Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa
File:                     1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa (raw, json)
Hash identifier:          re4iOsTgujK3n0SeH/pZVryx2miaF5Vx+USZ42XqMIM=
Subject key identifier:   FA:CD:75:98:67:23:0B:C6:86:12:7B:0C:03:10:86:E1:30:CA:E2:A2
Certificate issuer:       /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial:       019D42EBB4B1141C085D344B94A1C0F2A5A5
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa
Signing time:             Tue 31 Mar 2026 08:03:56 +0000
ASPA not before:          Tue 31 Mar 2026 08:03:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25156
Providers:                AS: 3269
                          AS: 12874
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:42:eb:b4:b1:14:1c:08:5d:34:4b:94:a1:c0:f2:a5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
        Validity
            Not Before: Mar 31 08:03:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=facd759867230bc686127b0c031086e130cae2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:83:6c:2b:6d:6d:06:c3:bb:ae:f6:cb:de:
                    7f:7a:3d:9a:53:f3:f4:8e:82:cb:5f:24:31:63:95:
                    5c:66:51:c5:1b:b1:dc:e6:20:11:f7:64:b5:3e:98:
                    f5:ef:08:ae:89:0b:85:8b:e6:15:61:a6:1b:1d:a1:
                    57:b9:5a:9f:ba:f5:e2:60:10:ca:40:5e:66:99:04:
                    9a:67:71:7a:1d:8f:84:0e:a8:c5:4f:81:cb:bb:9b:
                    0c:7e:c8:2b:79:4c:fd:d7:ec:b2:ae:d8:bd:b8:02:
                    77:ee:f4:01:d5:c1:a0:30:08:09:62:29:e4:56:16:
                    85:ec:03:83:57:d2:76:78:d2:0b:1c:1d:a2:f8:d1:
                    35:7a:e8:b6:95:0c:93:2c:b4:63:2c:08:a6:2e:c5:
                    12:d6:0b:8f:ca:e7:ad:94:68:18:e8:80:a4:47:ec:
                    a4:6a:d9:f5:e6:e0:21:94:d0:5f:49:58:7f:66:77:
                    78:6d:e7:4c:27:fe:94:3e:10:4e:fd:03:cd:a1:e3:
                    f9:61:72:01:be:e7:1e:cc:05:79:09:39:f3:6e:10:
                    dd:22:8a:a2:1a:68:b2:58:d3:bb:2d:82:30:dc:62:
                    d0:ec:17:83:9b:a4:d0:e8:62:b9:9d:03:2d:06:68:
                    cd:08:87:f5:c1:45:b0:77:51:e1:dc:f1:ea:e3:52:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CD:75:98:67:23:0B:C6:86:12:7B:0C:03:10:86:E1:30:CA:E2:A2
            X509v3 Authority Key Identifier:
                keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25156

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:40:06:81:f7:d5:41:ee:1f:49:81:bf:4b:09:7b:f4:11:
         1e:58:79:d3:ac:dc:b7:d8:9a:d1:08:44:d2:3d:30:c6:88:9f:
         dc:fc:7c:ed:50:1e:05:b6:95:a3:52:b5:a4:02:41:4d:99:ba:
         29:a5:ce:1b:42:04:10:5f:01:6e:a1:ed:a0:a6:c7:c9:06:e1:
         6e:66:2b:67:aa:65:74:00:ff:1d:cf:31:2d:42:ef:ac:0d:97:
         d7:5f:49:c4:dd:4b:d4:5f:4a:ec:90:75:0e:6a:91:c8:e9:3b:
         a8:dc:7e:82:26:52:54:dd:17:ec:c9:94:4d:ba:92:62:48:47:
         3a:4b:21:56:71:c4:ff:31:9a:54:29:57:01:1a:a8:1d:40:56:
         84:6c:f9:19:a2:18:26:ab:cc:3b:fe:94:a7:43:64:fd:00:5e:
         3b:e1:4c:72:21:b5:8d:51:b4:81:e9:ee:a7:b9:0a:81:6a:7c:
         cf:28:14:ac:ec:12:f9:a3:5d:14:1c:b8:26:9c:e8:88:c5:5d:
         75:b0:3b:a1:e1:12:a3:3b:ef:c5:38:f4:33:9e:9b:24:85:55:
         7b:e6:39:1b:a0:5b:e9:3e:10:92:60:c1:f2:7d:49:07:1e:3b:
         10:5a:67:16:24:af:ea:32:b0:71:50:d3:37:2b:26:cb:8b:db:
         9e:f0:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:27 2026 by rpki-client