Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/_xRdrXLgg9HzjLBx638_kVTC498.asa
File:                     _xRdrXLgg9HzjLBx638_kVTC498.asa (raw, json)
Hash identifier:          kUHA8HVU45dfjDjf28Y902sYCrYVEPwQe+17B3n7R6E=
Subject key identifier:   FF:14:5D:AD:72:E0:83:D1:F3:8C:B0:71:EB:7F:3F:91:54:C2:E3:DF
Certificate issuer:       /CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Certificate serial:       01A07FEACDFC2464DC02691A31C76C17A9E9
Authority key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/_xRdrXLgg9HzjLBx638_kVTC498.asa
Signing time:             Tue 08 Sep 2026 07:28:09 +0000
ASPA not before:          Tue 08 Sep 2026 07:28:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219265
Providers:                AS: 8283
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7f:ea:cd:fc:24:64:dc:02:69:1a:31:c7:6c:17:a9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
        Validity
            Not Before: Sep  8 07:28:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff145dad72e083d1f38cb071eb7f3f9154c2e3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:13:44:25:54:45:d3:28:33:9e:c5:ec:a4:71:
                    ae:dd:94:94:d1:8c:b6:2e:db:45:be:25:16:77:43:
                    b8:65:c0:a1:87:ce:22:d4:43:86:71:b0:39:9f:17:
                    6b:cb:1e:c6:20:d4:73:ee:32:4b:1c:ee:3d:ea:b5:
                    82:d2:d6:a1:75:ea:f0:bd:bc:73:44:04:e7:02:eb:
                    b3:57:e3:b0:47:4f:a0:ea:bd:35:a0:7e:87:0f:1e:
                    ed:9b:0d:fc:80:0b:e2:32:28:9b:78:92:df:93:99:
                    6b:18:09:da:84:d5:f3:9f:45:20:71:ac:86:8d:d1:
                    55:e7:f2:9c:a7:8d:1a:4e:33:cd:52:a0:e0:86:83:
                    bc:e5:f6:b6:0d:05:71:2d:9e:48:38:47:2e:9a:1f:
                    bd:04:39:30:5d:87:aa:66:0a:50:3f:dd:c5:b3:e7:
                    d4:dc:cf:ca:9c:d6:1b:31:ac:46:95:f0:db:e6:9d:
                    51:bb:0d:a7:55:7f:c3:e8:bf:b4:f5:1f:1a:ad:8c:
                    fd:3e:d3:63:ec:dd:4f:17:9f:cb:4a:f9:aa:95:6e:
                    2f:b1:85:8d:8c:3a:c0:57:22:a6:89:ed:f6:de:90:
                    84:82:31:3b:83:41:31:16:7a:ef:4b:53:03:83:c0:
                    38:1f:57:ae:dc:4a:e4:96:53:9b:6d:46:4c:05:bc:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:5D:AD:72:E0:83:D1:F3:8C:B0:71:EB:7F:3F:91:54:C2:E3:DF
            X509v3 Authority Key Identifier:
                keyid:FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/_xRdrXLgg9HzjLBx638_kVTC498.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219265

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:4d:ef:16:00:34:18:fe:af:b1:3b:96:0e:33:ec:99:78:
         77:e4:59:02:66:3a:d2:f5:4d:e3:2d:81:a3:79:3a:4a:bd:67:
         e5:d6:77:cb:a6:b4:90:b5:f7:87:52:ed:a7:58:f4:d4:a2:59:
         b0:a5:a3:95:31:d5:4c:f0:07:f9:f2:c7:3a:65:66:76:54:f2:
         44:37:f0:90:dc:e6:8f:85:21:c4:78:98:89:54:66:c3:76:d6:
         38:67:d7:ae:6f:b6:f3:03:c3:e4:7a:1d:06:da:ac:09:88:71:
         1f:24:29:cc:90:3c:24:61:b2:46:6f:96:9f:e3:4d:2c:82:03:
         ff:1f:25:ba:04:8b:8c:86:72:ff:aa:e4:d1:9c:d1:8c:0c:03:
         ab:10:cf:1c:fa:f7:bf:bd:4d:63:23:24:71:15:90:6b:df:32:
         dd:a0:41:61:5b:08:51:0e:5e:62:6a:bc:3d:f4:ef:f0:31:ec:
         42:2b:da:c5:09:55:4b:2e:2b:9c:99:e7:47:6f:78:19:93:90:
         e6:6e:17:34:6a:79:d8:0f:53:e4:06:81:58:b3:e4:bd:6a:10:
         56:0a:14:32:36:fe:06:a3:a7:6a:c7:68:b2:89:eb:ed:38:f3:
         f1:20:df:70:9b:63:d8:62:74:93:97:fd:4b:fd:2f:8d:67:d5:
         be:42:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:47 2026 by rpki-client