Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/tFoNYgqUc7lOlyJlEHaeuwrNreU.asa
File:                     tFoNYgqUc7lOlyJlEHaeuwrNreU.asa (raw, json)
Hash identifier:          TB8xtH+5ivwYr8/Xx7RZIde5FrCInx9y32IF6KBz+As=
Subject key identifier:   B4:5A:0D:62:0A:94:73:B9:4E:97:22:65:10:76:9E:BB:0A:CD:AD:E5
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       019FC54361F0DCD6F637CF785893D2F1A6A2
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/tFoNYgqUc7lOlyJlEHaeuwrNreU.asa
Signing time:             Mon 03 Aug 2026 01:35:55 +0000
ASPA not before:          Mon 03 Aug 2026 01:35:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197032
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c5:43:61:f0:dc:d6:f6:37:cf:78:58:93:d2:f1:a6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Aug  3 01:35:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b45a0d620a9473b94e97226510769ebb0acdade5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:12:d2:81:bd:4e:d3:12:e3:77:67:1a:d6:
                    e7:4e:f9:ee:e3:6f:1f:8e:b3:f5:52:38:5e:29:fa:
                    5d:14:c3:e2:27:0a:35:b9:be:15:5b:fb:fb:92:68:
                    c8:1b:37:4b:3f:9e:f7:1b:5e:18:f6:ff:1c:2b:fa:
                    f0:a0:ba:b5:6d:60:3c:4f:97:d7:48:ef:54:9b:a8:
                    e5:f4:db:68:ac:c6:25:28:d5:43:a8:65:e1:f7:b3:
                    df:27:e9:1f:1b:2f:1f:31:81:9c:48:4c:b8:71:13:
                    fd:91:b3:c7:f5:e6:95:54:e9:95:73:b6:aa:f3:a5:
                    ae:08:f1:69:61:6d:66:87:c5:09:5a:09:9d:2c:66:
                    d7:92:18:e0:7f:a4:4b:f5:1c:9e:df:32:e6:a4:32:
                    1f:3e:ce:5b:61:6c:c5:53:60:9b:7f:d9:27:29:04:
                    10:af:52:db:c8:e8:04:50:29:04:ed:c2:6f:75:c3:
                    33:1e:38:22:55:89:a9:a3:bd:95:76:78:fb:ef:f2:
                    2b:37:51:f2:70:32:6c:67:c5:f8:ac:ab:39:fc:25:
                    33:52:7c:cb:3b:c3:a5:55:af:36:4c:0e:dd:93:4f:
                    57:77:c5:c1:d6:a7:11:47:4b:b5:95:93:17:86:c6:
                    5d:76:57:7e:4b:49:57:77:51:e6:87:f6:ed:72:11:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:0D:62:0A:94:73:B9:4E:97:22:65:10:76:9E:BB:0A:CD:AD:E5
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/tFoNYgqUc7lOlyJlEHaeuwrNreU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197032

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:0f:cb:9b:cf:5e:98:de:ca:92:1f:b4:13:92:5d:60:9a:
         5a:88:f4:b6:8f:48:e2:5b:72:b1:ef:c9:60:53:1e:71:1a:41:
         33:6b:81:54:b0:62:db:11:6f:43:9b:03:7a:0c:47:0b:37:ad:
         16:7f:ba:af:21:e4:97:37:c7:5d:1f:b1:e8:9b:19:46:43:4a:
         84:bc:93:e2:6d:01:eb:d2:d6:02:aa:40:02:1e:29:84:41:2a:
         bf:ca:39:7f:40:fb:14:c9:2b:a3:44:aa:58:f0:40:88:13:3f:
         80:9c:d2:ed:00:ad:ea:0a:76:96:31:90:69:fa:81:de:4d:fe:
         c8:34:1a:27:fa:68:fb:cf:1d:b9:3e:6b:dd:65:c2:4e:da:51:
         c5:7e:ad:4b:71:ea:4e:e7:59:e5:45:4d:17:22:77:3a:d1:6a:
         54:5d:69:11:d3:bf:90:61:8d:2f:60:67:ab:d5:79:8d:1b:a4:
         c7:5d:2a:07:1b:f7:b6:fb:b7:d9:3a:2c:01:66:86:9c:c3:6e:
         e0:dd:77:6a:5b:24:90:da:1b:a8:e0:f6:e2:e1:99:5c:66:56:
         67:46:ca:f3:f3:30:39:db:97:03:f9:97:8c:82:44:31:d8:95:
         37:99:2b:b9:b0:84:cc:64:91:f5:60:5e:b4:45:44:7e:68:d1:
         80:ac:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:20 2026 by rpki-client