Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/BuaO7x7CizzehjR3wAMfxPM-upw.asa
File:                     BuaO7x7CizzehjR3wAMfxPM-upw.asa (raw, json)
Hash identifier:          /l4j7MBdQud4LEWwCc4v0bKpr2n3ZZy/m+CkXbPi6pA=
Subject key identifier:   06:E6:8E:EF:1E:C2:8B:3C:DE:86:34:77:C0:03:1F:C4:F3:3E:BA:9C
Certificate issuer:       /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial:       019C52BFE2352426CCC52DDADCBD85CB4A3F
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/BuaO7x7CizzehjR3wAMfxPM-upw.asa
Signing time:             Thu 12 Feb 2026 16:47:12 +0000
ASPA not before:          Thu 12 Feb 2026 16:47:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202319
Providers:                AS: 43641
                          AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:52:bf:e2:35:24:26:cc:c5:2d:da:dc:bd:85:cb:4a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
        Validity
            Not Before: Feb 12 16:47:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06e68eef1ec28b3cde863477c0031fc4f33eba9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:fb:58:a5:fd:e6:58:9b:ec:b9:34:fb:95:
                    6f:cc:0b:93:47:2f:59:66:2f:88:2c:85:7a:ce:e6:
                    82:e8:ef:29:91:37:fa:83:69:18:d9:f5:6b:28:c8:
                    db:66:a4:09:b1:b7:fb:ef:4f:22:d5:e6:c4:0f:d8:
                    30:a3:ca:26:ec:67:8d:a0:00:25:5e:d5:66:cb:6e:
                    93:80:b4:e5:90:fe:5e:84:cd:5f:4c:e6:4e:f2:fc:
                    77:72:89:f6:8b:8a:c4:fb:6e:b7:88:2f:53:dd:0c:
                    55:4a:ef:a3:73:18:40:28:7f:82:5c:11:dd:cc:2d:
                    7b:6d:c3:1a:9b:58:63:95:5a:11:3b:84:81:f0:43:
                    4e:c5:07:41:8a:47:6a:3d:20:83:8e:22:60:21:0c:
                    87:86:ab:e2:8f:2b:8a:6e:5c:41:40:ab:cd:eb:91:
                    cc:c2:59:9d:5f:e4:2c:2e:72:92:b6:6b:cb:1c:ec:
                    0c:47:28:f8:20:62:ee:b4:4c:6e:d6:79:ac:4b:2c:
                    5f:ba:f7:eb:84:18:e4:9f:c5:2d:48:c1:78:3a:56:
                    2e:80:17:53:32:c9:e2:dd:b7:42:0c:21:ca:d0:c7:
                    68:fc:1e:27:c7:48:2a:e1:9a:70:f0:d3:61:12:81:
                    47:1d:ef:64:af:07:1c:31:e1:9a:03:3e:80:05:e0:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E6:8E:EF:1E:C2:8B:3C:DE:86:34:77:C0:03:1F:C4:F3:3E:BA:9C
            X509v3 Authority Key Identifier:
                keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/BuaO7x7CizzehjR3wAMfxPM-upw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202319

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:f5:1f:da:be:34:00:0f:34:46:41:c6:56:19:84:05:d8:
         4d:7c:8d:1a:41:a0:2f:e8:a8:89:47:c1:db:1d:b4:94:b4:5d:
         91:71:7f:fd:0e:8b:1d:df:f9:4c:3b:4b:2f:e2:26:3d:41:df:
         dc:d8:97:a6:0a:06:54:0b:1f:54:9d:ea:12:0d:60:b5:4f:30:
         1d:c3:e3:d0:25:ab:99:da:69:fa:9b:52:b7:86:20:1a:b4:18:
         57:5f:d7:e8:ff:fa:c2:d7:39:36:12:52:13:ec:66:f5:fe:09:
         1d:3f:cc:f4:39:bd:7a:be:51:95:4a:da:48:22:9a:ed:63:0a:
         3e:83:9b:f5:fe:32:98:22:ce:22:88:16:42:66:3f:be:ef:30:
         ca:59:ca:12:93:4a:d6:03:d6:26:8b:eb:8f:60:85:3d:4b:45:
         5a:46:d8:69:ad:93:cd:c2:90:2d:26:44:56:87:5d:6f:ff:f9:
         e4:ba:89:2a:51:df:7a:e8:d1:eb:11:40:d9:f5:0f:91:b1:f0:
         82:84:9f:17:bb:02:d0:b6:39:1d:73:80:4a:56:9f:04:fd:2f:
         00:b4:21:4c:da:42:57:4b:5c:a1:11:2d:36:2b:92:b9:9d:1b:
         57:85:ca:a8:e7:ed:68:c8:0f:09:be:2b:71:1f:df:f6:56:0c:
         e4:47:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:27 2026 by rpki-client