Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/VQsDH7SGd5hal_nlNR8i5lyIdTU.asa
File:                     VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (raw, json)
Hash identifier:          CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=
Subject key identifier:   55:0B:03:1F:B4:86:77:98:5A:97:F9:E5:35:1F:22:E6:5C:88:75:35
Certificate issuer:       /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial:       019C4D28004889EF089847DD411F4386E3D0
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/VQsDH7SGd5hal_nlNR8i5lyIdTU.asa
Signing time:             Wed 11 Feb 2026 14:43:13 +0000
ASPA not before:          Wed 11 Feb 2026 14:43:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51369
Providers:                AS: 28917
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4d:28:00:48:89:ef:08:98:47:dd:41:1f:43:86:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
        Validity
            Not Before: Feb 11 14:43:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=550b031fb48677985a97f9e5351f22e65c887535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:94:8f:3c:0a:cb:a6:b3:fc:48:92:8f:ee:
                    24:a7:cd:8b:0f:45:1b:6d:ae:7f:16:5e:02:68:63:
                    30:93:8c:de:7e:b2:80:99:75:c9:31:95:c1:10:c4:
                    09:1c:fa:ba:82:21:ae:32:68:07:aa:c7:7c:2e:e3:
                    2b:c3:8f:8e:ca:31:90:fc:a9:bc:db:36:bd:03:50:
                    e1:1b:9a:d4:02:9a:8e:7d:fd:97:32:40:37:93:49:
                    6a:33:de:02:a9:c7:e8:60:e3:11:06:39:67:2a:51:
                    6f:d5:e8:b0:5c:8a:b7:18:c2:6e:ea:af:e8:66:db:
                    02:51:92:f0:f7:5c:b5:29:dd:f3:a7:af:be:c6:35:
                    f4:6a:9e:45:17:52:74:c8:28:aa:e7:bb:af:aa:6d:
                    dd:0e:a2:3e:65:34:c0:e0:ea:f3:87:3a:fe:c0:42:
                    76:9f:26:52:23:56:ed:00:a8:b9:ed:10:57:af:61:
                    1d:fb:61:0b:dc:70:48:66:28:9f:1e:b9:19:a1:75:
                    13:9d:b8:c6:e6:4f:10:82:10:9e:7d:ca:53:12:ef:
                    31:4f:35:a2:e1:cd:85:24:32:b9:53:27:70:10:ce:
                    f1:20:c7:32:bb:e2:e0:83:0c:38:72:09:4b:c8:8c:
                    78:b2:d5:22:56:56:4a:6e:17:7d:e3:d1:60:45:1b:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:03:1F:B4:86:77:98:5A:97:F9:E5:35:1F:22:E6:5C:88:75:35
            X509v3 Authority Key Identifier:
                keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/VQsDH7SGd5hal_nlNR8i5lyIdTU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51369

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:44:85:6f:b8:20:2e:f4:12:d4:6e:d6:55:90:79:12:8f:
         8e:9d:16:5b:6a:fb:a4:55:99:fd:d2:5c:84:e5:0b:7b:98:14:
         37:18:15:32:1f:e6:2b:45:d1:37:d2:bd:be:be:44:65:69:f1:
         54:74:e6:9f:02:d1:76:a9:31:87:72:28:e6:14:22:30:6d:dc:
         6c:ff:68:2e:58:a7:09:11:17:43:8f:54:4b:4e:97:c9:dd:ee:
         da:ce:68:96:28:18:51:84:8b:6b:b4:0c:e0:62:30:5c:7d:c0:
         5f:34:1e:38:c3:00:c6:e8:1e:89:e3:c8:2a:4c:9f:39:fd:9f:
         82:34:30:6e:d5:a3:c7:91:79:5c:90:24:6e:2f:05:1a:e4:47:
         a7:13:94:15:70:77:27:50:ea:a7:5a:f4:1c:f8:d5:ac:46:04:
         06:ee:34:fe:e0:80:73:db:4e:c0:ea:80:72:86:1b:d9:78:7e:
         ad:16:f1:a9:29:04:6c:f6:5c:8d:de:2a:86:3d:74:17:29:ec:
         3b:c9:6e:e5:f4:64:15:ed:91:aa:6a:de:88:3a:40:28:5f:36:
         f6:4a:72:e9:c1:99:86:e1:e5:70:82:69:9d:77:bb:f3:6f:b3:
         02:38:18:87:8d:21:c3:ed:36:7d:a9:d6:ef:73:e9:c9:46:2b:
         e0:c4:7f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:54 2026 by rpki-client