Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bTLlcnL0Fm_nCJarfemQWZlQvug.asa
File:                     bTLlcnL0Fm_nCJarfemQWZlQvug.asa (raw, json)
Hash identifier:          +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=
Subject key identifier:   6D:32:E5:72:72:F4:16:6F:E7:08:96:AB:7D:E9:90:59:99:50:BE:E8
Certificate issuer:       /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial:       019D889C074B861678B6207668F43FAB9A3C
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bTLlcnL0Fm_nCJarfemQWZlQvug.asa
Signing time:             Mon 13 Apr 2026 20:50:19 +0000
ASPA not before:          Mon 13 Apr 2026 20:50:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214891
Providers:                AS: 35598
                          AS: 49418
                          AS: 207567
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:88:9c:07:4b:86:16:78:b6:20:76:68:f4:3f:ab:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
        Validity
            Not Before: Apr 13 20:50:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d32e57272f4166fe70896ab7de990599950bee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:4e:32:44:b6:0b:40:fc:e7:aa:4e:94:70:
                    41:27:1b:cc:1f:c4:f7:de:86:01:5b:04:d2:ed:63:
                    85:85:75:c0:40:0e:c2:24:38:b1:3d:a2:de:09:3e:
                    6f:2c:91:49:14:71:90:ed:27:ce:57:7e:7b:e2:d8:
                    2d:97:8e:26:ee:e9:98:ed:82:64:52:00:79:b9:42:
                    00:c6:80:91:6a:6f:32:f8:22:9e:0a:51:dd:89:12:
                    8f:33:47:d7:54:f4:ed:b5:9b:c9:76:59:ce:7d:81:
                    ad:fb:97:e9:d3:97:06:09:c1:76:de:fb:5c:05:c9:
                    75:33:1e:d5:8e:80:bc:2f:03:88:60:f5:54:ca:31:
                    b2:ed:2e:64:3f:3b:cc:8f:db:b2:23:07:42:7c:9a:
                    71:9c:86:82:d5:40:ec:fe:96:b5:3b:c3:24:90:f0:
                    2e:e6:e4:d1:8b:cb:0c:9f:34:09:f0:48:1a:9b:fa:
                    93:3c:d5:30:c3:23:ba:d2:c5:7b:b9:99:17:79:3e:
                    55:fb:9b:fb:7f:fe:10:24:05:40:06:0c:78:7b:21:
                    1e:4f:c8:f8:86:a9:eb:f1:ef:e9:cf:e3:0f:52:e1:
                    d6:99:5c:9f:6d:d7:52:4e:39:12:dc:4d:fc:70:10:
                    a7:b4:f7:ab:41:7b:af:4a:7d:48:71:cf:27:b6:68:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:E5:72:72:F4:16:6F:E7:08:96:AB:7D:E9:90:59:99:50:BE:E8
            X509v3 Authority Key Identifier:
                keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bTLlcnL0Fm_nCJarfemQWZlQvug.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214891

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:e6:9b:4e:cf:3b:a9:d4:fc:b5:7a:5c:ca:9d:04:95:40:
         7f:7a:86:ea:e2:ea:83:c2:7e:0e:d1:28:c7:bd:76:41:35:05:
         52:ee:9c:f6:2b:97:9b:d0:2f:c9:f4:29:78:da:c0:8f:73:dd:
         28:bf:a2:57:b8:c7:7e:0d:b0:56:80:37:5a:12:c0:fe:b6:ad:
         ed:0c:3e:da:6a:a6:f9:55:83:b3:12:98:17:8d:cf:3d:df:5e:
         08:c4:38:ec:cd:dd:c5:ec:21:bb:a2:cd:9b:d7:de:00:24:b1:
         c7:b6:6d:d7:40:91:51:f0:33:7c:fa:bc:dc:99:0d:59:2c:5d:
         13:b7:bc:f7:d3:99:9e:36:af:a7:0f:e5:c1:2b:a8:47:e5:8d:
         ff:ed:54:44:da:db:44:e1:c6:b3:4e:88:1d:d7:28:20:de:48:
         1f:06:b7:b2:45:3a:73:5f:6a:05:15:10:ee:9d:b1:19:38:ba:
         30:f3:82:45:8d:10:ad:f3:94:0d:37:67:04:35:8e:7e:60:eb:
         5d:b4:27:b8:4f:65:3a:78:fc:73:a3:89:6f:21:56:1e:9a:b6:
         57:73:ed:da:39:91:5b:eb:8b:9c:5f:03:94:43:5d:e0:f7:9d:
         5f:e3:c5:e0:92:9a:ac:c6:8f:6d:fd:03:ed:7d:2e:2f:55:89:
         99:2f:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:07 2026 by rpki-client