Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/bexPf4wBiqE5B0cK8WpLE7_TGgw.asa
File:                     bexPf4wBiqE5B0cK8WpLE7_TGgw.asa (raw, json)
Hash identifier:          f6uUWxmQPWv0jNUrF3hj3zTPBTwtBbg/p5UBKL2IpM0=
Subject key identifier:   6D:EC:4F:7F:8C:01:8A:A1:39:07:47:0A:F1:6A:4B:13:BF:D3:1A:0C
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019CBA39E2C0C002809AAF94B5E1F4712B0D
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/bexPf4wBiqE5B0cK8WpLE7_TGgw.asa
Signing time:             Wed 04 Mar 2026 19:01:21 +0000
ASPA not before:          Wed 04 Mar 2026 19:01:21 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198603
Providers:                AS: 34872
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ba:39:e2:c0:c0:02:80:9a:af:94:b5:e1:f4:71:2b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Mar  4 19:01:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6dec4f7f8c018aa13907470af16a4b13bfd31a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:a7:f8:ab:e6:96:f7:30:18:75:88:45:26:
                    cf:2b:aa:d7:ea:46:f4:38:e6:aa:b6:e4:e4:24:c3:
                    01:95:35:42:30:6e:3b:ef:52:4b:eb:bc:71:31:d9:
                    7d:99:d1:87:3a:09:26:46:8d:37:d4:cd:57:3e:68:
                    b4:34:d3:7f:06:db:28:aa:fa:91:97:20:ec:19:07:
                    3d:18:f5:7b:a9:00:13:92:ac:88:16:ab:33:90:8d:
                    f0:74:7a:28:b0:29:ea:e5:11:40:3a:b3:37:96:3c:
                    39:d3:b7:d9:62:a2:07:92:fe:a3:bf:14:f9:ab:e2:
                    6c:33:4b:14:fc:c2:fd:8a:90:36:dc:7e:18:22:fa:
                    fa:61:36:9c:49:8d:db:8a:59:28:4c:48:56:91:6e:
                    69:96:15:ed:6a:d1:a9:0a:50:c1:7f:3c:e5:72:cf:
                    57:c2:84:f9:b8:c8:d7:4c:d9:51:2f:0f:20:1b:8c:
                    af:c7:58:06:49:9b:f4:70:a7:f3:80:53:28:2b:f0:
                    a9:62:0f:8f:41:56:3b:ed:47:b7:71:4f:cc:c5:67:
                    c7:55:0d:8f:72:cd:96:10:d7:ee:c4:5d:43:7d:87:
                    f4:bf:fe:1f:2e:59:26:64:61:98:d3:90:61:77:ad:
                    c6:43:6b:f7:47:91:a6:7c:9c:aa:5f:de:79:f3:4d:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:4F:7F:8C:01:8A:A1:39:07:47:0A:F1:6A:4B:13:BF:D3:1A:0C
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/bexPf4wBiqE5B0cK8WpLE7_TGgw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198603

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:53:53:ae:98:d9:65:0f:f6:e8:a9:2a:24:00:25:58:2e:
         e7:f1:c4:95:d2:84:18:a4:cd:64:54:1b:87:f9:f9:75:26:f0:
         7a:20:f4:74:35:36:5d:6e:24:0b:a3:4f:61:f0:30:a7:b6:5c:
         92:b8:1d:6e:86:3b:24:1b:82:fb:b0:43:e5:5b:32:56:36:7e:
         4d:e7:6c:4b:81:18:e7:99:4d:b1:a5:31:3d:11:ef:88:e6:5b:
         3e:43:49:40:91:3f:d7:d8:35:57:29:6e:24:23:9d:a9:6d:e7:
         cd:76:51:db:1a:49:3c:37:76:99:72:b1:16:b3:08:51:3e:26:
         ef:70:c0:38:ed:4d:73:ca:e1:78:47:88:bd:f4:ab:13:e8:87:
         f7:54:8b:5c:d1:45:77:7e:b5:20:c0:6f:c9:98:80:ab:7b:e1:
         6d:3f:81:41:8b:ad:d5:4a:48:b3:f1:98:3e:0e:2a:5e:42:7a:
         d6:9d:fc:6e:eb:51:11:6f:d0:e4:cc:dd:e9:41:50:ff:05:af:
         af:93:f4:ed:ff:cf:98:b9:9e:cb:d5:e7:5c:dc:72:2c:c7:e7:
         29:fe:0a:5e:75:b4:2c:de:7b:ac:28:6e:04:f3:91:3d:4e:fa:
         f4:4b:9b:be:c8:80:b0:bf:41:d2:32:7b:c1:f4:85:9c:6d:c2:
         73:ad:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client