Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa
File:                     T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa (raw, json)
Hash identifier:          9UlqFrtBpJ1m/jb2if0Qk7CFK/PRtZG8ru3Zi5n9cBk=
Subject key identifier:   4F:DB:ED:64:57:DB:B7:80:66:19:BC:56:CE:02:71:E4:13:FE:90:7A
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       019CB6D08CE8636BEE9BFA6D043015A019E4
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa
Signing time:             Wed 04 Mar 2026 03:07:26 +0000
ASPA not before:          Wed 04 Mar 2026 03:07:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203309
Providers:                AS: 34927
                          AS: 44324
                          AS: 213605
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b6:d0:8c:e8:63:6b:ee:9b:fa:6d:04:30:15:a0:19:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Mar  4 03:07:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4fdbed6457dbb7806619bc56ce0271e413fe907a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:5e:66:8d:52:57:6e:e5:2e:3e:af:bf:74:
                    ea:bc:16:f3:b9:c0:69:88:52:f0:63:03:5e:78:74:
                    d9:d3:50:2d:a1:35:30:40:bc:ce:07:0e:6f:ce:49:
                    fa:1c:e6:b3:5f:d3:4e:3d:f2:36:f5:eb:59:3f:6d:
                    8d:29:de:86:46:8c:48:02:f1:b2:d2:ce:eb:61:65:
                    e5:39:54:b5:29:ff:5d:b3:ae:6f:a4:98:a5:c0:25:
                    e7:5a:b6:5f:b0:8d:4c:cf:5f:31:5c:3e:68:d7:82:
                    93:cd:ff:49:11:cb:0a:fc:c5:44:fa:76:b8:e2:30:
                    8b:9d:c0:b0:6a:ef:db:61:b9:da:2e:cc:be:2b:cc:
                    eb:05:d5:62:d6:74:d1:68:bd:98:f6:e4:41:de:d9:
                    ea:41:74:14:a6:cd:db:ec:21:93:6a:5f:5b:e9:9f:
                    2b:7a:30:1e:e5:1a:58:2a:dc:64:a8:6d:93:ac:b5:
                    54:63:bd:4f:37:4c:71:10:5d:f5:86:f8:ad:a9:c2:
                    23:b7:32:15:49:6e:bd:2c:cd:46:46:7b:5f:1f:f4:
                    38:22:4a:cd:48:79:5a:35:0f:d8:3f:31:90:4d:92:
                    fa:8d:4e:f3:ba:c1:8b:7b:09:f8:65:ca:15:35:4a:
                    dd:0e:c0:17:98:2b:4e:d7:f8:5f:fd:77:d0:60:ef:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:ED:64:57:DB:B7:80:66:19:BC:56:CE:02:71:E4:13:FE:90:7A
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203309

    Signature Algorithm: sha256WithRSAEncryption
         05:67:91:54:14:41:11:44:b3:bc:4d:2a:39:69:3c:4f:9a:08:
         6a:c1:73:04:12:1d:47:f8:42:ff:7b:d4:18:6e:65:d3:35:10:
         d4:d1:18:bd:25:16:96:eb:7a:8d:c3:10:33:96:c5:7e:94:5f:
         1a:00:b4:4d:18:a4:2a:0e:62:32:da:74:23:8b:e8:0f:5a:05:
         43:50:68:5e:84:b8:7b:f2:df:60:81:2e:1f:1c:4a:0d:85:51:
         e1:70:ef:22:11:47:5d:af:9e:96:1c:aa:fd:09:26:96:a0:cc:
         18:b3:ca:96:43:90:38:ad:29:ad:33:4e:15:bd:79:1e:70:6b:
         96:00:03:cb:0c:0f:da:f1:ea:9d:6a:62:20:e3:42:f6:d3:f1:
         4f:a1:8f:8d:ad:6c:11:07:ad:7f:99:50:b8:9f:65:53:fd:a7:
         a0:fe:c1:e8:89:8e:23:bf:1b:17:a7:bf:c2:d0:2d:19:07:9c:
         10:a1:82:f5:a2:74:35:6f:92:a7:55:ae:07:2c:72:48:1c:8e:
         04:e2:56:1b:6f:37:05:f2:f5:b8:ab:dd:20:6f:29:de:f6:6c:
         c9:03:10:1e:ac:8d:db:18:ad:b3:bc:d3:2d:91:ac:ae:c6:bc:
         b3:a1:37:54:be:e2:ce:f8:cc:3b:db:ce:9f:96:6c:48:69:66:
         1b:12:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:51:11 2026 by rpki-client