Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fl-aO37XXQmTdf9bFQvR4sML3I8.asa
File:                     fl-aO37XXQmTdf9bFQvR4sML3I8.asa (raw, json)
Hash identifier:          095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=
Subject key identifier:   7E:5F:9A:3B:7E:D7:5D:09:93:75:FF:5B:15:0B:D1:E2:C3:0B:DC:8F
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       019C48FC7E42B758148228786F94639EC8D2
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fl-aO37XXQmTdf9bFQvR4sML3I8.asa
Signing time:             Tue 10 Feb 2026 19:17:12 +0000
ASPA not before:          Tue 10 Feb 2026 19:17:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205005
Providers:                AS: 12779
                          AS: 41327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:48:fc:7e:42:b7:58:14:82:28:78:6f:94:63:9e:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: Feb 10 19:17:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e5f9a3b7ed75d099375ff5b150bd1e2c30bdc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:cf:f2:40:cf:99:8e:a1:d2:10:76:b8:32:
                    8c:f1:8c:2c:d7:8a:27:19:fe:4e:cd:57:8e:05:7a:
                    68:d4:2f:25:f3:c3:c1:c7:51:11:33:3c:09:de:c3:
                    2b:2a:1d:54:7b:da:57:ce:81:c6:56:70:6c:05:c5:
                    78:e4:d2:7f:75:32:81:02:a0:52:a6:12:93:76:61:
                    06:37:e6:20:73:27:3c:2b:e0:06:03:47:d4:13:fd:
                    f3:1d:0a:83:13:db:eb:c9:68:45:60:80:16:34:74:
                    6f:b2:fd:39:b0:2b:3c:d0:07:93:fe:5d:8b:c5:49:
                    e6:8d:c1:23:ae:46:30:fa:4b:b9:c9:de:4e:36:19:
                    29:0f:83:b2:3a:73:55:f9:ed:a2:73:a3:80:1a:d7:
                    7d:ef:56:77:2f:ed:96:c3:b5:46:a8:9d:5f:5d:52:
                    77:45:75:89:2e:43:b7:68:2f:98:8f:a4:6e:51:0f:
                    f9:dd:4c:7e:1f:06:eb:15:85:27:f8:9a:65:80:a7:
                    99:d2:69:09:ec:7e:84:c6:0b:39:a1:ec:82:bf:10:
                    59:af:f8:be:af:02:96:80:38:d6:51:06:41:75:cd:
                    e4:82:0b:cc:b8:6d:40:df:43:ba:28:a0:bc:ec:35:
                    7a:7e:42:9a:2e:42:9a:5c:e5:9c:39:63:9b:72:4c:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:9A:3B:7E:D7:5D:09:93:75:FF:5B:15:0B:D1:E2:C3:0B:DC:8F
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fl-aO37XXQmTdf9bFQvR4sML3I8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205005

    Signature Algorithm: sha256WithRSAEncryption
         ae:9e:78:16:91:54:e8:af:6c:aa:f6:47:62:1c:cb:00:d9:b7:
         63:37:e0:f9:ef:4e:10:11:fe:8a:68:1e:d5:ca:b7:76:a2:40:
         6b:10:4e:8c:ad:0b:09:51:9e:5e:77:9b:18:73:a7:1a:a1:92:
         17:2c:18:5e:36:eb:fe:61:99:8e:ed:c1:36:66:f4:fc:da:39:
         35:a6:22:37:28:71:3d:5e:a1:c2:ee:32:b8:62:ed:8b:a7:39:
         e8:d7:6f:22:53:63:7a:a5:b2:60:cb:08:19:85:81:4c:2e:39:
         a8:ce:ff:7f:33:61:54:77:b1:d2:de:fb:0f:d1:23:5a:84:a9:
         58:2d:75:c8:17:17:3f:6e:1e:73:7e:de:30:39:0c:dc:f6:2d:
         f3:98:ec:96:48:6f:39:9f:3c:4e:9f:3e:6b:c7:be:3f:5a:1e:
         7e:54:bf:90:16:38:85:f4:a7:a0:cf:04:37:f3:36:cc:39:09:
         2d:ac:30:04:47:e5:90:9f:dc:38:ea:62:b6:81:5a:9e:62:bc:
         e9:f6:3a:bf:ac:28:4c:b0:e0:54:f1:26:ec:d3:2f:24:d9:fe:
         28:4f:36:6a:04:92:2d:3a:5b:53:ab:ae:a2:82:d8:5d:c1:00:
         86:ca:ee:00:b2:b5:30:a8:58:74:51:3e:eb:72:c1:51:3c:9c:
         31:a1:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:40 2026 by rpki-client