Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa
File:                     fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (raw, json)
Hash identifier:          IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=
Subject key identifier:   7D:3B:BE:D7:1E:55:E5:88:47:35:BF:A4:98:DE:CF:2C:6B:8B:43:70
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019C9FB469D534FDA7F8C56A9411D15F7D3A
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa
Signing time:             Fri 27 Feb 2026 15:25:26 +0000
ASPA not before:          Fri 27 Feb 2026 15:25:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201353
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9f:b4:69:d5:34:fd:a7:f8:c5:6a:94:11:d1:5f:7d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Feb 27 15:25:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d3bbed71e55e5884735bfa498decf2c6b8b4370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:28:6f:f7:13:21:0d:85:7d:6c:48:fd:43:
                    20:09:0a:42:77:fd:4e:aa:f9:fe:4b:10:cf:fc:5f:
                    a4:98:a6:4c:29:7a:9e:20:fb:d8:4d:26:3e:d9:cb:
                    07:1c:e4:16:0a:48:96:f8:a5:2d:bf:25:b2:55:41:
                    a5:6c:6b:54:37:b0:98:2c:4d:68:8e:ec:02:85:8c:
                    36:1a:47:05:8e:91:15:6f:23:36:89:6d:dd:09:01:
                    d8:ff:bc:1f:4f:87:1b:38:26:64:e9:2d:d7:c6:5d:
                    b7:c7:f9:2f:1b:ed:8a:47:dc:65:60:b2:ff:c2:5d:
                    c1:16:69:cb:d7:69:11:38:3c:a3:4c:a2:94:28:54:
                    35:14:45:e1:ba:09:96:e1:50:87:ba:4d:45:ad:0a:
                    0b:ae:5f:8b:ce:1c:87:31:0c:b5:0f:43:1f:31:35:
                    dd:8a:eb:2c:e0:ef:2e:f8:68:8e:7d:5d:48:3f:24:
                    fe:4d:05:7e:02:05:a0:e4:48:75:0f:6a:63:d0:6d:
                    4f:43:98:dc:53:59:33:7b:38:ce:4f:ca:78:0f:47:
                    59:b2:9e:b7:8f:79:f5:88:55:ba:d0:fc:2e:99:a1:
                    dc:c1:80:ff:5c:bc:14:a0:8e:f9:7d:eb:49:e6:c9:
                    23:6c:04:f8:07:dc:cf:d4:81:6e:12:c2:1c:f3:85:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:BE:D7:1E:55:E5:88:47:35:BF:A4:98:DE:CF:2C:6B:8B:43:70
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201353

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:d7:e4:dd:bb:a8:41:7a:b2:d4:08:79:1d:38:11:c8:c8:
         a9:7e:35:e3:d9:dd:54:de:28:08:0f:e9:b9:63:3d:1a:f9:9a:
         95:9c:99:68:c1:8e:1d:92:f0:a7:a0:6e:de:64:90:8e:3b:e3:
         c4:40:51:e6:3e:a7:37:d2:4b:e3:a3:f5:37:0c:21:f9:11:90:
         2d:20:43:74:e9:98:30:56:5e:eb:90:0c:57:0e:f3:76:39:c8:
         b5:38:8d:5c:1b:3f:ba:69:e4:dc:50:8a:66:a3:ea:cb:5f:81:
         b4:51:2e:88:5c:56:b3:46:eb:1c:28:87:e6:71:8a:7b:55:e4:
         21:e1:71:b0:36:2c:7b:b5:46:88:f8:83:69:2a:84:06:44:de:
         13:af:9b:77:77:e3:be:10:86:f9:50:79:c6:82:7e:67:39:54:
         08:fa:9d:2c:26:2c:f4:8a:e5:ee:82:c5:be:f5:38:8c:5c:c9:
         c0:7e:b1:8b:f1:83:7c:73:b3:b4:8b:52:15:25:b1:be:6e:a4:
         11:6f:2a:ec:b3:ee:bc:a6:60:9a:a8:26:b5:f9:c3:fd:c9:dd:
         ca:61:41:be:e9:0e:0d:d9:51:34:2b:3e:12:93:6a:62:85:04:
         d8:67:59:54:ff:07:b5:c0:3a:05:ee:86:9f:70:46:b1:32:13:
         24:a9:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:59 2026 by rpki-client