Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/vRuoFrWmkK8pTSRrltUuVuGlSfw.asa
File:                     vRuoFrWmkK8pTSRrltUuVuGlSfw.asa (raw, json)
Hash identifier:          jJl2elMZFteUA4c0m26M/kbkufXHKwyn92yjxdg4Cgk=
Subject key identifier:   BD:1B:A8:16:B5:A6:90:AF:29:4D:24:6B:96:D5:2E:56:E1:A5:49:FC
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019CAFBF7833483D3894883DD092810A87A3
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/vRuoFrWmkK8pTSRrltUuVuGlSfw.asa
Signing time:             Mon 02 Mar 2026 18:11:26 +0000
ASPA not before:          Mon 02 Mar 2026 18:11:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197068
Providers:                AS: 1299
                          AS: 3216
                          AS: 8359
                          AS: 9049
                          AS: 12389
                          AS: 20764
                          AS: 31133
                          AS: 49800
                          AS: 57304
                          AS: 200449
                          AS: 200590
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:bf:78:33:48:3d:38:94:88:3d:d0:92:81:0a:87:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Mar  2 18:11:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd1ba816b5a690af294d246b96d52e56e1a549fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:fc:e2:41:91:61:a8:31:35:72:4c:5d:b8:
                    d2:86:0a:85:45:65:88:e6:1f:69:63:26:94:2a:e4:
                    58:53:89:63:e6:95:27:96:1a:5d:56:37:34:aa:2e:
                    e5:f6:51:8b:51:9d:dd:c3:7a:3f:af:81:b4:51:3e:
                    99:51:68:e1:12:bf:71:3c:24:b0:99:86:3e:e4:02:
                    57:ac:d5:c8:a1:db:d3:de:25:6f:57:70:9a:cc:60:
                    2a:af:55:9e:25:40:e8:3f:33:ec:67:86:59:00:8d:
                    95:37:57:8d:83:0d:15:88:13:d6:b5:12:5d:90:53:
                    90:c8:0a:6d:19:95:0f:cd:b6:20:0d:36:68:ea:6b:
                    e6:ed:c2:73:8c:20:ff:64:f9:fb:f9:49:9b:e6:85:
                    1f:1d:a1:25:bc:9e:9e:1e:05:66:e3:32:2d:52:f8:
                    e3:b7:20:1d:08:a8:a0:aa:96:7b:26:33:39:c6:8e:
                    6d:b6:32:ca:42:ef:3c:55:77:f4:0f:92:a5:94:83:
                    c6:1f:d7:bf:5c:4f:17:f5:71:a6:0e:2f:8c:c5:cc:
                    d9:f8:0c:61:a6:9d:2e:68:b2:f9:5f:62:b7:09:2b:
                    3d:12:95:35:9d:dc:ff:d6:93:5d:57:19:85:1f:84:
                    d9:63:92:29:35:fc:bb:c3:29:05:7e:f1:03:34:69:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1B:A8:16:B5:A6:90:AF:29:4D:24:6B:96:D5:2E:56:E1:A5:49:FC
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/vRuoFrWmkK8pTSRrltUuVuGlSfw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197068

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:14:d2:6f:68:f2:1c:c9:bc:c6:5d:6b:35:2d:bc:82:02:
         91:d6:33:93:c2:f8:3f:ee:61:54:26:f9:68:e1:31:a3:fa:70:
         2e:18:0a:23:6a:15:b7:12:d6:b0:57:56:5d:e4:32:4d:06:69:
         25:6b:4b:55:fa:0e:9a:e6:71:40:fc:30:53:b6:33:02:e6:ef:
         20:ee:db:ee:28:5a:d2:e6:3c:b7:63:ee:20:e1:22:da:64:0e:
         21:dd:b8:47:78:9d:c7:cc:ce:f1:17:de:34:aa:d8:74:1f:bf:
         f8:1b:e5:21:2f:23:4a:88:24:a8:e7:08:89:03:80:d4:c9:8c:
         9e:8e:e1:5b:5d:04:5f:9a:c1:45:6b:ae:20:bf:4d:3d:ce:ca:
         ce:f9:96:c4:a5:ab:d1:85:1e:0e:cf:57:eb:f2:c8:30:8a:06:
         c0:24:0e:0b:ab:d6:30:e9:b8:3f:43:34:fe:b2:e7:6f:e0:41:
         5a:2b:a4:13:6d:a3:4c:5f:cb:78:10:b6:02:9a:8e:0a:b9:b5:
         e2:ba:24:56:e4:bc:0f:8b:3c:d5:05:0b:d3:cd:55:b2:14:e2:
         e9:06:6c:70:bc:62:09:7b:96:e5:40:15:c7:0e:ba:54:13:60:
         a1:53:3e:26:8c:05:a3:6d:07:e9:71:c8:94:1a:a5:6f:62:85:
         75:4e:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:13:39 2026 by rpki-client