Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/PRSuuvH26xT5-o54onKQLtr_Yyc.asa
File:                     PRSuuvH26xT5-o54onKQLtr_Yyc.asa (raw, json)
Hash identifier:          oaFOFjQ9m4CifADB9zFA8Nh1K294y+NsTbFx9uaW4rs=
Subject key identifier:   3D:14:AE:BA:F1:F6:EB:14:F9:FA:8E:78:A2:72:90:2E:DA:FF:63:27
Certificate issuer:       /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial:       019C2A642881E22FD3F068E61B1C04636990
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/PRSuuvH26xT5-o54onKQLtr_Yyc.asa
Signing time:             Wed 04 Feb 2026 20:42:12 +0000
ASPA not before:          Wed 04 Feb 2026 20:42:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202831
Providers:                AS: 50867
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2a:64:28:81:e2:2f:d3:f0:68:e6:1b:1c:04:63:69:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
        Validity
            Not Before: Feb  4 20:42:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d14aebaf1f6eb14f9fa8e78a272902edaff6327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:66:c6:52:2d:7f:9d:17:f7:b3:49:89:f1:
                    4e:89:a0:e0:e3:d7:99:31:3e:81:a1:e4:a1:3d:b9:
                    c2:f7:ee:44:6d:c5:da:4e:75:23:0f:e9:6d:82:0a:
                    f4:04:3f:e3:48:f2:7e:97:24:52:c2:d6:ae:18:fe:
                    20:91:2c:a1:3f:29:2c:fa:37:72:3f:7e:cf:17:b1:
                    3d:8f:41:e9:09:4c:59:1d:57:cd:4c:f6:50:73:d6:
                    91:c5:9f:d5:aa:ef:c2:00:c6:01:08:db:ff:30:c4:
                    47:9d:54:84:4c:7b:87:41:89:a7:b5:98:27:40:55:
                    8a:14:1c:86:96:3b:3d:db:6b:43:c1:39:29:5f:88:
                    65:c6:16:3d:2b:f1:91:c4:64:62:4c:da:79:41:7b:
                    94:a9:ef:4e:ea:ea:78:00:8b:ba:ca:21:8e:fa:9e:
                    0a:8d:6e:60:45:be:71:33:90:1f:b0:bb:bd:b7:d1:
                    34:30:8d:99:eb:fe:6a:86:03:06:39:0c:22:3b:d2:
                    f0:db:14:72:fb:57:aa:b2:1c:1b:bf:c9:a0:e4:c7:
                    67:7c:3d:0f:23:dd:97:b5:82:1c:97:bc:17:d1:f7:
                    bb:ac:03:04:e8:0b:12:04:af:e7:49:28:d5:0d:f5:
                    3f:47:58:08:89:e6:76:cb:49:2b:09:a7:b5:be:c7:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:AE:BA:F1:F6:EB:14:F9:FA:8E:78:A2:72:90:2E:DA:FF:63:27
            X509v3 Authority Key Identifier:
                keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/PRSuuvH26xT5-o54onKQLtr_Yyc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202831

    Signature Algorithm: sha256WithRSAEncryption
         61:68:1c:54:fb:bc:01:bf:7c:bf:64:f3:ea:24:99:99:9e:28:
         b1:e9:60:53:49:39:fb:73:c6:0f:6b:e8:86:c2:75:24:e8:bc:
         0d:d8:a1:60:1b:f9:d2:d5:0c:4d:ce:4e:fe:4f:cc:95:83:84:
         c1:9d:0f:59:ec:96:84:c6:ed:75:09:d1:7c:87:e3:69:22:ee:
         11:be:31:bc:65:38:16:50:ad:a1:86:08:ff:7a:41:a4:33:fa:
         55:0c:4a:2b:35:51:7c:84:79:bf:37:d8:84:fd:17:a3:8d:19:
         dd:2f:fd:33:c2:93:f5:d9:fd:8f:c8:a4:33:93:da:b8:ab:5e:
         b6:93:72:ad:b9:a1:a9:18:32:61:23:fb:fb:44:75:3a:fd:77:
         14:26:e4:c8:e0:8e:62:c7:21:b7:3a:16:06:50:43:0f:38:d6:
         43:df:7d:85:3a:1c:e0:62:d4:78:06:88:9f:35:bf:ac:61:13:
         dd:f2:db:f2:52:5e:fb:c5:51:43:37:1b:a9:2a:09:49:b6:7c:
         ca:4b:ff:59:f7:29:1d:2a:78:d7:99:32:73:76:3c:c3:a8:30:
         31:37:c0:ef:3e:b4:99:98:dd:6b:2f:c3:8e:a9:74:c8:69:f9:
         a3:e4:00:20:4c:3e:c6:e1:14:7e:0d:83:1c:39:a6:6b:7d:08:
         07:85:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:28 2026 by rpki-client