Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/A8SXcw4AzFMfpLpo3wwueTJZTmw.asa
File:                     A8SXcw4AzFMfpLpo3wwueTJZTmw.asa (raw, json)
Hash identifier:          A3VuX910iot8yxyYhIvxya0LiOo/oWEga/OUTWYivXo=
Subject key identifier:   03:C4:97:73:0E:00:CC:53:1F:A4:BA:68:DF:0C:2E:79:32:59:4E:6C
Certificate issuer:       /CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Certificate serial:       01A14E870746C8446BCE286CE4AE3BAA5622
Authority key identifier: BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/A8SXcw4AzFMfpLpo3wwueTJZTmw.asa
Signing time:             Sun 18 Oct 2026 10:20:34 +0000
ASPA not before:          Sun 18 Oct 2026 10:20:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201124
Providers:                AS: 49581
                          AS: 219418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:87:07:46:c8:44:6b:ce:28:6c:e4:ae:3b:aa:56:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
        Validity
            Not Before: Oct 18 10:20:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03c497730e00cc531fa4ba68df0c2e7932594e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:89:e7:3c:ad:89:2f:ca:46:4c:ca:7f:09:
                    fb:85:90:c2:93:54:fb:7c:20:74:40:be:27:13:89:
                    27:3b:88:77:2f:8f:34:ce:bb:46:f4:f6:d5:50:b3:
                    46:be:05:34:66:26:96:17:b4:d4:cc:da:76:be:45:
                    9c:68:7a:58:ec:81:a9:e4:42:5d:bf:79:c5:15:6c:
                    b4:1c:c1:4f:e0:6c:bb:85:0c:82:bf:81:20:32:ce:
                    52:0c:9e:0e:59:7c:6c:5b:4c:88:50:a0:0d:5d:9e:
                    fd:79:81:b2:29:77:0e:e3:8b:2e:89:98:25:31:0f:
                    2e:84:3e:e2:0a:28:c8:d3:bd:d2:61:40:7e:e8:39:
                    f1:10:52:80:4d:29:ab:49:0a:47:c4:3c:d8:ea:ec:
                    de:c7:16:b9:10:ab:d4:ab:89:52:76:84:08:b7:7f:
                    3a:47:a7:b4:30:65:aa:fb:04:44:3b:88:d1:c1:10:
                    06:9a:3a:8d:13:69:9c:70:45:6f:d7:f6:01:bd:0d:
                    d5:67:f9:7f:36:ed:9a:1e:e2:37:6f:e2:44:4f:0e:
                    09:8b:76:fc:cd:51:7d:f8:76:5a:50:6a:f0:10:40:
                    08:6e:d4:3a:a1:51:17:d6:38:11:ac:8d:7b:8e:cf:
                    33:7f:f3:5a:ff:df:5f:e1:a6:73:5c:ee:3b:ef:3a:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:97:73:0E:00:CC:53:1F:A4:BA:68:DF:0C:2E:79:32:59:4E:6C
            X509v3 Authority Key Identifier:
                keyid:BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/A8SXcw4AzFMfpLpo3wwueTJZTmw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201124

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:12:6f:3e:bb:ac:6c:82:8b:31:7d:50:4f:58:61:73:82:
         d9:c8:90:cc:81:4a:66:57:a3:66:cf:1f:ed:57:1a:8e:3c:54:
         d2:a1:ed:b4:1c:fd:3a:93:72:0e:c6:b6:ac:6a:14:41:a4:7b:
         7f:76:56:1a:02:ba:9d:32:33:c9:28:5d:e8:c3:3a:ff:08:88:
         32:fc:71:28:70:a9:92:86:2e:3b:28:e4:3d:35:ae:77:3a:fb:
         0e:a7:a8:33:25:10:1e:be:8c:c1:45:35:94:8f:32:0b:6a:06:
         9b:fc:47:15:29:43:17:41:1c:b2:26:c4:f3:7a:cf:e3:47:74:
         f8:b2:ca:d4:f2:c7:b4:65:d3:6b:d7:19:ed:84:30:9e:06:88:
         98:36:85:f1:9a:de:12:39:4b:4a:14:d4:48:b2:cc:af:47:ea:
         b5:c7:57:9a:26:fe:1e:aa:0b:39:1d:96:5e:a6:c5:10:5d:b1:
         2a:1c:54:e8:90:be:1b:7b:a4:6c:7a:0a:a8:2e:f8:4e:d1:ca:
         82:ce:0d:21:a5:d5:aa:86:d9:75:63:6a:76:6f:61:eb:8c:69:
         5c:7f:88:19:2d:aa:15:6d:1e:5d:68:1c:67:1b:c9:f2:51:8f:
         bd:00:78:3d:82:ea:18:80:64:35:99:67:0e:37:5e:26:91:fb:
         3d:da:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 19:14:18 2026 by rpki-client