Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/_rBdv8MR9CvtKpBAk1ya2EZx1BU.asa
File:                     _rBdv8MR9CvtKpBAk1ya2EZx1BU.asa (raw, json)
Hash identifier:          15bX9d3Zxz011uBisah//kOmw3F4olKW35kry5sNKSU=
Subject key identifier:   FE:B0:5D:BF:C3:11:F4:2B:ED:2A:90:40:93:5C:9A:D8:46:71:D4:15
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019D4C02D661B273DCD06B007657A5A0F992
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/_rBdv8MR9CvtKpBAk1ya2EZx1BU.asa
Signing time:             Thu 02 Apr 2026 02:25:47 +0000
ASPA not before:          Thu 02 Apr 2026 02:25:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199605
Providers:                AS: 203168
                          AS: 209565
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4c:02:d6:61:b2:73:dc:d0:6b:00:76:57:a5:a0:f9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: Apr  2 02:25:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=feb05dbfc311f42bed2a9040935c9ad84671d415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:b1:68:68:c5:37:eb:7e:96:fd:62:9c:98:
                    02:46:3a:b2:46:ac:af:e9:40:c8:be:7b:02:88:7c:
                    0a:8e:02:49:95:d2:72:8b:9b:74:39:29:cf:55:3d:
                    da:72:db:5f:e5:cb:50:ea:65:5b:c8:9b:ac:a2:e5:
                    a9:78:b0:98:9e:fb:49:66:5c:19:b5:61:fa:fa:4e:
                    1a:9d:b2:3a:3c:43:72:33:ed:58:43:25:b1:cb:89:
                    7a:a1:63:28:00:b6:c1:5a:65:5b:14:df:56:75:5e:
                    e9:65:9c:03:d2:9a:47:c9:b5:48:ee:d1:b5:71:8c:
                    97:b1:cd:14:29:18:ac:50:5f:e9:6e:26:89:d7:df:
                    00:ff:3b:96:0c:c2:c8:2c:1c:78:72:6d:27:b5:6d:
                    c0:fb:06:9d:b5:b4:e0:f7:cb:1d:88:be:9e:e6:7f:
                    84:10:16:63:63:b4:38:01:5a:d1:74:b8:c8:c5:9b:
                    04:c7:fa:2b:6d:a8:77:a9:e5:62:6a:2d:11:21:56:
                    4c:f2:3f:b5:2d:d2:81:08:6e:73:b9:76:a2:a9:6c:
                    14:3e:81:61:b2:0f:5b:9b:fd:a3:98:c8:bb:1d:96:
                    10:f1:4d:94:98:27:af:df:ed:29:26:89:f9:61:43:
                    b2:8a:3d:17:26:f3:85:f8:d9:be:3b:75:b9:3f:50:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:5D:BF:C3:11:F4:2B:ED:2A:90:40:93:5C:9A:D8:46:71:D4:15
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/_rBdv8MR9CvtKpBAk1ya2EZx1BU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199605

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:8b:f8:65:79:2a:95:cb:3f:c9:8d:a8:e3:66:f3:47:15:
         34:bf:a7:d6:40:44:b3:10:c2:c9:91:6d:c6:83:b3:53:8a:31:
         05:b2:36:75:d3:a0:0c:9c:ff:97:d9:b3:db:e5:b1:d4:76:8c:
         d4:97:e3:ee:be:05:4b:b0:ac:1e:34:b9:96:94:c0:7b:15:e9:
         e1:bd:1f:33:a6:d0:4f:fe:ee:23:e0:63:9d:77:9e:b3:6a:98:
         9f:63:26:38:c9:b9:bd:4e:a6:0c:a1:70:2d:36:39:38:5f:8b:
         af:5d:cd:0e:01:6a:19:34:aa:60:2d:a9:31:91:77:f1:2d:fd:
         8d:13:2b:04:90:bc:fb:0f:22:bc:be:e5:76:e6:4c:a2:f6:74:
         af:26:3a:4f:02:3f:fd:44:ea:5f:67:c2:d0:9d:34:d2:ad:13:
         c9:c3:29:2e:1c:d2:92:eb:16:a3:1c:20:bc:44:af:7a:3f:b5:
         57:58:cc:f1:d9:50:9d:db:6e:f4:ad:e6:ad:4a:f9:dc:33:79:
         9c:53:2c:f9:b2:ad:b8:37:14:fe:20:ac:54:04:ce:7a:cb:da:
         6f:c9:9e:99:05:89:91:43:a5:3d:ea:19:e1:61:b0:23:38:47:
         b7:10:7c:7a:26:6d:92:77:db:70:20:01:76:74:a9:5c:46:80:
         58:cd:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 12:03:35 2026 by rpki-client