Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fpTANtI4bRz4exyqA72XnfqWeAU.asa
File:                     fpTANtI4bRz4exyqA72XnfqWeAU.asa (raw, json)
Hash identifier:          AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=
Subject key identifier:   7E:94:C0:36:D2:38:6D:1C:F8:7B:1C:AA:03:BD:97:9D:FA:96:78:05
Certificate issuer:       /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial:       019CB95F26F98B715C73B1A42A3FA844B520
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fpTANtI4bRz4exyqA72XnfqWeAU.asa
Signing time:             Wed 04 Mar 2026 15:02:26 +0000
ASPA not before:          Wed 04 Mar 2026 15:02:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200325
Providers:                AS: 174
                          AS: 3491
                          AS: 4229
                          AS: 7195
                          AS: 8849
                          AS: 9009
                          AS: 12186
                          AS: 18450
                          AS: 20326
                          AS: 20473
                          AS: 21859
                          AS: 36236
                          AS: 40994
                          AS: 49544
                          AS: 51095
                          AS: 56630
                          AS: 60068
                          AS: 61317
                          AS: 136557
                          AS: 137409
                          AS: 199524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:5f:26:f9:8b:71:5c:73:b1:a4:2a:3f:a8:44:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
        Validity
            Not Before: Mar  4 15:02:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e94c036d2386d1cf87b1caa03bd979dfa967805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:04:b7:6a:64:a1:b6:d8:83:98:43:6a:0b:
                    bd:db:91:bd:3e:1f:27:16:49:fa:d9:ee:1e:c3:98:
                    eb:88:53:7a:eb:97:ca:c6:ad:51:ba:bc:c1:d6:4b:
                    c9:cb:2c:d2:66:29:dc:db:92:f9:b4:72:66:d3:3f:
                    25:e7:39:23:e0:bd:61:47:3e:b5:5e:00:8a:52:92:
                    3a:0b:33:4f:60:b8:df:5c:1e:b4:3e:1a:c5:cb:df:
                    0c:8b:15:c3:b3:0b:da:5e:ae:93:ed:fd:40:3c:99:
                    27:7f:be:f8:2c:0d:6a:22:60:01:72:b0:f1:91:f3:
                    64:40:28:a0:41:f2:ee:7a:8f:46:79:7e:54:32:00:
                    2a:e7:67:0e:e8:28:de:17:03:94:73:47:0f:8d:ba:
                    74:d5:01:13:ea:4f:6a:71:dd:d8:21:14:3e:2a:07:
                    27:2e:5d:a1:5a:71:22:dc:0f:86:e7:18:b4:84:77:
                    e7:54:03:45:32:0c:26:c1:65:41:22:85:b3:1d:e0:
                    01:51:d6:82:49:74:62:9d:aa:08:54:47:eb:e0:c9:
                    68:70:41:f6:12:3e:81:72:72:09:fa:af:a3:99:db:
                    fd:cd:1a:45:80:0a:fe:47:02:bc:a2:d2:15:9a:a7:
                    64:53:ee:79:ac:30:f2:cb:fb:2e:72:da:68:61:99:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:94:C0:36:D2:38:6D:1C:F8:7B:1C:AA:03:BD:97:9D:FA:96:78:05
            X509v3 Authority Key Identifier:
                keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fpTANtI4bRz4exyqA72XnfqWeAU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200325

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:c6:00:ca:ed:cf:89:f6:4c:1d:9d:a5:57:5d:75:ea:99:
         df:6f:3d:d0:0d:9e:e8:11:9b:56:09:62:5d:f9:38:88:04:a0:
         a8:b9:eb:b6:0e:74:b9:c4:86:29:98:15:71:6c:a1:76:3b:6f:
         28:b4:7c:4f:91:02:09:29:9e:69:04:02:df:cd:c9:b2:f2:6f:
         a3:ce:b8:16:bb:f4:1d:b6:b6:e6:c8:50:34:6f:d7:de:69:83:
         20:ea:e5:8c:4c:a1:c7:df:a0:65:16:21:f9:af:ed:0c:a1:e7:
         f8:66:57:9b:41:fc:7a:ea:0a:0f:71:9f:93:41:da:ac:9c:b5:
         fe:d5:0a:27:44:4a:1d:72:54:71:25:0a:65:c2:c9:d0:dc:52:
         91:35:c5:71:41:23:18:64:24:9b:9b:61:b2:94:f3:1c:a8:a7:
         d4:74:f0:26:d9:b3:a2:e5:56:de:95:79:74:c1:97:4a:86:ef:
         77:c3:b0:a1:0c:c4:9f:38:b8:fd:4e:df:ba:0a:13:df:e3:2c:
         a8:87:82:8d:a6:39:2c:bb:cd:9e:f0:32:e2:69:88:68:dd:b8:
         1c:13:3c:6c:b3:53:07:15:f3:18:1d:28:fb:55:6c:bd:d5:9a:
         7f:b4:a1:1b:91:74:3c:44:cd:94:5b:2f:01:0b:71:dd:5e:a1:
         68:c1:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:51 2026 by rpki-client