Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa
File:                     ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (raw, json)
Hash identifier:          aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=
Subject key identifier:   8A:3F:2C:2F:BA:D8:5D:49:D5:32:53:2B:46:C3:3F:E1:B1:BB:66:BD
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       019C7A305347BE2D44851861130515CF04F2
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa
Signing time:             Fri 20 Feb 2026 08:35:13 +0000
ASPA not before:          Fri 20 Feb 2026 08:35:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216275
Providers:                AS: 31027
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7a:30:53:47:be:2d:44:85:18:61:13:05:15:cf:04:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Feb 20 08:35:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a3f2c2fbad85d49d532532b46c33fe1b1bb66bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:45:27:45:a9:73:7c:1c:61:42:e9:45:b5:
                    6b:f4:c2:a4:93:f0:d7:67:43:f8:e5:2f:6f:07:f7:
                    54:b2:8e:6e:fc:f1:cc:e2:f1:61:ae:a0:9e:ac:58:
                    be:ee:15:b8:87:33:b8:15:92:94:05:b7:02:5a:65:
                    a3:2c:8d:ec:17:3e:ea:a7:af:9e:c0:e2:7f:20:6b:
                    33:84:2b:87:65:e4:1d:be:28:a0:12:ca:bf:c3:0e:
                    4a:22:f9:19:cd:1a:22:0d:9d:d6:38:aa:65:97:00:
                    b2:c8:df:44:d3:41:2c:8f:b1:08:a7:97:07:af:08:
                    bf:60:56:32:81:53:db:a0:6a:bd:2e:ec:b9:5d:19:
                    5f:26:03:21:30:99:d7:63:76:cd:01:59:f5:91:2d:
                    02:b8:e8:16:84:12:84:1e:af:fb:6e:8c:5b:5f:0f:
                    5e:4f:3f:37:2d:b6:53:4d:70:bf:8e:bc:e2:d5:3b:
                    6a:96:d4:18:b3:5a:3e:97:07:a2:d5:14:44:0e:dd:
                    3b:c3:6b:80:b2:95:41:27:25:4d:92:ff:f1:4c:53:
                    3c:1f:25:f2:e8:ab:d2:be:cc:ed:28:92:7a:1e:8b:
                    8e:87:fd:7c:60:d4:ec:a2:6e:5a:8c:40:b4:9d:8f:
                    4a:a7:3c:20:73:82:3c:b3:f6:db:12:5d:f8:b6:e9:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:2C:2F:BA:D8:5D:49:D5:32:53:2B:46:C3:3F:E1:B1:BB:66:BD
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216275

    Signature Algorithm: sha256WithRSAEncryption
         19:9a:46:21:36:b8:48:1b:9b:15:56:75:56:ab:9c:f1:15:22:
         ef:27:3c:e1:00:1e:3b:81:d2:88:5c:e6:cd:e0:a0:8c:fc:23:
         ae:be:14:43:08:ad:36:bb:6f:7a:11:94:dc:1d:5d:cb:e8:a5:
         6f:c4:38:0b:fd:e8:ed:69:1b:36:d5:89:1f:51:7c:d8:61:9f:
         8a:61:09:37:78:09:93:e5:3c:26:2d:be:14:ee:36:41:5f:d3:
         87:8c:e5:28:da:7e:2b:a6:c7:04:be:6e:b4:da:17:90:17:be:
         85:b8:7c:6d:3a:a0:c4:80:f0:2a:b2:ca:00:46:16:52:f9:f1:
         4b:f5:15:ed:fa:37:fe:69:b5:fe:df:68:8c:e6:b4:20:34:47:
         2f:9e:b4:c7:92:37:b0:a6:c3:ca:1b:65:06:24:4b:80:f9:1e:
         b7:92:c5:ef:b4:7d:20:96:12:3e:cd:6a:31:4e:02:74:3d:fb:
         f1:db:a8:ca:26:33:8a:3a:9d:25:b8:e0:58:39:ed:14:15:92:
         34:75:dc:e8:6d:b7:18:e0:e5:d6:2d:40:40:53:60:08:54:3c:
         be:1a:a1:ac:d0:32:61:6d:18:fe:a7:3f:e7:2a:fd:99:5d:bc:
         69:36:40:32:71:74:ea:7f:03:ef:11:b5:08:93:d0:ad:0c:93:
         6e:42:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:42 2026 by rpki-client