Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/j_t_jFAta10RI31T6FonCloC3D4.asa
File:                     j_t_jFAta10RI31T6FonCloC3D4.asa (raw, json)
Hash identifier:          Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=
Subject key identifier:   8F:FB:7F:8C:50:2D:6B:5D:11:23:7D:53:E8:5A:27:0A:5A:02:DC:3E
Certificate issuer:       /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial:       019C7D094B42AEA1B606A986E52987931AD1
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/j_t_jFAta10RI31T6FonCloC3D4.asa
Signing time:             Fri 20 Feb 2026 21:51:26 +0000
ASPA not before:          Fri 20 Feb 2026 21:51:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207252
Providers:                AS: 3214
                          AS: 24961
                          AS: 44486
                          AS: 50629
                          AS: 57575
                          AS: 203446
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7d:09:4b:42:ae:a1:b6:06:a9:86:e5:29:87:93:1a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
        Validity
            Not Before: Feb 20 21:51:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ffb7f8c502d6b5d11237d53e85a270a5a02dc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:b9:2e:41:5e:c5:58:15:d3:15:f8:84:c3:
                    a5:9f:6c:c8:83:62:f4:26:28:2e:9d:bc:fa:e5:d4:
                    36:e7:33:62:33:a9:10:6b:3c:a6:83:95:ac:e0:5a:
                    2b:86:21:de:03:c3:37:d0:f1:e0:13:29:fe:97:ee:
                    74:0f:5e:0f:ce:d8:6b:10:31:dd:af:da:bc:c8:e7:
                    aa:2b:87:e3:54:43:c6:c2:14:c8:f4:b9:6e:af:4b:
                    15:ad:49:e1:97:89:18:55:c6:a5:8b:bb:06:f6:42:
                    ca:33:78:9b:52:4a:1b:8d:50:a7:8a:bc:2e:e7:e3:
                    e9:0f:c2:e0:76:c8:9c:66:16:c2:02:51:0d:47:f4:
                    5b:c0:47:2e:e4:96:b2:99:8d:ee:72:14:8d:d4:51:
                    f8:eb:fb:b5:99:9b:54:09:0b:cb:e4:fc:cb:f5:11:
                    e4:02:46:07:09:5d:52:92:e4:16:d8:55:fa:ef:ca:
                    b0:2d:78:cd:cd:61:87:36:ef:33:a6:db:18:4d:31:
                    76:ae:dc:49:a6:ef:51:ac:30:bd:a7:10:8c:7c:4c:
                    ff:f1:a9:a0:42:9f:f6:8b:3e:10:a6:71:58:c1:c0:
                    27:3b:54:c0:f0:d8:80:36:83:b1:b3:92:2a:4e:3f:
                    3e:70:bf:ac:44:5f:f0:48:45:11:4d:8f:51:79:cd:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FB:7F:8C:50:2D:6B:5D:11:23:7D:53:E8:5A:27:0A:5A:02:DC:3E
            X509v3 Authority Key Identifier:
                keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/j_t_jFAta10RI31T6FonCloC3D4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207252

    Signature Algorithm: sha256WithRSAEncryption
         45:07:88:ac:bd:4a:e5:b4:0e:95:98:ea:fc:e0:78:5f:65:03:
         b7:b6:a6:3e:29:98:38:7c:e4:7b:23:a3:f4:6e:f3:e5:c7:f7:
         74:8b:85:46:e5:56:2a:00:f4:3e:82:7e:ff:29:21:49:63:31:
         03:f8:a5:f4:8a:cc:ce:3b:f5:5e:ce:7c:81:75:c5:d4:2b:9a:
         7d:34:a4:55:71:db:c8:4f:bb:a7:b5:51:e3:97:bd:93:a3:e1:
         8b:21:72:9f:ea:17:e0:c9:a5:dd:26:73:f4:d8:f6:35:21:ff:
         6f:d9:79:9e:ac:36:79:c6:c3:96:3f:59:c0:18:bd:90:8c:56:
         cd:d7:30:1b:11:39:7f:fa:79:16:f5:40:54:46:e2:f8:c5:d3:
         46:90:c7:2e:2e:4d:a3:0d:74:fd:11:ef:f7:f5:7f:18:38:d1:
         f2:80:21:03:df:49:38:bd:ad:9c:cf:70:5c:1b:ed:e9:c1:57:
         7e:66:7d:04:fc:b0:42:1f:e4:7d:a0:20:1d:5d:ea:3e:30:67:
         47:81:4a:a5:c8:a7:5c:bb:53:b7:f0:45:79:97:d4:4d:a3:9c:
         4a:f6:c8:4a:82:9e:24:f6:71:95:14:e7:42:0d:b5:08:f8:aa:
         c1:dd:af:3d:b9:10:44:d3:48:26:e8:34:a6:30:f3:a8:3f:33:
         cb:a7:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:44 2026 by rpki-client