Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/qpf2jrPnGEdSelRtM1fGztVUn_M.asa
File:                     qpf2jrPnGEdSelRtM1fGztVUn_M.asa (raw, json)
Hash identifier:          T6+awxj1fPEBE6Cn0I06mdbSa3YDzKpDM/bjQAsbn8Q=
Subject key identifier:   AA:97:F6:8E:B3:E7:18:47:52:7A:54:6D:33:57:C6:CE:D5:54:9F:F3
Certificate issuer:       /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial:       019CE6C75BFF3D6360C7C63A11F38BEF27B4
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/qpf2jrPnGEdSelRtM1fGztVUn_M.asa
Signing time:             Fri 13 Mar 2026 10:39:10 +0000
ASPA not before:          Fri 13 Mar 2026 10:39:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207048
Providers:                AS: 44486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:c7:5b:ff:3d:63:60:c7:c6:3a:11:f3:8b:ef:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
        Validity
            Not Before: Mar 13 10:39:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa97f68eb3e71847527a546d3357c6ced5549ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:2f:9a:38:ae:23:6a:2d:9e:46:19:93:a6:
                    19:8c:0d:07:61:0b:b7:e2:77:aa:96:85:de:81:7d:
                    62:e1:93:22:40:5b:5b:fc:d6:16:65:b1:c1:a9:2e:
                    a4:2e:9d:9a:05:b6:d1:84:b7:ec:99:2f:e6:6c:76:
                    41:c9:ef:fd:bd:fd:28:3e:31:ab:aa:a4:3a:df:0f:
                    be:7c:a1:2c:ae:30:4b:0b:51:b7:bd:b8:81:19:2f:
                    2c:33:45:f2:82:1d:d4:eb:7a:f5:a9:d0:9a:df:57:
                    6d:f9:5d:81:bf:92:be:ab:f6:db:3c:28:08:df:b9:
                    cd:e0:0c:50:0b:9b:01:fe:ae:d9:f6:d8:b5:de:bc:
                    c6:4c:99:77:fe:3f:7c:cd:d5:09:3b:aa:3a:c7:6c:
                    eb:3d:8e:67:f9:d0:16:1b:c5:97:1b:af:8a:f6:7a:
                    7d:2a:70:86:a5:d8:f2:e7:c5:7d:02:fc:3d:a1:00:
                    ea:aa:09:f8:f7:a6:0f:b6:7d:fe:a9:9b:78:3d:e1:
                    73:48:f7:a9:b3:6e:9a:ac:5d:59:69:17:da:14:5e:
                    a8:7d:16:91:41:b1:fc:c2:31:e5:ae:e7:ee:88:d3:
                    f0:f4:2a:3a:d1:12:5c:30:96:98:c7:92:fe:0a:2d:
                    f3:3f:c1:f6:da:dc:69:35:b6:9d:9a:70:16:3c:43:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:97:F6:8E:B3:E7:18:47:52:7A:54:6D:33:57:C6:CE:D5:54:9F:F3
            X509v3 Authority Key Identifier:
                keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/qpf2jrPnGEdSelRtM1fGztVUn_M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207048

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:cd:14:c0:76:be:74:a9:64:85:a2:9d:c1:e4:f8:e6:e5:
         4f:26:7c:86:5e:91:a7:e6:c8:1c:55:26:d5:a5:e1:32:80:21:
         2c:e4:bf:59:e2:c8:0c:74:2d:45:84:ff:30:2d:db:ea:a2:b3:
         5c:2a:b3:c1:8d:a5:b2:f0:0a:fd:a9:66:97:4b:d3:b1:c3:80:
         e1:70:1e:7a:b7:89:b7:1f:6f:54:c9:1b:83:6a:86:bf:f2:53:
         cd:cb:db:59:c5:6d:4f:8f:03:69:67:12:71:ea:b2:15:1a:6f:
         24:be:65:52:5e:2b:8e:f5:16:7d:ac:23:e5:13:9f:45:1a:8b:
         75:d7:69:96:8f:b6:86:9b:37:a0:67:9f:38:f2:90:16:95:95:
         8f:60:99:ff:c0:cd:f0:7b:a3:c2:8c:ab:c0:92:10:48:91:0e:
         67:c1:ba:0a:ce:ad:7d:da:21:cb:a7:22:4a:49:2a:64:06:1d:
         2e:49:fe:f6:47:b1:08:1e:c4:97:58:f8:d4:60:0f:43:e5:3a:
         b3:a9:56:e1:83:07:a2:24:74:b7:00:54:a8:bc:8a:d1:90:c8:
         bf:27:ce:37:1b:15:d5:b8:ba:d4:b5:8c:ea:5c:44:ba:f4:84:
         1e:51:a3:00:ec:23:aa:51:f1:c4:2b:fb:79:c3:04:03:5b:fd:
         ac:9c:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:13 2026 by rpki-client