Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/AZAVETW5nGbM4Ib7koJRmOOqy04.asa
File:                     AZAVETW5nGbM4Ib7koJRmOOqy04.asa (raw, json)
Hash identifier:          iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=
Subject key identifier:   01:90:15:11:35:B9:9C:66:CC:E0:86:FB:92:82:51:98:E3:AA:CB:4E
Certificate issuer:       /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial:       019C9F91A0A8A33E892FF7F30DB7746D6EA3
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/AZAVETW5nGbM4Ib7koJRmOOqy04.asa
Signing time:             Fri 27 Feb 2026 14:47:26 +0000
ASPA not before:          Fri 27 Feb 2026 14:47:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57777
Providers:                AS: 8298
                          AS: 25091
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9f:91:a0:a8:a3:3e:89:2f:f7:f3:0d:b7:74:6d:6e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
        Validity
            Not Before: Feb 27 14:47:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0190151135b99c66cce086fb92825198e3aacb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:b4:99:9e:a3:4e:17:b1:fd:9f:8f:08:81:
                    ce:c7:52:d3:c5:fe:89:43:84:e2:77:d1:6a:c0:24:
                    79:91:52:62:ca:65:00:58:3c:08:72:b5:94:1c:34:
                    8f:44:a1:42:38:5c:9b:2b:1c:bd:cb:80:53:ae:cc:
                    60:d2:0c:f4:9d:9f:d2:2b:9a:51:3a:c3:8c:21:3d:
                    d0:85:a8:c7:35:09:11:d1:62:ce:52:e0:ee:d5:ed:
                    fc:5d:01:f0:59:d7:73:14:e4:c9:ad:23:90:e8:56:
                    5e:0e:0c:1a:51:69:4d:76:a1:4f:55:c6:c8:ca:af:
                    37:51:14:03:a3:27:19:25:97:f6:90:f5:8f:e5:29:
                    2d:80:91:e0:22:99:48:20:c6:b7:3b:18:26:9d:23:
                    22:25:f3:51:34:18:3d:19:01:16:b7:54:69:5e:1d:
                    cd:5b:2d:9b:85:4b:5b:68:bd:3d:1a:23:8b:59:98:
                    1f:d3:25:73:28:4d:fb:64:4b:07:d6:ab:7a:dd:a0:
                    e8:24:46:2d:36:33:8e:7c:5d:9c:4c:d5:1e:44:31:
                    98:09:b7:d3:6c:69:b7:5f:86:75:c1:af:34:7c:a5:
                    bf:4b:8c:de:3f:5f:4c:a0:17:6e:cc:df:37:65:45:
                    41:ae:40:a7:95:6a:ec:c0:0e:d9:51:82:65:b2:25:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:15:11:35:B9:9C:66:CC:E0:86:FB:92:82:51:98:E3:AA:CB:4E
            X509v3 Authority Key Identifier:
                keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/AZAVETW5nGbM4Ib7koJRmOOqy04.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57777

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:5f:56:8a:cc:dc:79:75:1d:26:08:30:11:e4:a5:8a:7a:
         c9:75:43:28:9c:f6:ea:ea:25:fe:86:77:2a:f3:32:e8:6b:a0:
         58:e3:47:ff:39:f5:5c:6d:d1:d0:cb:a2:6f:08:5f:01:85:b5:
         af:e2:66:0d:21:76:15:48:e4:d9:01:2c:27:2e:8d:78:aa:a4:
         e9:b3:48:5e:ec:ee:49:2f:51:2b:a1:65:8f:5d:98:0f:43:0a:
         01:c2:d9:3d:8c:0e:9f:de:70:b8:96:b5:5d:94:64:a0:8b:4d:
         b8:8d:57:59:81:6c:d4:a8:ed:35:2a:3d:e5:1f:ec:1e:e3:7a:
         71:8f:72:61:99:0c:65:3a:30:9c:4a:5a:11:60:ef:81:50:6a:
         d3:4c:d0:a5:88:4e:20:c6:60:a5:fb:1e:11:c3:0c:e4:d9:0e:
         ab:54:be:cf:16:79:50:1c:09:9e:79:6d:66:cf:95:88:e1:f2:
         76:7b:d2:be:b4:62:fe:d8:30:a6:d7:e7:c9:0a:75:ef:82:03:
         23:4c:48:77:b5:c4:6d:4b:7f:c3:33:0c:b3:5f:35:e8:c2:92:
         11:5c:f9:42:f1:89:10:d1:47:bd:39:d7:58:d1:52:0e:e4:0e:
         3b:44:7b:70:76:c3:10:97:b5:45:e5:9d:ee:39:ca:e1:0c:7a:
         a3:7c:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:55 2026 by rpki-client