Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/C-K1DVayepRAuTplcbcjpnPijS4.asa
File:                     C-K1DVayepRAuTplcbcjpnPijS4.asa (raw, json)
Hash identifier:          YOp3qlUaeBb2bz+Xxd0IQCiiX7eH0DUOBqye58b/5Fg=
Subject key identifier:   0B:E2:B5:0D:56:B2:7A:94:40:B9:3A:65:71:B7:23:A6:73:E2:8D:2E
Certificate issuer:       /CN=9fc720ddab0795155ee04ba0e3fea3ce37dc62f8
Certificate serial:       019CB86536F5AF784CF688493E1BE7A5566D
Authority key identifier: 9F:C7:20:DD:AB:07:95:15:5E:E0:4B:A0:E3:FE:A3:CE:37:DC:62:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8cg3asHlRVe4Eug4_6jzjfcYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/C-K1DVayepRAuTplcbcjpnPijS4.asa
Signing time:             Wed 04 Mar 2026 10:29:26 +0000
ASPA not before:          Wed 04 Mar 2026 10:29:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211986
Providers:                AS: 1299
                          AS: 21738
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/n8cg3asHlRVe4Eug4_6jzjfcYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/n8cg3asHlRVe4Eug4_6jzjfcYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8cg3asHlRVe4Eug4_6jzjfcYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b8:65:36:f5:af:78:4c:f6:88:49:3e:1b:e7:a5:56:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc720ddab0795155ee04ba0e3fea3ce37dc62f8
        Validity
            Not Before: Mar  4 10:29:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0be2b50d56b27a9440b93a6571b723a673e28d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:54:a4:74:26:23:df:1c:a4:de:68:47:35:
                    5d:df:4a:f5:7a:1a:38:9d:6c:65:d5:01:d3:ee:5e:
                    9b:e0:28:9f:81:c0:7e:b7:83:ea:d7:d8:2f:d0:a6:
                    01:b9:a0:7b:23:57:89:7e:a2:5b:d6:3c:8b:df:34:
                    a8:0d:c0:65:b2:a3:6b:ff:2c:44:90:a3:af:81:26:
                    59:bd:19:27:a2:e4:dd:92:3f:21:6d:53:af:a9:c5:
                    d8:a6:5f:94:ef:ed:67:3c:c4:3c:5e:52:5a:a8:ab:
                    37:42:b5:f1:91:83:3c:b7:c3:3a:1f:0d:9c:13:93:
                    02:70:4b:5f:97:6c:47:b7:21:cb:f8:f7:98:fd:ea:
                    7d:99:20:9b:b7:95:a0:db:09:26:91:57:00:29:41:
                    70:35:63:6e:8f:ff:ef:8f:9b:48:9d:03:0c:33:7a:
                    f4:13:3e:c5:43:24:69:60:d8:76:8e:79:4b:1d:d0:
                    33:3f:b2:09:9b:e0:71:3d:3d:d5:97:36:a1:d6:eb:
                    97:9a:01:23:9b:06:d1:9c:46:55:49:82:3c:90:7c:
                    68:87:fa:1d:22:a3:91:e8:57:a4:1c:c1:55:90:06:
                    3d:e5:cb:38:0c:58:14:70:2c:c2:5d:4f:9f:e5:3a:
                    24:8c:4b:7a:55:0e:80:7f:a7:bf:ca:a1:80:35:78:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E2:B5:0D:56:B2:7A:94:40:B9:3A:65:71:B7:23:A6:73:E2:8D:2E
            X509v3 Authority Key Identifier:
                keyid:9F:C7:20:DD:AB:07:95:15:5E:E0:4B:A0:E3:FE:A3:CE:37:DC:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8cg3asHlRVe4Eug4_6jzjfcYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/C-K1DVayepRAuTplcbcjpnPijS4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/n8cg3asHlRVe4Eug4_6jzjfcYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211986

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:14:26:2e:9b:7b:cc:cb:7d:0a:65:97:0d:cc:bb:3c:43:
         f2:51:6b:49:03:5d:bd:80:cf:7b:24:6a:c4:b2:db:bd:66:69:
         9f:12:ba:15:af:e3:a3:2e:26:db:6f:e6:5b:1d:96:e8:c9:f4:
         25:d5:70:0e:ca:5e:a2:ee:5d:74:d2:84:da:18:b1:b4:15:8e:
         be:c4:4e:45:97:9d:e7:06:58:f1:5a:82:01:47:28:19:5a:dd:
         df:38:43:20:e1:25:9e:d2:e2:34:73:c1:ff:f2:05:7a:9c:53:
         f1:97:c4:93:93:99:11:1d:90:22:28:b4:d4:51:a9:a3:4b:57:
         ab:0b:1b:73:f8:35:fd:a5:3d:fd:e9:d9:01:1f:4d:05:57:d0:
         f0:a7:62:a3:2c:7c:8b:1a:80:6a:c3:fd:27:06:ef:60:ab:08:
         41:2b:72:35:87:fa:e7:f4:65:df:7c:04:50:d4:8c:74:c3:8a:
         ab:b0:68:77:23:08:fb:67:dd:36:c8:5a:0e:b1:fa:3a:97:e4:
         70:d1:78:a5:59:d7:77:10:58:9b:72:b4:64:39:e7:eb:a8:6f:
         40:d0:17:84:15:6e:d4:a7:0d:a6:91:bb:1d:14:24:08:c1:ab:
         6e:82:d7:3d:32:53:9d:5b:65:52:44:15:b1:8f:ef:af:f7:4e:
         5c:49:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:34:51 2026 by rpki-client