Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/8FO8ullQ6EkIvj-ZloMZ3JXaYUM.asa
File:                     8FO8ullQ6EkIvj-ZloMZ3JXaYUM.asa (raw, json)
Hash identifier:          oSXxTrGB/6IwvXAF+yDgCL0u1UBudeLNMt9/Nk+NN+M=
Subject key identifier:   F0:53:BC:BA:59:50:E8:49:08:BE:3F:99:96:83:19:DC:95:DA:61:43
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019C99FE51BE8F669D379E59036E474BA801
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/8FO8ullQ6EkIvj-ZloMZ3JXaYUM.asa
Signing time:             Thu 26 Feb 2026 12:48:26 +0000
ASPA not before:          Thu 26 Feb 2026 12:48:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50616
Providers:                AS: 42313
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:99:fe:51:be:8f:66:9d:37:9e:59:03:6e:47:4b:a8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Feb 26 12:48:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f053bcba5950e84908be3f99968319dc95da6143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:50:4d:06:88:cb:cc:22:10:b4:d9:b1:3e:
                    f6:61:03:3d:9c:8e:19:ae:e6:6d:cd:47:a1:10:1e:
                    35:a5:1a:0e:4a:9d:92:ab:49:68:0a:0c:1f:98:0e:
                    56:9b:9b:6e:5d:32:c3:1d:a4:ac:e3:6f:a5:04:ea:
                    2d:8c:2a:28:71:ed:c4:24:a1:42:fd:c9:11:a9:a7:
                    e4:56:73:5f:71:bb:40:0a:a1:87:62:9e:41:44:75:
                    3d:f1:c3:47:da:c6:2d:10:b6:88:c8:5b:e4:bc:25:
                    95:1d:61:48:67:c2:b2:40:9d:a9:c5:fa:d8:9a:09:
                    70:a3:56:89:f9:68:f6:25:92:40:8b:07:35:d5:25:
                    b2:38:fd:24:ea:20:3f:0f:d5:5e:4c:0f:89:1a:df:
                    b3:20:bd:e2:a7:73:e0:49:7d:a3:91:80:83:84:02:
                    dc:9c:08:88:88:12:e6:d8:05:fa:34:3e:b7:cb:c8:
                    0c:ff:0c:cf:20:96:46:9b:48:ff:c1:8e:26:f3:9e:
                    bc:cf:23:95:0a:27:33:33:39:6f:8c:db:83:33:8b:
                    d6:88:fd:01:10:13:cb:5f:97:d5:31:ab:c8:5b:39:
                    2f:31:69:6d:de:b6:c7:06:69:e1:50:3d:cc:c6:1d:
                    e3:1c:3e:8c:fe:40:23:78:9c:ed:b2:c8:2d:fe:59:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:BC:BA:59:50:E8:49:08:BE:3F:99:96:83:19:DC:95:DA:61:43
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/8FO8ullQ6EkIvj-ZloMZ3JXaYUM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50616

    Signature Algorithm: sha256WithRSAEncryption
         7d:8e:f1:e7:8f:15:28:ea:b8:86:d7:22:80:36:bf:fa:e4:82:
         86:fe:7d:ab:eb:51:90:37:75:af:a5:02:e5:ec:b4:d9:13:91:
         43:9f:63:39:09:2e:8d:14:b0:c4:db:e8:0d:12:89:b3:2d:7e:
         99:06:4f:a8:96:c9:ae:0d:d0:60:31:8f:05:11:3f:d8:4a:0c:
         25:4b:83:40:92:38:21:2b:8b:d0:48:87:aa:57:d8:99:04:aa:
         b2:7b:2b:4f:5f:13:9c:46:3e:63:a8:50:b9:54:08:7b:c6:75:
         e2:31:09:f2:3a:b1:91:78:b1:0e:42:bd:e2:82:ae:f9:6b:29:
         05:3e:a0:01:b3:3e:90:c9:1b:d9:f4:a1:0c:55:9d:fa:be:35:
         b4:6b:31:18:2a:69:d3:aa:0d:88:5f:4f:6b:7e:9a:88:93:01:
         13:88:0b:21:9f:fd:81:30:4f:cb:8c:a8:99:1b:36:92:89:15:
         e0:69:38:07:38:2d:3f:e3:af:62:78:82:c0:47:dc:c3:19:e3:
         50:ef:23:03:6b:29:22:bf:ca:6f:ad:0f:6a:7f:ce:b4:f2:e0:
         f2:f3:07:ff:2f:b3:09:18:bd:56:9a:b1:ab:94:44:06:56:78:
         cd:f0:0d:4e:da:31:84:a2:a0:28:af:8c:ca:e4:14:2e:1d:bf:
         3d:44:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:55 2026 by rpki-client