Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/l8PTvEKg1q3xibFISiKYXuYoQzg.asa
File:                     l8PTvEKg1q3xibFISiKYXuYoQzg.asa (raw, json)
Hash identifier:          EW6iPD7DNIHaYH6kQZEbC7i0XvcuUJ+cnKRZbNJcwko=
Subject key identifier:   97:C3:D3:BC:42:A0:D6:AD:F1:89:B1:48:4A:22:98:5E:E6:28:43:38
Certificate issuer:       /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial:       019CDE5B4AF51F512986EE2C6B8A221D13F0
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/l8PTvEKg1q3xibFISiKYXuYoQzg.asa
Signing time:             Wed 11 Mar 2026 19:24:10 +0000
ASPA not before:          Wed 11 Mar 2026 19:24:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44671
Providers:                AS: 6908
                          AS: 8943
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:de:5b:4a:f5:1f:51:29:86:ee:2c:6b:8a:22:1d:13:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
        Validity
            Not Before: Mar 11 19:24:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97c3d3bc42a0d6adf189b1484a22985ee6284338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:0f:59:58:11:c3:f2:55:32:7c:bf:71:19:
                    a7:55:d7:0b:e0:e4:ce:f2:32:cc:f7:20:9f:38:bc:
                    ec:c6:ac:58:f9:30:9a:b7:a1:08:30:86:0a:de:8b:
                    2a:34:89:8e:e8:32:56:88:57:82:d1:55:71:d1:c3:
                    f1:bc:c0:55:68:18:7a:07:e5:32:74:7b:a7:e3:cf:
                    bc:e7:3e:36:4c:db:28:2f:07:2f:6e:47:76:40:0d:
                    06:80:38:cb:1d:a2:76:72:d2:9a:25:a3:8b:38:59:
                    32:9a:4f:ef:7b:0f:d9:95:5f:78:06:4d:0d:af:10:
                    1d:da:22:9d:dc:e2:68:4b:49:42:c3:43:82:a0:ff:
                    e4:e3:06:2e:70:6d:f4:64:60:07:bf:a0:74:5b:fb:
                    d7:ca:de:10:c2:66:53:f6:b6:98:68:25:d2:4e:50:
                    f9:9e:26:3d:44:22:2d:96:e0:76:c0:9a:e2:9d:4c:
                    30:b6:61:fe:03:21:68:11:c7:28:a1:85:a4:72:a7:
                    71:27:31:96:1c:2f:4e:8f:09:57:66:7c:0b:41:a7:
                    bd:c2:be:45:a7:e5:e0:01:3c:61:e9:51:c6:85:3e:
                    64:4e:65:a4:76:13:36:8a:fe:bd:d2:20:5b:a7:25:
                    a2:65:0d:f6:8e:64:cd:d5:3c:cf:fa:aa:ec:a3:f3:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:D3:BC:42:A0:D6:AD:F1:89:B1:48:4A:22:98:5E:E6:28:43:38
            X509v3 Authority Key Identifier:
                keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/l8PTvEKg1q3xibFISiKYXuYoQzg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44671

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:f3:c4:6c:05:bb:30:23:18:44:8e:15:a9:ae:79:08:be:
         f9:d1:37:b4:46:14:58:62:a2:5e:07:86:33:a7:d0:c2:26:95:
         a9:a2:32:ba:fd:81:1b:14:5f:c1:4f:c4:57:9d:25:65:f6:f8:
         4e:ac:28:95:de:9a:a4:9d:19:51:44:0f:4b:fe:a2:3f:c3:77:
         38:2c:ad:85:13:9e:2c:2e:c3:4e:36:0d:e3:91:e5:1c:20:6e:
         2d:91:80:a6:b7:65:1e:3a:60:66:91:f8:d7:40:c2:60:97:5a:
         b0:28:c5:10:1a:e3:2f:32:25:b0:21:e2:a9:19:7b:be:aa:50:
         cc:44:63:c7:b2:71:a0:57:77:68:a4:a7:29:5e:81:34:1b:1a:
         19:b5:5c:4f:2e:ac:86:e5:21:34:86:dd:2f:3f:ad:2a:8b:bb:
         a0:b3:a8:70:e6:f2:c3:b3:b6:15:85:72:d8:2f:a5:d2:7d:f0:
         16:13:85:98:8e:a3:1c:6e:b3:a0:a9:3c:3d:06:3f:8c:94:11:
         33:6b:6a:f6:af:23:29:51:4b:c8:84:f0:61:11:ba:95:9e:6a:
         33:32:95:9c:fa:c4:6f:42:83:df:ee:37:96:20:bd:d6:a7:0f:
         e6:d1:d1:d3:39:60:89:60:2d:2f:75:93:e3:3c:09:94:08:a5:
         80:8b:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:51:13 2026 by rpki-client