Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_6INOY1FWVEh1oz6ennQCK_Ok58.asa
File:                     _6INOY1FWVEh1oz6ennQCK_Ok58.asa (raw, json)
Hash identifier:          /Be9SGzaREnX1pCJiCvoVwJFXkr3ri1SvaIrzK5aXSA=
Subject key identifier:   FF:A2:0D:39:8D:45:59:51:21:D6:8C:FA:7A:79:D0:08:AF:CE:93:9F
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019FF6D5713A572452130E1D7E32BEE59FD3
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_6INOY1FWVEh1oz6ennQCK_Ok58.asa
Signing time:             Wed 12 Aug 2026 16:36:51 +0000
ASPA not before:          Wed 12 Aug 2026 16:36:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 56630
                          AS: 201279
                          AS: 215685
                          AS: 219529
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:d5:71:3a:57:24:52:13:0e:1d:7e:32:be:e5:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Aug 12 16:36:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ffa20d398d45595121d68cfa7a79d008afce939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:0a:f6:3e:f3:78:5e:83:41:e9:83:95:cf:
                    06:5a:85:54:03:44:dc:cc:ec:65:b8:e4:f7:a7:34:
                    6b:d3:0d:eb:c1:4e:52:82:a7:e5:34:ba:57:93:6e:
                    10:1a:a2:3e:7c:39:7d:f5:c9:b6:72:e6:96:60:78:
                    5d:da:e7:4b:0d:3b:32:cc:a8:66:50:18:1b:10:3f:
                    f3:fc:e0:7e:55:72:79:ae:a9:51:45:f3:05:95:cc:
                    54:ef:e6:bb:11:1a:0e:a9:45:2c:d5:ba:ac:83:50:
                    3c:a5:47:4b:6e:b2:b9:aa:35:c0:c6:26:49:c2:54:
                    e6:d7:4b:cb:07:d7:e1:0b:5d:22:99:2d:70:9c:7d:
                    a6:fc:63:9b:a9:e1:67:f6:87:66:fd:82:64:b1:9d:
                    f2:27:47:15:1d:31:5d:1b:3f:33:41:47:3f:b6:1c:
                    0b:c0:6e:f4:d0:86:e4:59:1c:fb:d6:d2:de:39:18:
                    4e:44:a2:3d:5d:08:3e:94:c5:a4:b8:d8:9f:88:29:
                    95:9b:9e:e8:c3:98:f7:40:0e:35:57:df:ac:30:21:
                    b0:d4:56:8c:1b:01:a8:2b:4b:85:61:62:d4:77:77:
                    e6:4c:c4:25:71:1a:41:92:16:65:7e:bb:41:2d:a2:
                    b2:e1:1c:ff:5c:8f:32:82:25:d7:2a:d5:83:2b:b2:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A2:0D:39:8D:45:59:51:21:D6:8C:FA:7A:79:D0:08:AF:CE:93:9F
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_6INOY1FWVEh1oz6ennQCK_Ok58.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         a6:5b:97:95:39:a2:19:82:52:70:c8:7f:29:83:a0:df:ff:7d:
         c5:1f:b7:b9:93:88:14:6b:93:3c:d1:0b:f6:29:43:a5:72:52:
         ca:9e:f3:4b:dd:9b:2e:01:15:5f:9b:73:35:a2:5c:c2:79:4c:
         36:bc:c7:74:e0:a3:92:16:d5:35:f3:1d:51:7f:8f:d8:1a:d2:
         c0:3a:3e:df:d9:6d:55:7e:0f:87:30:ce:32:aa:82:d8:d5:a9:
         b3:3c:35:e1:a4:95:80:54:3e:71:e5:29:13:3e:00:c2:e4:86:
         a3:42:6c:1d:7f:df:ca:ed:d0:be:0f:f2:0c:f3:c2:f0:32:f2:
         9c:d4:18:34:6a:1e:8d:51:b6:9a:bd:b1:37:54:14:36:14:4e:
         ad:b6:1d:c3:bb:1b:29:e1:37:ac:b1:f3:01:6e:47:80:61:97:
         a2:91:4b:64:61:71:20:24:3d:6a:6c:07:77:96:ab:7b:f8:9a:
         04:1b:f6:7c:19:de:89:fb:e2:47:ef:71:56:0d:8c:51:f9:3c:
         b7:5e:17:c6:3b:2d:69:54:7f:05:19:aa:77:17:90:be:f1:22:
         66:7e:ba:ed:35:32:fc:41:04:1c:8b:0d:9d:12:dd:ff:ce:7e:
         08:2e:02:ca:e8:fa:e5:a6:9b:33:db:74:48:2d:db:b1:d5:40:
         d0:9d:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:07 2026 by rpki-client