Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/0-ptGOK4a7f4xwJkU6zdFe0Pcs0.asa
File:                     0-ptGOK4a7f4xwJkU6zdFe0Pcs0.asa (raw, json)
Hash identifier:          bRedneNglo/hXhbRz+c6tFACzTRGyUDSkdB4btD1Q64=
Subject key identifier:   D3:EA:6D:18:E2:B8:6B:B7:F8:C7:02:64:53:AC:DD:15:ED:0F:72:CD
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019C9108015AEC054997D975B8E2F7BDF2E8
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/0-ptGOK4a7f4xwJkU6zdFe0Pcs0.asa
Signing time:             Tue 24 Feb 2026 19:02:26 +0000
ASPA not before:          Tue 24 Feb 2026 19:02:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 213449
                          AS: 214809
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:91:08:01:5a:ec:05:49:97:d9:75:b8:e2:f7:bd:f2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Feb 24 19:02:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3ea6d18e2b86bb7f8c7026453acdd15ed0f72cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:9e:93:e6:bc:db:b1:8a:2a:4e:a2:2c:c8:
                    4d:da:54:5e:d1:b8:00:43:d3:b7:75:e5:65:74:5e:
                    70:88:22:b3:06:4c:b8:f6:6d:a8:3c:15:9d:bf:57:
                    43:09:7f:8b:bd:76:aa:f3:63:19:b7:0d:ec:2b:14:
                    99:38:6a:ae:fa:26:36:a8:c8:40:cf:f0:b2:0a:67:
                    df:84:79:1e:69:2c:74:46:8c:27:65:70:b6:bd:20:
                    ad:3c:a4:0e:cb:f5:19:a0:de:9e:a5:5c:09:6a:53:
                    09:5c:5c:39:90:e9:ad:48:c6:6d:10:01:fa:b0:c1:
                    a0:9a:a1:5a:f3:13:a1:d3:e4:aa:88:15:a5:9a:6a:
                    75:e2:7f:a0:da:04:27:08:92:07:db:8f:23:f3:a9:
                    e9:2a:e7:cc:7f:d8:eb:6d:6f:b8:0f:aa:9f:ad:0c:
                    e0:91:b0:f2:f6:77:42:14:d9:1f:42:2d:44:24:f8:
                    c2:60:e6:67:25:0a:ee:e9:cb:4f:5a:dd:be:00:d8:
                    de:64:80:97:f3:04:54:2e:45:27:3f:a0:3a:41:42:
                    ab:a1:84:21:15:a3:ee:ef:92:cf:6d:80:20:8b:39:
                    ea:d1:3d:ce:5a:39:6d:b2:3e:7e:35:98:5c:f5:5d:
                    7f:01:2c:18:62:36:3b:ec:9e:7e:ea:89:24:af:fb:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:6D:18:E2:B8:6B:B7:F8:C7:02:64:53:AC:DD:15:ED:0F:72:CD
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/0-ptGOK4a7f4xwJkU6zdFe0Pcs0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         40:32:02:27:92:77:88:21:53:38:3f:40:a3:17:ba:63:1e:5b:
         86:fe:6e:be:14:fc:cb:6c:fc:07:ef:9b:c3:e0:2e:78:82:71:
         91:43:bb:a8:29:1a:65:f7:53:db:5c:9f:8f:67:22:89:9e:65:
         09:3a:7c:68:65:1e:cf:fb:57:aa:52:96:09:df:c3:7f:27:0b:
         16:df:d8:62:45:27:6c:1a:61:71:57:30:3c:0f:f0:ee:8e:30:
         54:ec:ed:35:ba:54:5c:42:fd:e6:62:8a:76:86:a5:90:33:f8:
         ae:79:cf:62:84:20:c9:a5:26:a9:19:0b:0d:0f:7a:c4:e2:e7:
         08:00:10:e6:4a:fc:89:dd:10:66:db:00:e0:9f:77:99:53:2a:
         1f:f3:95:49:a6:69:2a:13:36:97:12:b8:e7:44:4c:f0:bb:82:
         2e:c4:6e:cc:e1:c0:9e:fb:67:f0:84:49:7c:3c:a2:33:74:98:
         6f:eb:c0:06:a6:f1:03:7d:82:e2:42:0b:a5:ed:7a:af:7f:1c:
         31:c7:0f:93:06:f6:8f:1c:f9:16:7c:e7:3c:b7:63:8f:30:f5:
         05:29:b1:ea:cb:a4:f6:fc:86:c4:24:b0:a1:84:5c:6d:bf:8b:
         c6:c6:f5:73:de:ab:8b:de:89:af:a0:ca:5c:1c:2a:26:c9:c6:
         da:b7:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:29 2026 by rpki-client