Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/fBtCXHN9XY90heH_7gUYjpIVJLg.asa
File:                     fBtCXHN9XY90heH_7gUYjpIVJLg.asa (raw, json)
Hash identifier:          9PP5Oi9Up0MyYYLD0HvJIwTKqzpch2Rp1VmxN16nEG0=
Subject key identifier:   7C:1B:42:5C:73:7D:5D:8F:74:85:E1:FF:EE:05:18:8E:92:15:24:B8
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       01A0E556EE222741EA822C208825F37D9129
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/fBtCXHN9XY90heH_7gUYjpIVJLg.asa
Signing time:             Mon 28 Sep 2026 00:07:54 +0000
ASPA not before:          Mon 28 Sep 2026 00:07:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214205
Providers:                AS: 6939
                          AS: 34927
                          AS: 44324
                          AS: 199133
                          AS: 199829
                          AS: 205941
                          AS: 207841
                          AS: 208453
                          AS: 209735
                          AS: 214331
                          AS: 214757
                          AS: 214762
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:56:ee:22:27:41:ea:82:2c:20:88:25:f3:7d:91:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Sep 28 00:07:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c1b425c737d5d8f7485e1ffee05188e921524b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:1d:79:43:74:3d:21:98:73:34:bc:a9:95:
                    3a:d2:a6:0d:d7:9f:db:37:28:30:e3:2d:9e:f9:18:
                    e4:d7:62:49:a7:71:1e:6b:f1:05:9c:42:0a:52:6b:
                    ac:f6:9c:b1:67:02:ee:bd:47:68:59:cc:66:c8:1f:
                    e8:b3:c3:cb:61:b5:1a:f3:2b:c8:2e:52:db:72:e1:
                    e5:77:f9:e7:16:ce:18:f8:24:2c:44:ae:17:d4:54:
                    6d:ad:31:a2:f7:24:43:55:4c:cb:8b:b2:6a:79:c9:
                    b5:8a:b9:f5:14:7a:9a:75:c5:73:fb:dd:c9:2d:46:
                    14:f5:65:08:1b:0b:7f:a7:93:c1:57:c0:00:0b:8f:
                    09:b8:c1:27:c8:c9:89:e6:ab:96:8e:32:c0:98:63:
                    83:98:e9:8c:dd:3b:d5:54:4a:df:87:98:f2:e7:ba:
                    2e:17:a3:f7:1f:09:89:87:01:0e:3c:ef:05:20:22:
                    77:e4:e1:72:36:33:93:b3:26:00:d5:78:52:25:bb:
                    ae:97:47:6d:f4:45:2b:48:b5:0c:b7:e5:4c:f6:89:
                    de:3c:37:ea:87:1a:0e:9c:30:6d:e5:20:75:f3:a5:
                    f3:11:df:f2:75:73:c1:11:4c:a4:b1:fd:62:c9:f6:
                    0c:68:05:19:01:60:c9:50:c2:1b:47:ec:bc:2d:60:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:42:5C:73:7D:5D:8F:74:85:E1:FF:EE:05:18:8E:92:15:24:B8
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/fBtCXHN9XY90heH_7gUYjpIVJLg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214205

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:e6:91:9e:34:81:81:57:a0:c5:76:71:0f:c9:82:d5:68:
         a3:88:69:0e:0b:37:0c:b9:0c:b3:53:a1:8e:32:7a:c8:6e:12:
         da:2f:76:67:6c:e6:61:bb:34:c9:e3:e8:cc:60:e9:c8:7d:e3:
         24:84:7c:2b:e9:b6:59:97:0f:e3:0a:e0:75:e1:77:20:d2:20:
         1b:10:52:9b:21:f5:c9:bc:af:82:d2:38:8d:6f:ec:8e:20:a4:
         22:17:bb:d0:ee:71:44:64:cb:80:82:81:3b:09:0b:15:a6:ba:
         72:0a:ae:ce:6c:26:f3:6e:84:50:41:8c:23:1e:ab:43:7d:41:
         22:c3:49:72:ab:8b:8e:74:d9:c3:df:24:21:e3:30:65:cb:c3:
         f5:38:da:ab:75:6a:a1:50:af:c2:1d:e5:20:50:60:b6:35:7e:
         21:48:48:b9:8b:f8:d9:9c:f3:fd:d2:97:39:c7:6e:be:b6:2e:
         a7:9c:8c:16:90:9d:75:1c:78:06:39:ec:24:0a:bf:b2:70:46:
         58:f5:ab:84:58:c8:c6:b6:e0:d1:4e:f3:5f:a8:e1:06:59:e1:
         7f:9a:97:71:60:1c:04:c0:84:9f:a0:a7:9d:17:d1:63:b6:74:
         80:6f:a0:d6:69:e2:39:a3:e0:83:c6:ad:dc:63:2c:f5:d2:46:
         26:e0:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:03 2026 by rpki-client