Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/ixUpJ-OkCzA-E-ZWZPdvq_pJkck.asa
File:                     ixUpJ-OkCzA-E-ZWZPdvq_pJkck.asa (raw, json)
Hash identifier:          lf2ayQ0yY+RwShSvf/g8Ca9ZqzJG7Jluy3tKGLDJGgo=
Subject key identifier:   8B:15:29:27:E3:A4:0B:30:3E:13:E6:56:64:F7:6F:AB:FA:49:91:C9
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019CAB1C08542DB6DD74448CAC02E1D80933
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/ixUpJ-OkCzA-E-ZWZPdvq_pJkck.asa
Signing time:             Sun 01 Mar 2026 20:34:26 +0000
ASPA not before:          Sun 01 Mar 2026 20:34:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208487
Providers:                AS: 8772
                          AS: 11967
                          AS: 24381
                          AS: 29632
                          AS: 35708
                          AS: 41051
                          AS: 199829
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 210464
                          AS: 211358
                          AS: 211509
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 00:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:1c:08:54:2d:b6:dd:74:44:8c:ac:02:e1:d8:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Mar  1 20:34:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b152927e3a40b303e13e65664f76fabfa4991c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9d:34:47:55:bc:3a:5f:a9:59:65:2e:e3:12:
                    f9:37:67:49:54:ac:28:05:72:41:2c:9f:90:d8:9c:
                    20:b5:45:b1:af:1d:2f:0e:78:b5:d1:f8:33:d4:3c:
                    36:5f:81:fe:d3:1d:2e:da:ea:9c:06:9b:22:13:b1:
                    3d:33:b0:27:b0:98:89:0d:05:96:83:92:45:c7:8e:
                    62:8d:98:17:b9:99:89:54:77:ed:d4:6e:b7:f6:9e:
                    6a:e5:e3:e3:b8:3a:a6:0c:60:97:68:dc:59:6b:c1:
                    f8:71:de:07:22:85:e7:e0:53:ba:07:e0:25:a9:eb:
                    6c:c1:c1:0c:d5:2f:fc:a2:c1:b1:2c:93:b6:bd:0b:
                    61:19:82:30:30:db:d1:19:11:a5:88:2d:4d:7c:1f:
                    0f:08:e9:46:93:a1:07:12:c4:9e:38:d0:f8:16:6f:
                    12:13:a7:48:1c:e6:83:4e:9e:da:68:f1:a7:b0:62:
                    da:be:25:11:17:ba:c1:8f:a5:28:8a:cc:d1:2d:3b:
                    be:2f:dd:a5:14:1b:70:e9:16:40:a0:e3:e8:50:7a:
                    91:01:c7:e9:dd:d0:7c:8b:ee:fe:ff:a4:08:d9:ef:
                    bb:80:09:57:bc:bc:da:2b:65:96:c9:7a:9b:b3:e6:
                    56:22:a0:4a:c7:7b:ac:a3:02:3e:30:e6:72:ba:6d:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:29:27:E3:A4:0B:30:3E:13:E6:56:64:F7:6F:AB:FA:49:91:C9
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/ixUpJ-OkCzA-E-ZWZPdvq_pJkck.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208487

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:58:25:6f:a4:3a:5e:0a:7f:e9:f3:c4:6e:d8:2f:1e:90:
         1a:ff:83:c7:16:cd:55:00:95:6a:86:51:e7:28:81:a1:85:28:
         e5:b3:4f:ef:e6:66:40:e4:68:3d:11:92:c7:0e:fb:ea:3a:8f:
         3d:78:0c:e5:8c:f7:14:55:a6:8f:0a:81:af:55:43:07:8f:dc:
         c0:de:82:d4:ad:90:59:7d:6f:88:a6:f4:47:f5:c2:ff:c3:cd:
         24:6c:8f:8c:99:c9:2c:a0:5a:88:43:11:40:9e:a9:a5:9c:e8:
         d9:6a:fd:56:02:6b:b9:97:79:fb:dc:b8:6f:57:af:c3:b5:b0:
         c1:c5:af:c0:f1:ed:67:a9:55:34:cd:fe:90:46:27:14:54:2c:
         20:f9:02:cf:ce:6d:ec:c1:16:f0:2e:75:3f:74:62:76:d9:6c:
         72:3e:cb:d9:70:1b:8c:6e:01:25:dc:3f:ad:30:14:5b:fb:a0:
         9b:9b:88:c3:e6:d8:3d:18:76:09:ee:47:66:67:ab:d4:92:0f:
         3b:33:75:06:10:a4:6d:f9:89:52:1c:1c:8e:f2:3c:5f:b8:5d:
         0b:7f:4b:96:79:33:1c:df:68:6e:bd:b9:67:18:76:3f:6d:94:
         ce:42:3a:65:04:d9:a4:21:e4:42:1d:97:8c:20:b0:ab:3a:b3:
         64:8f:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 07:38:22 2026 by rpki-client