Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/_OzM8w4FoR9ccCbQv3-snmY5IPs.asa
File:                     _OzM8w4FoR9ccCbQv3-snmY5IPs.asa (raw, json)
Hash identifier:          MiIqtXDMPv3SC27FerQ7njWvgkVA9z0GFX+NGxq8AW0=
Subject key identifier:   FC:EC:CC:F3:0E:05:A1:1F:5C:70:26:D0:BF:7F:AC:9E:66:39:20:FB
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       019C93F2298EC3E1C1752B1EC3DA1869A1B9
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/_OzM8w4FoR9ccCbQv3-snmY5IPs.asa
Signing time:             Wed 25 Feb 2026 08:37:27 +0000
ASPA not before:          Wed 25 Feb 2026 08:37:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48678
Providers:                AS: 174
                          AS: 9002
                          AS: 9121
                          AS: 15830
                          AS: 57344
                          AS: 59796
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:93:f2:29:8e:c3:e1:c1:75:2b:1e:c3:da:18:69:a1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Feb 25 08:37:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcecccf30e05a11f5c7026d0bf7fac9e663920fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:b9:1c:06:cd:e2:ef:72:a1:1c:42:94:de:
                    2e:6e:47:67:f8:3a:42:7b:4f:cf:71:78:45:ce:d7:
                    39:6d:4e:5d:e7:23:d1:ee:22:17:50:63:45:cd:7d:
                    50:11:c3:82:93:fc:03:d0:fd:82:e9:39:a5:7e:b2:
                    d0:6c:3e:3a:54:41:57:19:6c:25:92:81:b0:fd:78:
                    01:74:ed:ff:c7:79:e9:b8:8b:4a:57:1f:04:29:8d:
                    4f:5e:01:a0:61:5b:09:d5:5e:3b:e5:96:bb:3a:e4:
                    e6:a4:db:87:4c:3c:4e:b6:a9:1e:91:4f:89:2e:71:
                    de:98:c6:4b:d3:f7:b5:c0:dc:09:46:79:fe:18:0a:
                    81:1a:4c:0f:ec:96:f1:13:1e:04:80:06:f0:d0:f7:
                    45:30:f6:8b:a9:6a:fa:6c:61:73:14:94:98:31:99:
                    50:64:89:2f:7e:e0:4b:71:ac:7b:75:42:dc:87:dd:
                    fd:b6:0d:c7:95:90:c5:03:9c:9a:63:12:8e:bc:e2:
                    3d:10:a1:50:aa:de:83:77:8b:58:0f:1c:a4:71:71:
                    db:9f:63:00:63:c3:4d:71:c0:ab:08:f1:73:3b:0b:
                    81:cb:cc:46:d1:50:14:dc:34:e9:6c:43:83:bd:7d:
                    6a:b2:9f:a5:d4:d0:56:52:32:ac:df:15:19:0b:cf:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:CC:F3:0E:05:A1:1F:5C:70:26:D0:BF:7F:AC:9E:66:39:20:FB
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/_OzM8w4FoR9ccCbQv3-snmY5IPs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48678

    Signature Algorithm: sha256WithRSAEncryption
         66:35:6b:d0:36:f5:5f:d4:7f:04:73:ab:f9:62:db:9e:8b:52:
         d5:6f:ef:0f:11:05:74:82:62:7d:69:2a:24:9d:44:f6:c4:5d:
         c3:86:31:e8:2f:8d:6b:68:2d:06:ab:30:c0:21:e5:a5:b3:1a:
         a6:3c:86:b9:99:7e:56:bd:d3:8a:3a:7d:a4:ef:33:ec:a7:5a:
         e6:90:7e:60:b7:a1:aa:1c:aa:d6:6b:f7:0f:f7:82:12:b1:db:
         29:12:6a:11:46:3a:26:88:ff:fe:76:58:59:b6:8b:23:6c:e8:
         e8:4f:85:65:86:db:99:dd:c9:ac:14:4d:a3:b7:a9:54:d6:f1:
         a0:33:bb:86:1f:23:ef:63:9c:3f:89:39:21:7e:3b:f7:5c:b6:
         39:fb:eb:55:e6:74:c7:76:10:8e:f0:af:26:73:12:bf:58:09:
         fb:eb:46:26:64:0f:c9:5f:96:c9:76:23:f1:a8:a1:d1:84:31:
         ca:73:4d:cf:a5:01:bf:e2:ac:8e:9b:12:98:29:39:85:0e:1c:
         50:1a:df:bc:49:f4:ef:86:bc:38:81:e3:f8:16:f8:46:99:b1:
         20:5d:d4:6a:e0:33:1e:46:a8:c3:82:76:61:31:ba:9a:0d:dd:
         03:0d:fa:f7:7f:e5:78:96:dc:14:5c:67:8a:3d:45:0e:df:60:
         b9:f1:11:13
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyT8imOw+HBdSsew9oYaaG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDI2NWZiMTFjMmEyMjBiYzM1MDcxODY3M2UwNzA0ZDFl
ZGFkZGUwHhcNMjYwMjI1MDgzNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2VjY2NmMzBlMDVhMTFmNWM3MDI2ZDBiZjdmYWM5ZTY2MzkyMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnS5HAbN4u9yoRxClN4ubkdn+DpC
e0/PcXhFztc5bU5d5yPR7iIXUGNFzX1QEcOCk/wD0P2C6TmlfrLQbD46VEFXGWwl
koGw/XgBdO3/x3npuItKVx8EKY1PXgGgYVsJ1V475Za7OuTmpNuHTDxOtqkekU+J
LnHemMZL0/e1wNwJRnn+GAqBGkwP7JbxEx4EgAbw0PdFMPaLqWr6bGFzFJSYMZlQ
ZIkvfuBLcax7dULch939tg3HlZDFA5yaYxKOvOI9EKFQqt6Dd4tYDxykcXHbn2MA
Y8NNccCrCPFzOwuBy8xG0VAU3DTpbEODvX1qsp+l1NBWUjKs3xUZC88nHQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPzszPMOBaEfXHAm0L9/rJ5mOSD7MB8GA1UdIwQY
MBaAFNBCZfsRwqIgvDUHGGc+BwTR7a3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMt
YTk2ZWY2ZjY0MzVjLzEvX096TTh3NEZvUjljY0NiUXYzLXNubVk1SVBzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMtYTk2ZWY2ZjY0MzVj
LzEvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC+JjANBgkqhkiG
9w0BAQsFAAOCAQEAZjVr0Db1X9R/BHOr+WLbnotS1W/vDxEFdIJifWkqJJ1E9sRd
w4Yx6C+Na2gtBqswwCHlpbMapjyGuZl+Vr3Tijp9pO8z7Kda5pB+YLehqhyq1mv3
D/eCErHbKRJqEUY6Joj//nZYWbaLI2zo6E+FZYbbmd3JrBRNo7epVNbxoDO7hh8j
72OcP4k5IX4791y2OfvrVeZ0x3YQjvCvJnMSv1gJ++tGJmQPyV+WyXYj8aih0YQx
ynNNz6UBv+KsjpsSmCk5hQ4cUBrfvEn074a8OIHj+Bb4RpmxIF3UauAzHkaow4J2
YTG6mg3dAw3693/leJbcFFxnij1FDt9gufEREw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:35 2026 by rpki-client