Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa
File:                     Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa (raw, json)
Hash identifier:          nXYqjC+Hi2nKeloly1ptUDmdW625318NTGYnF0/9v94=
Subject key identifier:   66:2F:99:08:C7:3B:53:C6:3E:75:AF:76:B5:4E:64:BE:7F:57:77:EF
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       019D45132BCD0AF78F4147F6B3C828582DA5
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa
Signing time:             Tue 31 Mar 2026 18:06:17 +0000
ASPA not before:          Tue 31 Mar 2026 18:06:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61081
Providers:                AS: 16509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:45:13:2b:cd:0a:f7:8f:41:47:f6:b3:c8:28:58:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Mar 31 18:06:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=662f9908c73b53c63e75af76b54e64be7f5777ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:47:b0:c0:df:51:2a:14:7b:c9:6a:95:4c:
                    1a:11:41:bf:4d:55:50:e7:82:2e:fb:26:bf:c9:27:
                    6a:72:ff:b8:18:85:e4:86:13:5c:ea:c0:4f:c1:73:
                    d0:ac:b0:e0:ce:f1:fd:b0:f9:1f:0c:dd:3d:0e:e9:
                    63:0c:fa:a3:28:91:11:c4:12:36:83:eb:79:db:6a:
                    09:0a:06:68:92:ca:90:94:25:54:9f:33:4d:06:70:
                    d9:d1:68:9b:b6:06:e0:42:a7:f6:5d:21:d3:92:14:
                    7d:e1:4c:6e:2d:f6:37:0a:6a:9a:0a:d5:a2:d6:49:
                    19:90:72:0a:96:01:88:e5:f3:17:49:61:6b:59:97:
                    89:45:1a:8f:87:32:e5:fd:8e:c1:75:e9:d5:d8:86:
                    78:7e:8d:10:93:26:88:53:09:6e:a8:e2:ca:fa:5f:
                    cb:2e:c5:2c:1d:13:42:fa:2a:c9:1e:a4:35:82:f1:
                    b3:2d:66:4d:41:d8:6b:c6:97:06:34:fc:14:1f:57:
                    9d:d7:d7:84:04:f9:de:04:ec:42:89:94:31:79:22:
                    96:63:36:27:ef:97:4e:62:6a:3e:06:d1:28:7c:ea:
                    25:5d:52:c5:fd:eb:97:56:95:7b:a0:8b:b7:80:61:
                    24:ba:13:98:cf:da:e9:58:67:f7:f9:a6:3a:e7:bc:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:99:08:C7:3B:53:C6:3E:75:AF:76:B5:4E:64:BE:7F:57:77:EF
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61081

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:05:2c:81:07:5f:98:8e:3d:f5:41:e4:37:24:37:f9:e8:
         6a:6d:4e:b7:17:c3:5e:2b:a8:56:5b:e0:02:0b:5b:87:58:2d:
         70:9b:a1:b1:18:da:ee:31:e6:9b:09:c9:a2:a5:46:0a:c7:6d:
         ef:d9:c8:a3:aa:4d:0a:54:df:da:6d:3c:de:86:78:65:ff:aa:
         e7:96:86:7e:9a:a8:8a:11:9a:c6:c0:21:94:2f:dc:c3:a1:71:
         88:33:fc:67:b1:3d:59:11:9d:55:40:64:0e:97:19:da:37:2d:
         97:83:3f:91:64:ff:6b:9d:2b:eb:f2:91:42:75:b7:25:05:e8:
         f5:2b:f8:06:0d:97:3c:34:11:73:0c:75:26:4e:85:1f:e6:3e:
         c8:95:6a:1a:6d:d0:01:16:61:1c:cf:31:bb:31:d0:35:d8:56:
         35:86:0b:20:5a:20:34:54:c0:d2:44:97:16:cb:5c:7c:f9:c7:
         b6:de:03:b3:31:28:e5:0f:25:3e:62:e9:05:6a:b9:ba:4a:00:
         70:97:37:8e:b2:91:73:bb:8d:95:b7:11:79:25:1b:32:3f:9b:
         8c:b1:83:83:c3:e5:df:44:57:bd:45:e5:e7:bc:65:05:4e:80:
         e8:70:64:68:a3:e9:1d:e4:34:a3:4e:08:2b:73:39:e0:6a:b1:
         17:fc:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:37 2026 by rpki-client