Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa
File:                     IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (raw, json)
Hash identifier:          Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=
Subject key identifier:   22:F0:3D:07:69:C5:B1:40:7C:37:6B:52:C4:8D:59:D6:8C:26:E5:26
Certificate issuer:       /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial:       019C8A90BD271168758BAA48C8743D5597E4
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa
Signing time:             Mon 23 Feb 2026 12:54:27 +0000
ASPA not before:          Mon 23 Feb 2026 12:54:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198101
Providers:                AS: 5610
                          AS: 6855
                          AS: 29208
                          AS: 39392
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8a:90:bd:27:11:68:75:8b:aa:48:c8:74:3d:55:97:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
        Validity
            Not Before: Feb 23 12:54:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22f03d0769c5b1407c376b52c48d59d68c26e526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:de:43:6a:94:be:85:c1:c3:9b:6f:f1:cb:
                    7c:43:81:3c:b2:d1:29:0f:41:72:cc:4b:2c:ed:9b:
                    9e:a2:48:75:b1:bd:5f:ba:93:4d:c2:0e:d7:c3:62:
                    69:54:19:c5:cd:31:fa:35:8d:1b:06:43:54:0c:d1:
                    c1:4d:5f:13:f8:63:96:75:1a:9a:4d:3f:6b:6e:bf:
                    c1:46:1b:af:77:95:2f:97:3b:32:6a:c7:0e:92:f4:
                    06:48:bc:cb:45:e7:54:32:bb:94:9e:68:f0:06:7c:
                    72:99:10:fc:82:f0:ed:6a:7d:84:76:86:bb:52:37:
                    55:24:be:d7:9b:73:5d:d2:33:27:45:ef:41:81:b4:
                    cd:16:2a:7c:a5:ed:1a:4c:42:e2:82:ae:49:d1:6b:
                    02:22:b9:1e:24:a9:dc:11:98:97:c3:24:5f:a3:a4:
                    d1:f9:e4:52:ba:39:3a:b1:9e:00:d7:89:98:05:aa:
                    4a:23:f8:a6:4f:dc:1c:f9:b2:c2:c5:be:eb:9a:66:
                    c1:fd:57:12:7b:5a:c4:28:08:df:d8:0f:0e:a7:64:
                    c0:36:37:64:e8:a2:13:37:61:a7:96:b3:11:64:27:
                    6b:61:f1:99:9e:d1:4c:25:5a:f7:ce:3e:68:69:1f:
                    f0:19:a6:c4:32:c1:a5:f3:f5:d2:72:8e:41:86:f7:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:3D:07:69:C5:B1:40:7C:37:6B:52:C4:8D:59:D6:8C:26:E5:26
            X509v3 Authority Key Identifier:
                keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198101

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:22:72:b7:75:18:e7:27:05:f5:92:1a:61:8e:9d:66:8e:
         4f:6f:ac:e0:f2:98:28:9a:04:d4:89:b2:5b:d3:3c:44:62:70:
         b5:6c:00:bd:06:9e:07:90:65:bc:a5:8d:b4:6d:e5:20:ad:e3:
         b6:4b:57:02:3e:dd:23:06:84:27:01:12:b1:2a:c5:71:61:ec:
         b2:18:0e:e0:80:d1:b1:4c:db:8b:29:47:a3:90:ae:fe:a9:75:
         8e:51:3f:6a:8b:f3:cb:b7:11:c4:3b:10:30:79:9f:a6:6c:5a:
         b2:8b:07:35:72:fa:e1:57:09:4a:fb:e4:c1:01:df:b7:5a:df:
         1c:ac:91:af:e5:f1:4b:47:63:fd:0f:ce:67:e5:d5:1a:b4:eb:
         bc:a1:b7:63:df:bd:6d:3b:5b:35:c5:bd:19:30:7e:bb:02:52:
         d3:37:05:e6:f5:c2:6e:b4:d0:8d:81:e7:ad:e6:5a:b9:91:ea:
         6d:f6:2d:56:86:dd:34:31:10:fa:79:42:ef:ec:54:86:33:b7:
         f9:2f:e0:7a:84:b5:96:70:6c:db:85:b6:4a:c5:09:41:3f:8c:
         26:e2:cd:46:37:54:91:ec:96:69:1b:bf:e4:0d:d9:89:0b:7f:
         ff:ac:63:df:4c:0a:73:66:8d:65:f1:63:ea:2f:3d:70:21:6e:
         ef:d9:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:32 2026 by rpki-client