZ8NH6aSevEqWqlLkfFiuQw.asa (raw, json)
Hash identifier:          hTcuvR32Oz/tjaB7bta0n2JHkuMa1soVw3r/PM22ytg=
Subject key identifier:   F7:C0:49:B5:9F:0D:1F:A6:92:7A:F1:2A:5A:A9:4B:91:F1:62:B9:0C
Certificate issuer:       /CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Certificate serial:       01A1304C2583C0DF9BB6D262023F9E362A2B
Authority key identifier: AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/98BJtZ8NH6aSevEqWqlLkfFiuQw.asa
Signing time:             Mon 12 Oct 2026 13:27:38 +0000
ASPA not before:          Mon 12 Oct 2026 13:27:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200879
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 52025
                          AS: 56655
                          AS: 199676
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:4c:25:83:c0:df:9b:b6:d2:62:02:3f:9e:36:2a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
        Validity
            Not Before: Oct 12 13:27:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7c049b59f0d1fa6927af12a5aa94b91f162b90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:d7:1f:3f:53:64:d9:22:72:60:01:c9:2b:
                    f4:e4:d8:54:f3:21:d3:d0:c4:08:0e:0b:18:a9:41:
                    f8:fc:d7:81:d3:46:79:8b:be:a5:6b:0f:ea:06:8c:
                    bd:b8:53:cb:51:46:80:af:43:1e:1d:23:ee:32:21:
                    1e:05:c3:39:55:93:ac:db:a0:e8:15:3c:71:9f:65:
                    de:0e:1b:7c:78:1e:44:95:45:3b:34:7d:25:2b:a8:
                    77:13:4b:ef:74:05:ca:5a:2c:90:7d:13:53:ef:7c:
                    2c:78:c5:d1:21:fe:6d:62:69:8a:19:99:dd:8c:16:
                    af:6a:1c:58:1b:b1:26:f0:86:50:88:8a:06:a3:b3:
                    ea:dd:6b:63:4e:49:8f:af:56:0c:ac:f8:24:82:73:
                    c9:fc:30:28:9d:d7:6c:40:b3:fd:1e:fd:f5:da:7d:
                    dd:52:2c:cb:56:cc:ad:b1:55:90:d5:c8:c4:fd:8b:
                    6f:e7:be:73:06:b6:50:bb:da:13:cc:c4:35:8e:63:
                    e7:83:7a:d3:41:4a:26:8c:25:04:bc:1a:35:62:7b:
                    1f:18:fb:36:46:a8:dd:38:71:08:1f:26:2b:05:55:
                    bf:3d:be:c7:6e:e4:de:b6:2e:a0:2b:a4:82:a7:44:
                    5d:35:e5:cd:5b:46:b7:6d:09:f5:29:44:5a:7e:5e:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:49:B5:9F:0D:1F:A6:92:7A:F1:2A:5A:A9:4B:91:F1:62:B9:0C
            X509v3 Authority Key Identifier:
                keyid:AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/98BJtZ8NH6aSevEqWqlLkfFiuQw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200879

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:99:d0:a5:54:b2:be:75:4a:e1:7b:28:1e:02:d0:bc:90:
         d6:33:0c:4d:fc:9d:51:ef:ba:cd:11:e5:a4:a2:9c:76:51:b7:
         3f:3f:40:96:55:e4:30:0a:ea:85:69:a9:69:eb:dd:d7:5a:95:
         ed:13:9a:07:13:39:3e:32:bf:8a:bb:54:8c:f3:12:70:95:20:
         85:58:ae:ab:94:fd:f4:be:b4:bc:04:49:90:41:f0:5f:16:12:
         1a:48:bd:30:ff:3e:09:4b:c0:f6:ea:7b:e0:3c:62:47:31:11:
         d9:24:ef:46:de:8c:d7:f2:e3:aa:76:a8:70:58:ca:d9:c3:79:
         d6:31:87:a0:dd:e1:62:dc:74:46:37:ef:e6:bf:9e:45:e7:3b:
         79:1a:50:30:06:6a:b4:81:1f:e7:5f:d0:52:79:4c:8c:65:21:
         57:36:83:0b:88:a1:cd:c3:fe:b2:78:31:99:d5:4c:b6:a8:34:
         5b:9a:37:02:a2:d6:65:a6:5e:69:6e:d6:d4:b5:35:d5:7c:df:
         89:e8:4b:6e:2a:83:30:6a:11:29:5a:ed:57:9d:35:a1:f1:e0:
         13:26:8b:40:5c:67:0d:3d:92:70:17:95:01:21:1f:88:ab:f9:
         d0:01:34:83:40:23:5b:63:1d:42:21:bf:5b:7e:02:c3:c0:71:
         40:58:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:10 2026 by rpki-client