Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/gzObw2J4J3BeeVX0bL5o0YuIhUc.asa
File:                     gzObw2J4J3BeeVX0bL5o0YuIhUc.asa (raw, json)
Hash identifier:          D5KeTzlvp8nEOE8QlkcJQrt0bgljUWnLu1dF7FqKvu8=
Subject key identifier:   83:33:9B:C3:62:78:27:70:5E:79:55:F4:6C:BE:68:D1:8B:88:85:47
Certificate issuer:       /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial:       019C4E276E75F473F3D7F39CB6647487418A
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/gzObw2J4J3BeeVX0bL5o0YuIhUc.asa
Signing time:             Wed 11 Feb 2026 19:22:12 +0000
ASPA not before:          Wed 11 Feb 2026 19:22:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208262
Providers:                AS: 31078
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4e:27:6e:75:f4:73:f3:d7:f3:9c:b6:64:74:87:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
        Validity
            Not Before: Feb 11 19:22:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83339bc3627827705e7955f46cbe68d18b888547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:66:91:82:0f:08:38:2e:65:3f:9a:6c:05:
                    5d:2b:75:1b:88:5b:db:ce:52:27:d6:4b:37:f7:ea:
                    c2:50:48:d8:86:d8:86:ce:d1:d3:4d:dd:5f:49:38:
                    b1:94:56:93:4b:ab:f5:5d:9c:55:0e:26:7a:c8:e4:
                    2b:fd:c5:d4:47:04:ef:68:c8:c5:02:e6:53:1b:d5:
                    04:f6:ea:f9:0b:16:76:71:5a:38:1c:c4:7a:35:de:
                    56:63:91:76:8e:ee:af:81:92:a9:c3:35:9d:b8:f1:
                    97:c3:8f:c0:e8:12:2e:58:02:8c:73:28:38:1d:21:
                    c0:bb:e4:32:c5:2f:e6:d6:47:b2:2c:9c:4a:cf:02:
                    00:87:5c:9d:9d:c3:f8:23:20:7e:ff:fa:1f:ce:82:
                    7c:39:eb:7e:c5:fa:18:e6:33:46:c9:b7:0f:53:39:
                    4b:1f:84:7a:79:69:d5:34:fa:a2:ba:42:e8:df:11:
                    15:3a:f1:38:3b:b1:c0:0f:e6:47:ed:7d:13:81:59:
                    be:0d:2a:d3:9e:6c:fe:59:39:30:b1:7c:4a:36:99:
                    f8:f8:2d:a0:0e:4d:96:be:55:9f:d7:0e:3e:62:4b:
                    f3:9b:55:05:d4:cf:ac:dd:a3:58:35:22:c4:05:64:
                    94:a0:de:02:d8:59:2e:62:91:8b:4d:a8:1f:2c:48:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:33:9B:C3:62:78:27:70:5E:79:55:F4:6C:BE:68:D1:8B:88:85:47
            X509v3 Authority Key Identifier:
                keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/gzObw2J4J3BeeVX0bL5o0YuIhUc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208262

    Signature Algorithm: sha256WithRSAEncryption
         29:85:5c:95:bd:4f:0b:1f:41:f6:c0:89:36:94:03:1f:95:74:
         20:59:2f:c3:b6:36:b3:a2:eb:68:c8:c0:c7:e2:4a:d0:b1:dd:
         02:d1:92:42:29:c3:f4:e7:ae:1d:08:70:b8:96:9e:a5:d4:89:
         5d:4e:b4:bb:ff:1c:40:d6:83:89:94:7e:37:43:b5:69:bc:a9:
         d8:32:4e:8f:a5:0e:9e:54:1c:73:22:7a:83:b7:12:2e:b0:5c:
         39:1c:a8:b6:92:69:a2:ab:b3:7b:37:7f:71:3f:cd:b2:84:d6:
         5a:b8:6a:56:2f:30:77:ca:9a:b4:f7:92:0d:a8:34:fd:d6:ca:
         fa:41:96:2e:4e:0e:d6:d8:09:ac:6c:54:a4:5b:63:91:16:67:
         e8:82:7a:54:19:17:86:78:9a:30:1f:59:b5:4e:17:69:b5:44:
         f8:f5:5e:0a:6c:97:d3:25:46:24:b0:d1:71:b6:1e:1f:c1:de:
         ae:3a:0b:dc:ab:ae:0e:da:ed:e0:ea:3f:60:6c:d5:de:59:6a:
         23:5f:9e:e6:7c:13:67:fe:d5:a2:1d:1a:c8:15:53:1b:3d:69:
         0e:5e:ea:8e:a4:66:48:31:40:fc:19:3a:83:ef:f0:41:70:b2:
         b2:cc:88:c2:90:84:e9:1c:c5:2e:9b:ad:6c:03:33:17:54:17:
         d4:a3:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:00 2026 by rpki-client