Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/bJhwh6VZmo2wFJf85peVPopF2mg.asa
File:                     bJhwh6VZmo2wFJf85peVPopF2mg.asa (raw, json)
Hash identifier:          x3IolaMvyG6/SJsaHDsGvyni3uC/EuPLRLLaxebbaL0=
Subject key identifier:   6C:98:70:87:A5:59:9A:8D:B0:14:97:FC:E6:97:95:3E:8A:45:DA:68
Certificate issuer:       /CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
Certificate serial:       019F9ECA6D73DC1EA6C03914F1AB025080BE
Authority key identifier: FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/bJhwh6VZmo2wFJf85peVPopF2mg.asa
Signing time:             Sun 26 Jul 2026 14:18:14 +0000
ASPA not before:          Sun 26 Jul 2026 14:18:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201640
Providers:                AS: 214762
                          AS: 401896
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:ca:6d:73:dc:1e:a6:c0:39:14:f1:ab:02:50:80:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
        Validity
            Not Before: Jul 26 14:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c987087a5599a8db01497fce697953e8a45da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:7c:60:c7:d8:82:45:b5:b8:f6:7c:08:fd:
                    18:a5:20:ff:cc:91:93:1c:32:8d:cf:81:fb:0d:05:
                    95:c7:9d:e8:2f:c4:7c:27:60:81:7f:6a:81:b5:59:
                    79:88:e5:c9:fd:91:8a:eb:57:99:b7:f1:a3:2f:05:
                    89:67:78:b3:47:37:a4:a5:2b:0c:53:ed:94:cd:dc:
                    99:c5:12:b7:04:d5:f2:e4:a3:c0:61:33:3c:73:31:
                    59:32:0e:ed:da:26:c3:eb:14:e2:49:09:9c:af:3f:
                    13:02:11:df:d4:63:e1:79:a1:c5:fe:6e:81:f6:74:
                    2a:84:e1:1e:9d:4f:d9:4e:01:13:9f:f5:13:6b:6a:
                    ce:df:e2:f7:1a:29:3d:50:12:37:ca:50:15:ef:fc:
                    bd:67:24:16:63:9a:ff:ab:5c:9d:c3:cb:9e:2e:10:
                    6d:b3:96:42:34:34:47:4e:79:4c:4f:47:07:41:6e:
                    b4:9f:82:43:b0:cb:31:dd:2a:9d:20:80:38:3a:ed:
                    f5:03:07:78:be:ee:18:99:fd:86:20:9f:04:94:be:
                    f9:25:57:33:de:bb:67:93:e7:88:e6:7e:34:05:e8:
                    31:65:00:33:42:d2:b4:17:b1:1e:4e:05:96:23:4c:
                    0c:92:ef:3d:69:b1:17:70:68:aa:7f:29:c9:23:3d:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:70:87:A5:59:9A:8D:B0:14:97:FC:E6:97:95:3E:8A:45:DA:68
            X509v3 Authority Key Identifier:
                keyid:FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/bJhwh6VZmo2wFJf85peVPopF2mg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201640

    Signature Algorithm: sha256WithRSAEncryption
         60:09:da:c6:fa:93:b0:14:eb:e3:fa:ab:90:f3:fa:d7:8a:3b:
         d0:c8:ed:cc:2b:77:02:9e:7a:c6:9b:6f:bb:06:db:2d:d1:66:
         94:29:61:99:51:df:34:f0:df:79:d1:21:28:ff:9e:00:04:49:
         87:39:ab:16:78:cc:86:db:27:8b:ab:15:8c:2b:e1:59:b6:eb:
         60:5e:ee:77:7b:c3:f5:a1:ab:9b:db:ba:70:22:07:5c:0c:18:
         c5:13:36:9a:cf:29:fe:f8:ae:73:d6:0f:fe:69:2a:14:e5:5f:
         c1:eb:2e:5c:9e:02:be:08:21:c9:be:7c:7e:df:67:ae:bf:1e:
         9d:84:87:c9:60:43:74:7a:d1:6a:85:07:61:df:e8:95:e6:a4:
         83:20:76:9a:0c:7a:e6:3f:fc:f7:e7:3d:dd:0c:95:ae:d0:9d:
         f4:6c:87:c4:ad:72:df:06:12:13:32:45:23:2f:85:d5:b5:ff:
         47:a1:64:21:dc:d2:b6:af:a0:27:b3:bd:40:2b:84:b9:8a:91:
         d0:9a:49:83:59:12:0d:db:df:15:53:43:5c:bb:18:f0:5f:0c:
         fa:de:d2:eb:20:c2:b5:ad:2a:3d:12:b8:5f:76:1e:e0:0c:dc:
         1a:7d:0e:22:5d:4a:69:c9:d6:f3:0b:13:0b:ef:45:3d:d1:13:
         da:3d:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:30:39 2026 by rpki-client