Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/TFL4paU1haNnRInCWqOJo9sZT2Y.asa
File:                     TFL4paU1haNnRInCWqOJo9sZT2Y.asa (raw, json)
Hash identifier:          mHqD6U6ln2GlV4OWaVbyFcs+NJUkiBYoMa3GtoILhzg=
Subject key identifier:   4C:52:F8:A5:A5:35:85:A3:67:44:89:C2:5A:A3:89:A3:DB:19:4F:66
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019DC8C10786C4F739922A013B8130D71086
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/TFL4paU1haNnRInCWqOJo9sZT2Y.asa
Signing time:             Sun 26 Apr 2026 07:46:26 +0000
ASPA not before:          Sun 26 Apr 2026 07:46:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201689
Providers:                AS: 58224
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c8:c1:07:86:c4:f7:39:92:2a:01:3b:81:30:d7:10:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Apr 26 07:46:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c52f8a5a53585a3674489c25aa389a3db194f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:c2:cd:a4:ae:1c:ee:1e:90:4f:39:0b:83:
                    c9:e2:7c:91:0b:49:a2:55:cd:64:2d:4a:94:a4:d8:
                    d9:f5:70:eb:90:a8:55:b5:4d:e0:18:e6:43:a7:91:
                    4d:0b:5e:7a:47:0a:3b:ac:64:87:0b:68:9f:8d:fa:
                    f3:07:2d:fe:af:95:13:9e:c1:27:dd:72:89:99:c2:
                    b3:81:7b:c2:19:58:aa:c2:03:4e:a2:3a:f8:3f:bc:
                    5d:67:bf:92:ec:ce:b6:38:1c:68:19:8f:21:2e:f8:
                    cd:ca:0f:cd:52:56:b0:1a:e6:ef:4d:6e:f0:15:81:
                    a4:b1:80:39:05:c0:52:bd:34:88:4e:1d:9c:c7:2c:
                    ca:3b:a0:5c:6a:9f:76:5f:2c:46:2c:54:1d:3b:fa:
                    2a:a1:28:74:04:3b:51:c1:00:a4:15:92:be:fb:48:
                    bd:a2:0c:af:00:d2:21:2b:30:5d:00:d4:c9:ed:36:
                    d8:cd:13:24:85:30:9a:20:99:7d:2e:05:1a:60:d4:
                    34:bd:a1:30:27:8f:66:de:ec:30:57:f3:15:86:83:
                    32:1b:9e:d3:a4:6a:9e:9e:04:5a:f3:28:61:74:81:
                    b3:28:50:c1:3c:e5:ef:ee:7d:5c:6c:71:f4:5c:0c:
                    eb:cc:67:b3:3d:68:8a:2f:37:42:0d:7c:0a:7f:00:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:F8:A5:A5:35:85:A3:67:44:89:C2:5A:A3:89:A3:DB:19:4F:66
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/TFL4paU1haNnRInCWqOJo9sZT2Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201689

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:fc:31:b6:6a:9a:0d:d0:47:ab:a2:f8:94:59:0b:96:20:
         5a:b5:ad:93:1a:e5:b4:b5:28:72:fb:24:7d:d7:be:43:0a:ca:
         48:2e:74:5d:3b:af:35:66:3b:49:c8:fc:d9:99:d2:fc:86:75:
         fe:f4:9c:a7:dc:d9:00:fa:43:82:82:21:e1:27:6c:eb:de:64:
         06:30:95:7f:72:63:04:a9:e1:f5:cf:8f:a5:75:75:33:38:f7:
         49:d5:97:ff:09:d3:3c:22:bb:eb:ce:2d:2d:41:d3:1a:3e:ac:
         c5:7e:0d:02:c4:cd:15:7f:3f:4d:34:69:5d:00:1a:f6:ec:09:
         c3:55:9f:ea:9c:2c:40:ab:58:cf:c1:89:36:b0:ed:c5:af:06:
         f9:9a:26:63:8e:d2:dc:77:35:fb:86:bf:b5:5d:f6:32:fb:7e:
         ab:5c:e0:23:8f:56:65:9c:15:70:40:5b:24:f2:dc:95:8e:89:
         74:e9:58:c4:22:b1:3e:2e:de:bd:ec:bb:bb:57:4a:30:58:cf:
         3d:b0:fd:30:8d:2e:cd:66:c8:53:1b:b2:fe:e1:d9:dd:4d:44:
         66:23:32:14:31:a0:60:d5:53:85:ec:e9:90:b8:fb:5f:ed:1c:
         f4:d2:43:6b:64:b2:00:c8:f8:c9:5f:89:3c:68:d0:8e:d7:b2:
         b9:ea:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:49:16 2026 by rpki-client