Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/E0CB3S5uh5WA9BOaaTsRTwQV44o.asa
File:                     E0CB3S5uh5WA9BOaaTsRTwQV44o.asa (raw, json)
Hash identifier:          kt2GVfemk4SUudhBc0Ff/+bIyA5ogNyeqAZjTYy5dxI=
Subject key identifier:   13:40:81:DD:2E:6E:87:95:80:F4:13:9A:69:3B:11:4F:04:15:E3:8A
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019FA42150F04403A2947383B5AA15DB0A91
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/E0CB3S5uh5WA9BOaaTsRTwQV44o.asa
Signing time:             Mon 27 Jul 2026 15:11:14 +0000
ASPA not before:          Mon 27 Jul 2026 15:11:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 56630
                          AS: 201279
                          AS: 214205
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:21:50:f0:44:03:a2:94:73:83:b5:aa:15:db:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Jul 27 15:11:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=134081dd2e6e879580f4139a693b114f0415e38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:d2:e8:a1:53:db:35:a2:57:80:2d:60:b5:
                    f3:b0:81:89:66:ad:10:fe:78:c3:4c:82:de:e4:3c:
                    70:3c:32:e5:11:da:af:be:a6:df:9e:28:cd:cc:64:
                    c0:83:33:c1:77:f6:22:91:3e:83:f2:15:2c:6e:4e:
                    08:65:13:4f:b3:e0:1d:36:77:7e:53:61:3a:2e:fe:
                    b3:e5:bd:29:fe:fd:9a:20:37:c4:26:fb:0d:a9:0b:
                    07:3b:93:2f:6e:5b:2e:1a:5e:ae:9f:1e:86:33:9e:
                    cf:56:e7:a8:a8:15:ab:8c:e8:be:f1:c7:f5:67:f4:
                    d3:f2:8b:3c:97:4d:fe:fb:3e:29:72:76:7a:1b:e6:
                    64:f5:a9:71:a7:ed:b3:98:7b:bd:62:47:c5:be:b6:
                    00:3e:a5:c6:80:7c:07:54:0e:86:91:b7:1c:61:ac:
                    24:23:f3:1b:a0:cb:03:a7:06:22:81:b3:97:33:c6:
                    41:81:7b:29:cd:18:ca:43:00:e9:85:d0:34:42:68:
                    10:3f:44:4d:cb:3a:8f:f8:c0:7a:70:38:83:54:14:
                    2f:65:80:d7:17:a9:64:76:de:80:6a:30:0d:43:68:
                    76:f2:4d:ed:ef:12:e8:a3:a6:8d:4c:23:37:04:10:
                    e1:84:1a:c0:e0:64:ed:67:dd:44:d1:9e:5f:39:77:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:81:DD:2E:6E:87:95:80:F4:13:9A:69:3B:11:4F:04:15:E3:8A
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/E0CB3S5uh5WA9BOaaTsRTwQV44o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:7d:ee:1b:3e:d6:46:16:08:71:87:ac:b0:3e:0e:3f:6f:
         e1:bc:cd:b6:76:15:b5:33:3d:fd:ec:19:20:53:03:6f:2c:a6:
         de:44:bc:b8:3f:e2:51:68:4d:9e:1e:f2:02:dd:b7:59:b0:be:
         d2:d2:03:8a:df:72:00:54:0d:d0:16:71:9f:3a:c8:0f:15:d8:
         c1:16:3d:e9:66:8f:8f:61:5f:2f:ce:8a:3e:6a:7d:fd:ad:d0:
         f6:2c:70:86:ad:a8:e6:d8:0f:32:2c:e6:3f:08:3a:c9:dd:89:
         97:41:d4:65:3a:d6:e1:0d:74:ca:43:f1:4f:e8:de:08:8d:a8:
         84:4a:a9:c3:a9:93:a2:6b:1e:5b:5b:6c:09:0e:a4:8f:8e:20:
         07:9b:30:8c:af:b3:86:7c:4d:fa:ec:92:c6:5b:17:e3:d1:81:
         56:66:d7:b5:41:e7:41:ce:3a:6c:11:a5:1b:98:ef:59:45:e0:
         25:e2:97:50:2d:a5:da:bb:64:ec:26:c4:ce:92:80:93:f2:9e:
         13:ef:26:8f:f4:f3:2c:ea:69:80:23:85:2d:14:b0:55:9c:e6:
         9b:30:da:fa:79:4b:6c:ae:1f:77:4e:8f:64:2f:13:87:b2:b8:
         ff:a2:5a:6a:b9:98:3c:cb:ac:93:13:4f:99:3e:60:bd:65:80:
         79:10:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:04 2026 by rpki-client