Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/m2sCh5HkLxEE1VASi8B7f5_IGDo.asa
File:                     m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (raw, json)
Hash identifier:          4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=
Subject key identifier:   9B:6B:02:87:91:E4:2F:11:04:D5:50:12:8B:C0:7B:7F:9F:C8:18:3A
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       019C3D427CB7CCF4C5F68D0B6A549E75A3C1
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/m2sCh5HkLxEE1VASi8B7f5_IGDo.asa
Signing time:             Sun 08 Feb 2026 12:38:13 +0000
ASPA not before:          Sun 08 Feb 2026 12:38:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215492
Providers:                AS: 174
                          AS: 6939
                          AS: 199081
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3d:42:7c:b7:cc:f4:c5:f6:8d:0b:6a:54:9e:75:a3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Feb  8 12:38:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b6b028791e42f1104d550128bc07b7f9fc8183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:a0:98:2b:b7:58:52:54:33:cb:d1:ab:2b:
                    ff:17:ac:61:4b:99:6b:a5:63:63:36:33:50:6b:2f:
                    8c:95:dc:ed:4c:7d:b4:71:ef:20:71:c2:19:de:ff:
                    cd:01:c0:84:d7:6c:9c:7d:8f:e8:b9:70:ce:e0:8f:
                    e5:e2:64:53:ab:a0:b5:3d:80:45:25:fb:cf:cb:23:
                    6c:1e:51:7c:84:34:44:dc:3d:77:77:42:9a:d2:07:
                    25:40:69:d7:ef:d0:d6:59:dd:8e:8e:7f:d0:8c:f0:
                    de:d7:83:dd:74:6f:8a:5a:51:0f:38:c9:6f:ec:42:
                    a2:de:a2:66:17:fa:09:9d:c6:a0:7c:10:cd:ca:e9:
                    89:81:6a:5c:fb:94:b3:8d:58:42:4d:f5:19:c1:5f:
                    e2:88:a8:65:56:64:b1:02:08:77:3d:0b:20:02:3d:
                    10:4b:3d:37:6b:aa:bb:2d:22:91:2b:50:97:bf:f0:
                    ee:d2:8c:0a:90:7b:c7:af:e3:37:11:21:56:89:6d:
                    41:a3:3a:20:cb:98:7c:0b:f4:44:35:21:3c:24:45:
                    21:3f:a4:92:6a:87:60:c4:92:86:ca:37:3a:78:54:
                    63:08:9f:a2:20:e3:cf:c8:9b:ba:90:0d:02:15:b4:
                    2f:26:9b:34:6e:ed:70:d9:4b:07:5e:55:da:00:ff:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6B:02:87:91:E4:2F:11:04:D5:50:12:8B:C0:7B:7F:9F:C8:18:3A
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/m2sCh5HkLxEE1VASi8B7f5_IGDo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215492

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:ce:98:6e:b1:39:e8:fa:05:dc:0a:f9:2a:4c:14:71:b8:
         d1:b4:16:2d:80:e7:de:fe:1f:cb:7e:74:36:39:3f:1c:81:1c:
         97:b0:cd:31:4f:60:2f:f2:f4:7c:ba:a5:92:69:79:c2:a0:f6:
         2b:03:e5:b9:c1:bd:cb:f1:15:98:88:94:52:c4:fa:89:98:01:
         41:8d:30:6d:65:84:83:61:4a:3d:14:3a:0d:96:f3:45:79:00:
         cf:2e:c0:d3:cb:00:04:39:06:ea:cb:15:07:b8:74:74:ac:8c:
         fa:f6:d4:63:75:94:7c:61:d4:ce:27:a3:5b:89:57:55:3e:cc:
         a0:6a:23:55:72:91:9b:1f:8d:cb:b5:db:38:d4:be:34:75:c8:
         e8:e6:a9:84:c4:c3:cf:51:a2:96:14:60:6c:31:28:bc:d7:4d:
         32:c3:47:eb:fa:e1:06:66:f4:f9:22:91:97:19:3e:b8:c3:3f:
         9a:d6:fd:7c:a3:1a:7b:d2:6a:12:f3:73:90:58:d7:96:4e:23:
         e1:f5:07:3a:8d:3b:35:31:02:95:f5:8a:24:58:8f:57:35:18:
         2b:ac:85:7a:8d:49:1a:34:bc:1d:b6:cb:78:3b:6b:04:4d:ec:
         8b:37:b4:b7:99:6c:a9:61:a7:98:3f:c8:5b:92:8f:3c:17:bf:
         2c:58:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:48 2026 by rpki-client