Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/R0EFhHKRWmwfAHiJovxs4U8RwFg.asa
File:                     R0EFhHKRWmwfAHiJovxs4U8RwFg.asa (raw, json)
Hash identifier:          v7Xa5f9qcTv5pbYAux3GgLoelyR7CSkPz3xgAUXrZ1w=
Subject key identifier:   47:41:05:84:72:91:5A:6C:1F:00:78:89:A2:FC:6C:E1:4F:11:C0:58
Certificate issuer:       /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial:       019CA12CB208404514C8E17D87D17AF2FCFB
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/R0EFhHKRWmwfAHiJovxs4U8RwFg.asa
Signing time:             Fri 27 Feb 2026 22:16:26 +0000
ASPA not before:          Fri 27 Feb 2026 22:16:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209297
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a1:2c:b2:08:40:45:14:c8:e1:7d:87:d1:7a:f2:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
        Validity
            Not Before: Feb 27 22:16:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4741058472915a6c1f007889a2fc6ce14f11c058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:96:4d:cf:48:ac:5c:e1:2e:5c:1f:d9:d8:
                    87:a4:01:ce:b3:97:2b:52:76:c6:f8:20:ab:86:65:
                    9b:93:98:f6:31:f7:7f:eb:39:28:b7:59:0d:40:7b:
                    de:57:17:89:c1:f6:4f:53:e6:92:c5:1e:2c:9c:b2:
                    29:41:92:75:15:57:06:eb:de:a6:fc:5d:d4:15:0b:
                    74:e8:bd:db:68:01:a9:5f:18:eb:9c:37:6d:91:11:
                    f6:d0:4a:60:58:dd:13:f0:78:1f:40:9a:ed:62:b0:
                    17:41:40:f4:d9:c7:77:8d:3b:3c:57:19:e3:f4:ab:
                    ac:30:63:3f:4a:8f:9d:fe:f1:05:53:88:ec:fa:de:
                    38:ef:75:f8:68:38:2f:df:c3:25:cc:91:b4:bc:cf:
                    fc:9e:4b:66:f0:51:b7:f5:00:d6:21:56:e8:09:04:
                    05:f4:ba:a8:eb:07:f4:4f:bb:3f:01:b0:0a:4f:9a:
                    48:cd:b1:a5:db:27:84:6f:2a:fb:b6:fb:31:9d:fa:
                    a3:ab:ef:4e:ff:4f:25:08:e7:d8:5a:d7:ec:4b:b9:
                    00:6e:b6:3f:c7:25:7e:05:ab:3f:5d:b6:af:b2:bc:
                    81:fc:8a:e3:b0:cd:ba:39:44:8d:09:26:02:bb:9b:
                    70:40:a2:5c:fd:54:72:a1:aa:52:26:46:90:c9:40:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:41:05:84:72:91:5A:6C:1F:00:78:89:A2:FC:6C:E1:4F:11:C0:58
            X509v3 Authority Key Identifier:
                keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/R0EFhHKRWmwfAHiJovxs4U8RwFg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209297

    Signature Algorithm: sha256WithRSAEncryption
         84:11:72:28:7c:5c:5b:0a:80:86:c6:cd:51:0a:b2:74:32:2f:
         c0:74:2b:a1:c9:c8:8e:ff:68:be:aa:8c:b2:73:cd:f7:eb:72:
         d6:21:fe:3c:10:68:be:a4:1c:f6:c0:bf:7c:7d:cd:df:79:4e:
         f9:35:ea:2a:5c:a9:f8:d9:6a:44:56:70:75:f3:29:59:35:fd:
         24:e8:11:67:1d:05:67:42:b4:97:47:19:bb:f0:fc:66:b1:d9:
         18:28:20:96:82:67:34:5c:5d:3f:b0:0e:73:45:86:b3:ae:f2:
         9c:43:70:76:2e:00:f6:34:30:c5:c7:48:52:d2:8c:2b:89:6a:
         30:3e:eb:06:df:fc:f7:58:4f:8c:4a:7f:35:42:ce:e4:e5:13:
         7d:4e:fe:46:63:f4:76:d1:bc:c4:78:2b:db:7c:34:e2:63:6e:
         6b:b4:67:96:17:58:33:f9:53:5d:aa:40:15:85:a8:1e:fa:13:
         37:eb:af:0d:fe:af:7a:f2:0a:2c:8c:9f:6c:96:51:95:16:03:
         8b:14:d6:a7:de:02:81:cd:e0:bc:cf:8f:b4:06:2e:cc:22:54:
         55:7d:75:98:c1:dc:84:56:3d:bf:e3:e9:43:1f:e1:f4:8a:33:
         f6:6b:42:a4:9c:af:26:fc:c1:5b:0c:e8:52:45:e4:1e:e0:36:
         2f:4b:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:56 2026 by rpki-client