Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ogf4LgzJ7S8eq2MvX-cwfI-TbGk.asa
File:                     ogf4LgzJ7S8eq2MvX-cwfI-TbGk.asa (raw, json)
Hash identifier:          hBogqH7ehXoWO7PFlFUUc+GrTJY5N3NdPNiiN/ULU6w=
Subject key identifier:   A2:07:F8:2E:0C:C9:ED:2F:1E:AB:63:2F:5F:E7:30:7C:8F:93:6C:69
Certificate issuer:       /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial:       01A019E14605B949E91B110F45DDB40FCCDB
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ogf4LgzJ7S8eq2MvX-cwfI-TbGk.asa
Signing time:             Wed 19 Aug 2026 11:56:28 +0000
ASPA not before:          Wed 19 Aug 2026 11:56:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215024
Providers:                AS: 8966
                          AS: 208398
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:e1:46:05:b9:49:e9:1b:11:0f:45:dd:b4:0f:cc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
        Validity
            Not Before: Aug 19 11:56:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a207f82e0cc9ed2f1eab632f5fe7307c8f936c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:0d:84:1b:6d:de:cb:5c:4c:f2:6e:52:08:
                    b3:da:70:17:83:91:95:7e:72:49:54:ba:57:86:24:
                    c1:2b:57:77:d2:60:5e:3b:f0:c1:1a:3e:2c:af:57:
                    83:65:be:77:3b:b9:e2:8c:34:bc:90:72:0a:25:a3:
                    5f:be:27:85:34:4d:8c:41:82:40:0e:dc:d1:c6:d9:
                    a9:2e:23:96:50:33:df:c6:6f:f1:8c:35:30:8c:c6:
                    69:5d:53:bf:06:45:7e:4a:e7:99:a1:f9:14:59:18:
                    5e:53:9f:51:04:e5:ac:52:bf:6f:a1:77:35:08:02:
                    60:f7:28:bb:89:47:af:cc:33:c5:23:0c:66:d1:45:
                    41:f9:41:85:17:7c:b4:73:12:66:3b:a8:04:57:aa:
                    03:21:05:46:46:96:97:f1:08:bf:19:64:1c:7c:64:
                    8d:f3:f0:a3:f2:66:9d:9b:8f:fd:7d:9b:e8:7b:5c:
                    e8:6d:1f:e4:eb:70:58:55:20:e6:79:3b:2f:8f:ce:
                    ae:8d:b7:08:fd:b9:62:00:b2:ef:c6:d1:1a:18:e7:
                    0a:b4:64:9a:00:a0:44:ec:cd:a1:af:3f:e0:39:19:
                    2b:b5:5b:c1:69:10:16:bd:b0:5d:eb:f9:12:c2:bc:
                    af:53:d2:b2:39:26:15:e3:e1:11:ed:e8:ca:da:26:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:F8:2E:0C:C9:ED:2F:1E:AB:63:2F:5F:E7:30:7C:8F:93:6C:69
            X509v3 Authority Key Identifier:
                keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ogf4LgzJ7S8eq2MvX-cwfI-TbGk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215024

    Signature Algorithm: sha256WithRSAEncryption
         69:89:76:78:42:bd:03:60:65:c2:20:0b:c9:68:d7:85:94:77:
         e7:70:d7:db:8c:66:b0:80:59:b4:91:f8:34:14:54:1f:e0:8b:
         d0:af:14:28:b4:1c:79:de:e0:28:be:4e:ad:41:a8:d9:5f:22:
         14:96:37:cd:de:b5:02:c8:f5:82:4f:54:79:e5:a9:e0:9e:5e:
         86:0d:60:5e:33:b0:a3:b3:75:79:f8:d6:cc:42:a4:66:b4:b9:
         93:05:fb:bf:17:9f:d9:bb:db:16:5c:d9:d1:08:4e:ec:b9:97:
         1a:d9:bf:28:1c:30:e6:c1:7b:1a:ca:e0:ac:cf:ef:bf:04:3b:
         96:a8:b8:3a:1f:9f:f2:21:ff:98:d8:9b:df:85:1d:4f:c4:cc:
         97:c6:f7:84:30:4b:17:be:c5:c1:37:1e:ee:e7:e0:d9:63:de:
         cc:15:70:4e:dd:02:fd:ed:bc:e6:1a:07:45:ef:2f:47:8d:d5:
         59:4f:26:a1:6c:c8:2a:84:14:cf:cb:bb:1d:25:2f:49:4f:a8:
         a2:8f:a4:c1:da:12:20:cd:9e:42:c1:3d:80:59:4e:8c:95:54:
         46:12:50:dd:74:07:71:fc:2c:f2:ed:d2:63:b7:2b:ec:f1:52:
         bb:25:a2:04:72:34:b8:7d:76:27:58:33:ec:61:b7:c3:ec:9e:
         f7:10:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:28:20 2026 by rpki-client