Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/vq_N2qG8mbDhfu-Rk_yLoVAT3Qk.asa
File:                     vq_N2qG8mbDhfu-Rk_yLoVAT3Qk.asa (raw, json)
Hash identifier:          JT0iM+8MVkraQDYJcjWc6sICRKkcPkj+0HcY/vzUozI=
Subject key identifier:   BE:AF:CD:DA:A1:BC:99:B0:E1:7E:EF:91:93:FC:8B:A1:50:13:DD:09
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019D69378748F98D6245ED9F30D44087F27F
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/vq_N2qG8mbDhfu-Rk_yLoVAT3Qk.asa
Signing time:             Tue 07 Apr 2026 18:32:20 +0000
ASPA not before:          Tue 07 Apr 2026 18:32:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 11967
                          AS: 209533
                          AS: 212895
                          AS: 213449
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:69:37:87:48:f9:8d:62:45:ed:9f:30:d4:40:87:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Apr  7 18:32:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beafcddaa1bc99b0e17eef9193fc8ba15013dd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:02:aa:1b:f3:ec:5f:19:bf:37:a9:56:c7:ab:
                    9b:f5:a6:c5:ef:6a:42:8f:16:48:64:37:88:25:49:
                    0c:d7:b3:e7:ec:df:84:2b:06:2c:b1:0c:88:45:f7:
                    d3:73:ed:bf:5e:8f:a7:ea:25:c0:c4:a2:95:68:ab:
                    7d:a9:60:5a:c8:01:b3:5a:fb:64:d3:7d:8a:e4:82:
                    40:a6:a3:6f:33:49:81:a9:25:50:fb:1e:f6:d3:9a:
                    66:dc:bf:db:b6:e7:b9:87:a4:55:38:49:34:32:9c:
                    fb:21:95:c4:27:55:39:d2:17:fc:40:81:4a:26:ba:
                    80:49:35:03:b1:95:05:c7:da:7c:d6:39:7c:14:c0:
                    29:7a:b7:1f:38:6e:2b:97:a8:19:17:3e:6e:af:69:
                    67:38:56:a0:b8:76:bf:7b:a8:50:42:6b:3e:7c:ed:
                    04:22:be:0d:3e:d0:79:e8:04:e8:bf:a7:98:b9:e6:
                    7c:49:35:3f:d3:90:9e:3e:c0:69:bd:a1:6f:66:b4:
                    45:bf:4d:82:5e:f1:81:0f:63:f9:dd:29:41:f2:fc:
                    ef:7c:6b:53:22:ab:21:cc:61:b2:b9:4f:d0:28:d3:
                    43:f4:01:2c:32:c5:2d:24:06:c1:82:4a:08:31:e4:
                    ce:c3:ec:69:5f:fc:3c:9e:42:6e:89:d1:18:d9:2f:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:CD:DA:A1:BC:99:B0:E1:7E:EF:91:93:FC:8B:A1:50:13:DD:09
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/vq_N2qG8mbDhfu-Rk_yLoVAT3Qk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:c9:81:e4:38:47:6e:16:f6:45:c8:8f:39:1f:d4:80:c8:
         08:58:a0:66:41:ca:36:75:49:67:8d:ac:a7:e2:30:92:df:eb:
         21:66:2d:0c:56:39:81:82:05:44:98:77:7c:9d:63:46:fe:86:
         f1:7c:26:c4:0f:2b:4d:3d:08:8e:19:93:4d:34:a4:a4:17:55:
         52:4e:88:70:61:12:62:74:53:ca:0a:6c:b7:40:7e:11:ac:1d:
         6e:b9:e7:fd:8e:a7:8b:8c:97:41:a9:af:77:77:c1:b1:2c:d2:
         d1:17:13:db:ac:1b:d5:7c:4d:c2:40:47:1e:28:aa:dd:93:94:
         87:0e:95:ac:50:e2:9b:a2:ca:73:a0:2c:07:8f:2e:55:38:e9:
         bc:5d:95:ec:e3:5b:19:ed:d6:f8:07:42:22:d6:61:69:2b:83:
         1d:50:a7:ac:c1:db:42:d3:5f:23:91:35:46:a3:53:2a:a9:1b:
         40:2d:91:3d:ae:71:85:10:ca:ed:0a:1b:63:fa:52:59:82:0f:
         ff:f8:e4:98:e3:ec:5b:25:6a:3d:8f:dd:11:a2:fb:5b:17:0d:
         39:52:b7:16:62:87:48:6a:c7:78:82:b7:22:3e:ea:81:65:f5:
         6b:19:b3:d9:e2:e0:39:e9:c8:e4:c9:8a:b6:55:2c:7e:65:6c:
         4b:f5:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:15 2026 by rpki-client