Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa
File:                     yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (raw, json)
Hash identifier:          q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=
Subject key identifier:   C9:E5:45:F0:37:F7:54:F7:27:8D:20:4D:9A:AC:E8:54:37:F1:FC:10
Certificate issuer:       /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial:       019C34DF9136D929A29673DCDB4E815A8440
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa
Signing time:             Fri 06 Feb 2026 21:33:12 +0000
ASPA not before:          Fri 06 Feb 2026 21:33:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61120
Providers:                AS: 1299
                          AS: 6663
                          AS: 6830
                          AS: 8708
                          AS: 24745
                          AS: 49468
                          AS: 57050
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:34:df:91:36:d9:29:a2:96:73:dc:db:4e:81:5a:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
        Validity
            Not Before: Feb  6 21:33:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9e545f037f754f7278d204d9aace85437f1fc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:e2:91:a3:2c:8a:86:7f:46:87:b9:d0:2f:
                    3f:4e:ac:ca:1e:22:d7:46:1e:1f:07:85:aa:07:04:
                    2c:f8:4e:cf:9d:eb:0c:20:b8:98:cd:f0:ce:4d:5b:
                    60:d3:48:66:12:56:a7:0d:b7:ee:de:91:34:6a:c4:
                    67:69:2d:4c:8b:aa:2b:85:d6:38:bc:32:56:a9:dc:
                    90:71:b5:fe:06:05:49:6b:c7:1e:42:72:1e:c4:d7:
                    aa:ba:58:f7:ef:2e:6d:2f:44:47:1b:0e:66:5a:c6:
                    ec:9c:91:ae:32:ee:cf:9d:34:00:14:7f:0a:52:46:
                    88:fb:95:35:b3:eb:9b:77:f8:81:4e:1f:78:9e:d3:
                    c6:db:b3:22:9a:d1:a2:61:27:4e:2c:48:67:16:50:
                    f4:3d:01:c7:43:b1:0c:3d:43:92:a5:c3:8c:a5:0e:
                    a0:34:b1:55:40:ed:67:a4:9e:19:81:94:f8:61:0e:
                    bb:96:1d:76:a8:47:03:5c:75:bd:44:28:03:76:a6:
                    fc:e1:24:51:08:ac:d5:2a:66:b4:89:65:20:5e:28:
                    0a:14:33:5c:4f:c6:29:ee:b1:02:34:9d:c7:f4:e4:
                    b3:13:c9:bb:cc:71:80:c4:c5:5b:fa:d1:c3:7e:0f:
                    2f:64:7f:14:5e:43:77:ab:cd:89:a7:28:fe:61:07:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:45:F0:37:F7:54:F7:27:8D:20:4D:9A:AC:E8:54:37:F1:FC:10
            X509v3 Authority Key Identifier:
                keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61120

    Signature Algorithm: sha256WithRSAEncryption
         86:08:e0:5b:9c:6f:1e:f5:c2:db:33:e3:81:fd:7e:32:42:a5:
         b1:6d:c6:be:ae:b0:f2:eb:16:d7:77:4a:b0:34:8e:94:cc:e6:
         f1:a8:73:bd:44:67:0f:3d:f0:45:36:5c:1e:09:65:1e:45:4f:
         fe:8f:2e:62:ff:85:9d:89:5b:26:ca:9b:31:af:7a:76:ec:f4:
         a9:06:b0:c4:c7:8f:64:cc:db:c9:58:1d:0c:16:b3:d8:43:bc:
         17:62:d6:6c:67:29:7b:ca:79:30:39:58:56:16:aa:ea:ce:2c:
         58:48:59:81:b4:0c:73:fa:ff:e4:a7:8f:30:10:ad:7b:7b:09:
         e1:fb:eb:4e:b3:64:a0:fe:da:be:3d:10:9f:f2:b5:3f:47:c6:
         d2:84:b4:6a:2e:f6:a7:93:71:02:b5:ca:e0:ac:3f:91:05:47:
         36:dc:9d:c7:9e:de:ec:7e:24:d0:30:8d:c6:4b:35:e5:d0:34:
         2a:aa:e9:b2:0c:e8:4d:a1:be:a6:15:96:a9:50:1a:d4:4a:60:
         34:42:d1:61:77:d3:8e:33:8c:ff:dc:fd:0d:2d:c0:77:fa:7d:
         2a:be:64:16:85:bf:19:85:8a:d8:75:e9:29:42:3b:b7:be:7c:
         67:43:ab:8c:00:d7:ad:34:41:80:ac:95:e5:1a:a0:3f:f4:51:
         63:3e:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:48 2026 by rpki-client