Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa
File:                     HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (raw, json)
Hash identifier:          ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=
Subject key identifier:   1C:80:94:42:51:18:4C:63:43:64:2F:D3:64:A0:4D:B7:52:3D:66:D2
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       019CBF371FDA202FD594CBA6543894C7F535
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa
Signing time:             Thu 05 Mar 2026 18:16:26 +0000
ASPA not before:          Thu 05 Mar 2026 18:16:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56368
Providers:                AS: 15945
                          AS: 21473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:37:1f:da:20:2f:d5:94:cb:a6:54:38:94:c7:f5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Mar  5 18:16:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1c80944251184c6343642fd364a04db7523d66d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:b7:e9:d0:d6:8c:ae:83:8c:be:3c:36:88:
                    db:65:2a:94:cb:1b:63:21:e2:fa:7f:a7:d6:b9:f4:
                    d9:97:28:71:18:89:da:93:1c:46:39:47:24:57:f4:
                    ef:ef:f6:fd:89:2a:ad:f9:9b:c9:e9:1f:d0:f6:ac:
                    69:e1:82:f8:e1:e3:5d:d4:14:91:38:03:c2:38:75:
                    f2:92:28:12:a3:08:96:d4:7c:39:4c:f7:00:ed:3b:
                    ad:8d:9a:07:5d:c9:ce:07:37:7a:ec:3e:2a:95:3c:
                    6e:29:e5:72:47:cf:86:39:f9:4a:6c:e7:04:26:0e:
                    bc:83:f0:a3:69:d7:ff:7f:66:ff:1b:04:af:fd:5b:
                    d9:2f:40:42:7c:ad:1c:4f:47:e6:ab:c4:9e:d3:a6:
                    f4:8a:32:27:d5:6c:8d:09:40:35:32:45:10:c1:81:
                    6d:d4:78:5e:94:e0:e6:2c:be:6f:a2:a0:b6:49:22:
                    26:a5:15:86:7d:54:67:b4:80:9f:f6:74:cb:d2:81:
                    ca:c7:de:24:61:a7:db:17:eb:a3:ae:16:eb:45:c1:
                    02:c8:90:80:30:0c:76:e1:18:c8:02:c6:db:02:e6:
                    0b:30:c0:49:ee:09:47:9b:ee:f4:7c:1b:4d:7a:a2:
                    1b:bb:73:60:e7:2e:85:36:73:c1:63:62:54:dc:42:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:94:42:51:18:4C:63:43:64:2F:D3:64:A0:4D:B7:52:3D:66:D2
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56368

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:7a:e2:ec:00:5c:e1:ea:4b:fb:4c:50:14:80:75:56:5d:
         28:77:c5:86:ea:cd:a6:2e:81:cb:57:98:88:ac:90:54:3b:06:
         8a:87:08:d6:a8:52:0f:45:79:36:85:1f:f5:a2:45:90:30:6f:
         f3:a0:13:2b:e5:d7:d6:12:f9:30:9f:6a:b4:fe:50:e6:b2:77:
         ee:a3:fc:25:04:6e:19:d6:65:ab:f6:cf:3a:ec:62:66:3f:f3:
         9a:b5:af:b1:38:97:b8:2d:bc:22:83:77:62:55:9a:18:11:cc:
         cd:df:64:a6:5e:d6:76:30:c6:90:55:d8:4d:69:74:23:4c:90:
         c6:5f:1b:18:62:fd:fc:7c:2e:42:17:fc:25:ef:8f:50:1d:10:
         26:fd:ed:03:8c:9c:25:f9:0b:82:06:68:67:83:d7:1b:2a:d2:
         0b:77:a1:eb:23:6f:60:f2:eb:cc:04:17:ef:ec:c4:65:73:8f:
         a9:b2:3a:00:86:e8:c6:2d:e9:bb:70:d0:40:d9:f9:ef:96:f9:
         7c:18:76:cc:70:64:1f:a9:92:8d:eb:ee:aa:11:65:2d:f1:e1:
         03:7f:57:58:0b:53:88:5a:74:d5:3c:fa:15:66:0d:27:0c:5a:
         1f:49:ac:5e:7b:a5:db:e4:89:fd:29:4f:72:11:45:a3:2b:8a:
         b8:78:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:59 2026 by rpki-client