Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/l3SlA1x-I_04NpSkIeTOCjTcVzs.asa
File:                     l3SlA1x-I_04NpSkIeTOCjTcVzs.asa (raw, json)
Hash identifier:          OfYZc+/iScj3IqfwvkCauRQ/Ecr/AcvyF6cWuLIWX0Q=
Subject key identifier:   97:74:A5:03:5C:7E:23:FD:38:36:94:A4:21:E4:CE:0A:34:DC:57:3B
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019C969312DB52E0E7EB673A13A66E7EEE5A
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/l3SlA1x-I_04NpSkIeTOCjTcVzs.asa
Signing time:             Wed 25 Feb 2026 20:52:26 +0000
ASPA not before:          Wed 25 Feb 2026 20:52:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208487
Providers:                AS: 8772
                          AS: 11967
                          AS: 24381
                          AS: 29632
                          AS: 35708
                          AS: 41051
                          AS: 199829
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 211358
                          AS: 211509
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:96:93:12:db:52:e0:e7:eb:67:3a:13:a6:6e:7e:ee:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Feb 25 20:52:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9774a5035c7e23fd383694a421e4ce0a34dc573b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:25:de:5c:5b:65:3e:7a:dc:0f:d5:25:93:
                    cd:7f:1e:d7:d0:6e:ca:46:39:f5:3a:7b:13:ae:ac:
                    02:b1:bb:9f:af:22:1c:35:4c:45:32:6d:e0:6e:84:
                    12:16:95:91:83:ff:f6:67:53:d5:3d:12:71:5b:af:
                    83:29:c1:0f:50:62:8f:96:da:e3:5f:c3:86:e4:d3:
                    3d:0b:1a:10:c0:13:ec:89:7b:4e:11:df:05:22:73:
                    66:7d:eb:8c:aa:96:26:98:1d:0b:14:ad:d2:e7:a8:
                    99:b1:a5:d3:92:99:33:8b:2a:c4:d9:33:a8:00:ed:
                    0d:7b:8c:9c:66:4e:3a:d4:e5:2a:b0:0a:81:63:e1:
                    34:05:c5:35:e3:d5:be:80:e0:ce:a3:40:3e:4c:6f:
                    03:93:6c:1e:69:82:00:f5:96:91:2e:27:72:d5:87:
                    5d:5e:70:7e:4e:0e:05:b9:15:4c:eb:ab:91:fd:de:
                    d4:a2:8f:86:c5:84:8a:dd:52:a2:e3:04:24:44:87:
                    4f:0f:db:7c:8d:0b:e8:e0:73:5f:d7:59:2a:8c:bf:
                    7c:2b:96:d0:e1:24:24:04:82:ee:8c:89:69:1f:45:
                    86:aa:a7:fc:38:51:c0:e6:83:78:3c:83:cd:73:44:
                    2a:f6:cd:60:33:df:7d:75:87:16:47:e3:3d:8a:f3:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:A5:03:5C:7E:23:FD:38:36:94:A4:21:E4:CE:0A:34:DC:57:3B
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/l3SlA1x-I_04NpSkIeTOCjTcVzs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208487

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:b7:9c:41:3c:dc:79:95:b4:55:88:d1:f9:c7:bb:57:ec:
         d5:d5:07:c3:ad:bc:12:9f:6b:53:05:79:9f:47:16:0d:dd:27:
         b3:3f:81:b5:db:06:2d:ba:f6:18:6a:2f:45:c6:7b:9b:a9:55:
         e1:b5:a3:71:5b:a3:c3:07:f7:29:38:23:ac:2f:5f:ce:2f:eb:
         34:4a:09:a7:6e:06:ef:d3:4c:d3:68:20:fa:b7:25:c3:cd:60:
         85:f5:95:2b:b5:fb:22:d6:f0:c6:a3:46:5e:81:49:cd:a3:1a:
         26:0f:c1:ab:47:8a:a1:92:1e:83:59:f9:e3:b1:ab:e2:e0:9c:
         01:fc:3a:19:dc:c7:7f:15:82:8b:61:e1:57:46:ed:9a:37:73:
         42:2c:67:37:88:18:b7:bf:c3:ba:fc:f8:af:c3:27:fa:ba:a4:
         4e:33:02:bb:13:22:96:80:92:a8:db:c1:63:1b:f7:4f:41:55:
         7a:0e:3f:a9:2f:b7:14:2f:fe:0d:cd:12:c2:22:c9:b9:98:ea:
         d1:4d:5c:49:76:df:c7:f8:d4:ec:77:6e:2e:4e:bd:b0:7b:8f:
         92:14:28:bb:a8:6f:53:9e:ef:86:91:56:98:45:dc:11:69:f2:
         6d:9d:c0:29:fe:10:7a:45:d6:68:75:0a:7a:a6:08:10:b1:af:
         6f:b0:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:42 2026 by rpki-client