Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/OnAgwLdUpQzNJnA7pMJph6gOrUw.asa
File:                     OnAgwLdUpQzNJnA7pMJph6gOrUw.asa (raw, json)
Hash identifier:          wsRn9NEKfnSW8oD5dKJ7unDfbcpkUk4I+SjLO5gwn9s=
Subject key identifier:   3A:70:20:C0:B7:54:A5:0C:CD:26:70:3B:A4:C2:69:87:A8:0E:AD:4C
Certificate issuer:       /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial:       019C4EEF8543DAEB78BB2F6576898B1BA80F
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/OnAgwLdUpQzNJnA7pMJph6gOrUw.asa
Signing time:             Wed 11 Feb 2026 23:00:45 +0000
ASPA not before:          Wed 11 Feb 2026 23:00:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207017
Providers:                AS: 3342
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4e:ef:85:43:da:eb:78:bb:2f:65:76:89:8b:1b:a8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
        Validity
            Not Before: Feb 11 23:00:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3a7020c0b754a50ccd26703ba4c26987a80ead4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:65:cf:44:3c:b8:e0:ad:1b:5c:11:d1:35:
                    69:ba:03:aa:c6:3d:fd:2d:37:2b:4d:13:a7:34:95:
                    ce:29:44:f9:98:03:5c:af:9e:c4:b8:89:2e:d5:85:
                    c2:da:4c:4a:93:f2:5f:04:9c:be:f0:46:e1:5f:57:
                    d0:c6:d1:78:07:da:93:e3:8e:88:aa:90:0f:26:51:
                    b8:d0:bf:69:3c:ce:29:e1:e1:f3:9c:97:9c:cc:d5:
                    4a:f2:d5:b0:c5:bd:05:5c:f1:21:5e:27:16:02:2d:
                    41:94:5e:7f:ef:88:9f:48:13:45:4c:8e:79:1c:56:
                    fc:ad:6a:c3:8e:59:d0:ef:10:6b:20:bc:30:91:b8:
                    c6:43:93:0f:0f:ee:f7:19:1a:f8:75:44:4c:97:8a:
                    79:21:64:e8:80:e3:88:c3:91:51:3a:12:6d:f0:65:
                    37:45:f2:73:6b:19:49:06:bb:5b:7d:63:73:03:a6:
                    61:03:ec:30:2e:4e:25:a4:84:36:fa:c5:bc:34:68:
                    c8:56:f7:05:33:44:e7:b1:58:f0:2f:15:6e:7c:40:
                    f5:df:c6:d7:9b:de:4c:10:ae:6a:13:b8:39:aa:c0:
                    60:0a:4c:eb:59:48:30:66:8d:c4:bc:e5:3c:9c:2d:
                    f7:1a:5a:ae:e7:56:db:28:77:d5:d2:f8:e7:b9:62:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:20:C0:B7:54:A5:0C:CD:26:70:3B:A4:C2:69:87:A8:0E:AD:4C
            X509v3 Authority Key Identifier:
                keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/OnAgwLdUpQzNJnA7pMJph6gOrUw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207017

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:0a:7d:af:17:c3:98:72:2d:e2:73:0f:61:f3:d1:e1:81:
         70:18:18:90:c7:64:f7:02:67:f8:c4:ac:99:e8:25:60:63:bf:
         e8:59:b3:36:44:10:11:5f:92:b0:91:2a:8a:45:72:60:a7:f8:
         24:7a:f6:bf:11:2b:50:23:29:b6:75:19:c9:e3:32:10:90:b7:
         9b:d7:0f:4a:3d:f8:ca:c3:ef:bf:9c:c7:a0:ab:43:23:86:d2:
         a4:f5:8d:85:58:23:bf:40:18:70:72:fb:37:ae:90:13:16:2c:
         8d:6e:bd:d0:e1:0a:39:70:41:31:b7:27:1c:32:dd:a2:46:44:
         ef:40:6d:61:ff:50:d3:c3:e1:a4:ea:f8:76:fa:ed:33:00:3c:
         d7:88:b7:b4:c8:8c:0e:b0:0e:27:b8:22:ea:22:a1:f1:5a:58:
         7c:77:15:fc:59:2c:34:3b:2a:98:af:60:90:40:71:e3:4a:01:
         96:b3:b0:e0:1b:11:9b:96:e7:7e:54:b1:ed:f6:7d:9c:0c:db:
         6b:22:f4:d3:8e:d8:4b:47:73:29:f2:90:b9:ae:57:74:64:01:
         24:3f:54:43:b0:40:f6:fc:fe:e6:f2:5e:43:ae:93:c2:28:5a:
         a1:95:a3:e5:32:e6:e2:ad:21:7b:f5:79:1b:23:ca:5a:e6:e7:
         9d:dc:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:59 2026 by rpki-client