Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/TKzYD4ABjrCZqLSP2_fxbuEK6DU.asa
File:                     TKzYD4ABjrCZqLSP2_fxbuEK6DU.asa (raw, json)
Hash identifier:          uH8L8Se8kXstdbYk1z2gKFxuBhq9aZRv/T3RSW3KkhU=
Subject key identifier:   4C:AC:D8:0F:80:01:8E:B0:99:A8:B4:8F:DB:F7:F1:6E:E1:0A:E8:35
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019CE1F19177D780F726FA80AF566C86E247
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/TKzYD4ABjrCZqLSP2_fxbuEK6DU.asa
Signing time:             Thu 12 Mar 2026 12:07:10 +0000
ASPA not before:          Thu 12 Mar 2026 12:07:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            1213
Providers:                AS: 174
                          AS: 3257
                          AS: 21320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:f1:91:77:d7:80:f7:26:fa:80:af:56:6c:86:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Mar 12 12:07:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4cacd80f80018eb099a8b48fdbf7f16ee10ae835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:3e:d2:4c:80:c8:f7:2c:82:2d:6a:71:65:
                    fc:85:e6:24:f9:16:bd:87:2b:95:8f:29:a3:78:07:
                    11:19:f6:6c:86:15:a0:77:cb:f8:10:42:91:81:ff:
                    01:51:1f:d0:ce:7f:30:32:25:63:62:9f:77:00:c9:
                    ad:85:80:5d:ec:cf:bd:9a:d5:08:a9:2d:56:f6:1f:
                    b3:df:79:79:b5:a4:3d:e8:ea:0e:5f:86:48:55:64:
                    b4:3f:ab:8e:20:77:7a:7e:d6:fb:d7:71:7a:6e:e4:
                    8b:f8:dd:3c:ef:ef:cd:3d:6f:5b:b4:fe:ad:a3:cf:
                    f9:45:21:a5:d1:35:70:01:63:0c:6b:81:8b:81:47:
                    cb:31:c5:9d:33:41:7b:1c:91:3c:a8:c1:05:ed:78:
                    62:21:6c:61:55:69:f7:e9:4e:bf:45:99:fa:cf:bd:
                    1c:02:aa:ce:1e:63:fb:43:84:e3:4f:f3:d7:6d:96:
                    27:e3:82:4b:97:8a:8c:ac:2a:3d:43:4d:a6:9c:f8:
                    93:93:13:16:c8:da:14:a8:fc:7f:b6:3f:08:f4:8f:
                    d7:ee:cc:a7:c1:3b:a2:5b:fd:cc:7e:9f:95:97:9b:
                    42:4f:bb:7c:e8:34:6f:b2:73:f2:6d:2d:95:5e:b7:
                    48:f2:ba:59:f9:16:f9:80:d2:85:d2:fb:dd:f2:63:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AC:D8:0F:80:01:8E:B0:99:A8:B4:8F:DB:F7:F1:6E:E1:0A:E8:35
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/TKzYD4ABjrCZqLSP2_fxbuEK6DU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1213

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:11:95:35:c8:f9:34:27:18:22:29:91:12:ec:f7:c1:ff:
         d1:25:10:21:9b:1b:b0:0a:04:f6:45:31:01:82:fc:f5:1e:70:
         0e:5c:76:29:e9:b7:7d:5a:34:01:66:8f:4e:d6:ff:e5:2f:29:
         55:3d:f0:9c:7d:b9:db:28:f2:bb:b1:d8:92:1c:39:f8:dd:25:
         22:67:57:4f:5f:3c:f7:e6:6f:97:13:44:26:b9:c8:86:a5:45:
         e6:b4:9f:5c:e3:02:32:11:6f:1d:34:62:d9:4f:f3:de:fd:90:
         4b:41:63:60:5c:7d:fb:8c:a1:f5:09:19:af:40:4c:06:67:6e:
         cc:45:1a:2a:90:35:a8:93:19:8a:8a:60:f8:64:fd:64:79:57:
         61:55:a7:b3:1e:24:b9:1d:e2:50:87:3e:4c:b6:e2:10:27:ff:
         02:d0:28:bc:34:18:38:0b:a5:68:70:e1:7e:0f:ce:10:72:6f:
         e9:4b:78:f5:18:0c:5f:f3:fa:dd:e8:10:f1:f6:bf:79:48:40:
         6b:2f:9f:2b:49:56:f2:77:6b:04:d2:ac:31:9b:bc:19:36:69:
         ec:47:87:74:9f:77:f4:c1:2e:5f:86:ee:ed:2b:ca:76:9c:1f:
         ab:b1:26:d0:72:83:77:7e:cc:c2:0c:64:9c:08:38:4c:8b:4e:
         7f:6c:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:43:02 2026 by rpki-client