Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa
File:                     c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa (raw, json)
Hash identifier:          9NIofwcdGz5zeO6bax5mK7skNIAnSwQhXhWa+mJ1VWs=
Subject key identifier:   73:72:0C:27:C9:2F:04:F8:3C:09:5F:97:BD:98:02:EC:71:5F:ED:D8
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       019CA56C59352C363D983A5BA5CBCBC92AA1
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa
Signing time:             Sat 28 Feb 2026 18:04:27 +0000
ASPA not before:          Sat 28 Feb 2026 18:04:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209275
Providers:                AS: 9121
                          AS: 15924
                          AS: 34984
                          AS: 201178
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a5:6c:59:35:2c:36:3d:98:3a:5b:a5:cb:cb:c9:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Feb 28 18:04:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73720c27c92f04f83c095f97bd9802ec715fedd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:e2:e5:8a:9f:37:ba:22:8e:64:a0:f5:df:
                    1f:cc:9f:42:1f:d4:9c:9d:07:02:f3:4c:65:3c:92:
                    dd:0a:d1:a6:42:48:06:79:79:51:e1:29:77:20:b8:
                    03:af:19:f1:33:b0:1a:54:8e:70:d3:1b:e4:6a:d8:
                    c1:c1:a4:78:95:a2:4e:78:5f:ed:d7:4c:ee:0b:c7:
                    97:45:85:dd:32:8a:8c:ef:c1:8e:14:ed:55:56:de:
                    25:bf:84:56:2e:e0:a0:eb:8b:9d:18:43:15:77:03:
                    08:43:95:ba:d6:6c:08:d7:66:ae:aa:6d:4f:83:41:
                    a5:c6:90:b2:11:0a:9c:ee:38:8c:39:14:42:5b:f7:
                    40:0a:3d:f2:6d:70:de:10:0f:22:58:41:dc:0c:d1:
                    01:5e:be:9a:2d:2e:fa:8f:a0:65:31:42:0d:9c:16:
                    be:b0:40:29:45:a1:11:12:be:d7:b1:92:5f:3f:67:
                    23:f1:ca:7d:30:ab:38:08:53:72:32:ff:3f:53:f9:
                    48:08:cb:d8:a8:92:2b:71:2b:2f:95:0c:6a:16:9d:
                    60:ba:3a:f4:c4:35:03:eb:df:08:ba:c1:68:0e:5f:
                    f1:01:20:8d:1c:e3:70:78:09:c8:c2:5f:ac:ea:41:
                    0b:ae:b5:ff:e0:ba:b4:98:f3:1c:af:f0:0e:85:db:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:0C:27:C9:2F:04:F8:3C:09:5F:97:BD:98:02:EC:71:5F:ED:D8
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209275

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:18:71:b5:3b:f1:4f:7e:b1:20:bd:1b:fa:6e:91:c3:83:
         22:e0:37:4b:6a:e4:86:97:1d:06:11:80:67:be:49:1c:4a:34:
         06:d3:97:ae:46:cf:5c:0b:cf:cd:fd:fe:42:cf:0b:f8:ee:ad:
         2e:e3:87:87:58:37:8f:f9:62:c0:58:7b:fe:b1:61:ad:0b:6f:
         0e:2c:c0:11:1d:be:7f:5d:05:68:6a:a4:9b:e2:57:fc:a5:58:
         22:c9:76:00:24:a6:67:7d:69:69:dc:a1:e5:dc:6a:d0:e6:60:
         37:78:9b:46:16:9d:43:62:23:4a:ef:f0:7d:67:19:ca:e5:32:
         f5:36:6b:ed:f9:58:36:ff:4f:e2:e8:a6:91:7e:0a:01:95:d4:
         78:6d:48:33:a7:fd:8c:6a:c8:af:12:0c:d1:9a:d0:81:e0:37:
         04:d6:c5:0b:0c:27:0a:bb:26:1e:e1:9c:4b:d3:b1:65:3a:a6:
         df:bd:da:64:84:b7:aa:c0:dc:df:8d:98:48:52:01:75:9c:f6:
         95:19:03:20:5a:1f:74:4a:50:e5:db:5b:89:c8:ef:15:7d:08:
         05:22:92:10:38:8b:61:12:37:71:43:44:4a:76:9f:11:7d:7f:
         d7:a5:2b:9f:8d:25:75:3c:35:26:1b:ab:29:ed:48:75:37:25:
         1b:2c:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:06 2026 by rpki-client