Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/_JlEu_nSSJGC_Xq0Ueg-r7Xqang.asa
File:                     _JlEu_nSSJGC_Xq0Ueg-r7Xqang.asa (raw, json)
Hash identifier:          DJTsyn72FMJNQgBbFHPbinVYdKF43WEPELTxvy0b76k=
Subject key identifier:   FC:99:44:BB:F9:D2:48:91:82:FD:7A:B4:51:E8:3E:AF:B5:EA:6A:78
Certificate issuer:       /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial:       019C95AA887F169EF54B5B7B8BB61B890F98
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/_JlEu_nSSJGC_Xq0Ueg-r7Xqang.asa
Signing time:             Wed 25 Feb 2026 16:38:27 +0000
ASPA not before:          Wed 25 Feb 2026 16:38:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60571
Providers:                AS: 50873
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:95:aa:88:7f:16:9e:f5:4b:5b:7b:8b:b6:1b:89:0f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
        Validity
            Not Before: Feb 25 16:38:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc9944bbf9d2489182fd7ab451e83eafb5ea6a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:52:6b:a9:27:0f:57:21:89:03:f9:87:ee:
                    20:3e:b1:1f:ec:93:84:39:47:7a:05:6b:8e:22:62:
                    fb:a6:67:1a:00:36:3b:9f:f4:05:db:b1:c8:c2:fd:
                    8e:28:f6:8f:13:d2:57:ea:63:4f:8b:09:df:50:c5:
                    3a:d0:8d:2f:de:15:fa:7d:be:13:44:e1:5c:5f:23:
                    95:90:8f:af:a6:94:af:aa:37:35:52:18:30:59:68:
                    e1:d1:08:5a:cd:06:0a:b6:28:5e:22:27:c5:32:da:
                    aa:50:3d:f8:65:0d:a3:72:b9:2a:3c:3c:7e:be:93:
                    fc:e8:d7:e8:1f:b1:cd:54:84:a6:c5:99:6c:31:ca:
                    1a:a8:6a:c6:6c:69:9c:71:09:f6:d1:80:60:04:82:
                    8d:38:2b:e2:c0:e5:d7:75:3c:56:5f:2e:f7:66:e9:
                    e1:e9:ba:e0:eb:41:e5:8f:ee:4a:c6:cf:a0:d0:6b:
                    3c:db:f1:ec:2b:59:68:a6:c5:c6:47:3f:27:9a:30:
                    61:46:25:ab:2b:48:4a:f6:c8:65:73:ca:c9:06:03:
                    ad:f2:c5:09:44:7d:bf:f5:85:d6:47:03:6f:07:c9:
                    50:ae:ed:bd:42:d0:ce:66:2b:97:1b:6a:57:cf:2a:
                    f9:ba:c0:8b:5e:df:5d:0b:4c:b0:a2:24:f0:dd:a4:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:99:44:BB:F9:D2:48:91:82:FD:7A:B4:51:E8:3E:AF:B5:EA:6A:78
            X509v3 Authority Key Identifier:
                keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/_JlEu_nSSJGC_Xq0Ueg-r7Xqang.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60571

    Signature Algorithm: sha256WithRSAEncryption
         79:51:4d:6e:7f:e6:ed:fd:66:6f:11:d4:d2:d2:fa:66:3f:87:
         36:be:a6:05:71:73:9e:1d:40:80:ba:4e:1a:2c:70:34:17:61:
         92:c4:6c:23:27:76:5e:70:02:e8:84:24:2e:7b:fb:d7:d9:8c:
         fd:88:a0:18:61:97:40:a0:35:03:d3:3a:83:0e:18:60:71:e8:
         5f:14:c3:e4:eb:4a:27:fd:fd:e9:67:58:d8:8e:6f:33:44:a0:
         89:3e:86:77:08:83:f8:c2:d9:05:2c:3a:a4:c6:37:f8:ac:12:
         65:a6:05:06:70:b0:c9:30:84:45:ac:20:e7:81:c0:59:2f:92:
         d5:f9:6c:fa:1e:50:f1:44:cc:06:f1:18:11:82:28:74:2a:c8:
         6a:b3:54:d5:96:b4:b1:8a:74:93:c6:52:91:cd:df:1e:b2:0d:
         25:9e:0b:d6:3b:e2:1e:88:3c:1b:d8:f6:c1:07:fd:c3:f4:b8:
         1f:a0:b0:a6:bf:bb:65:b8:b5:3c:e0:eb:96:66:de:ae:b6:f1:
         69:2a:e7:3a:45:9c:46:29:b5:02:73:f6:3d:21:49:96:4e:a4:
         d8:a6:2a:d1:cc:30:79:b7:9f:66:eb:c8:a6:c9:57:85:02:e0:
         03:03:76:7d:b9:b7:d7:83:e1:34:96:10:ad:ae:28:79:a2:50:
         12:57:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:58 2026 by rpki-client