Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa
File:                     1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa (raw, json)
Hash identifier:          HPraMMTMSnrRxM+nmnBuJokSt3AldiyftyO21H+JBCM=
Subject key identifier:   FB:41:12:8C:27:01:80:9F:62:95:1C:F8:5A:99:C3:88:C8:25:94:72
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       019CB8377016C8863A17A9B76AB606FAF091
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa
Signing time:             Wed 04 Mar 2026 09:39:26 +0000
ASPA not before:          Wed 04 Mar 2026 09:39:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            21430
Providers:                AS: 174
                          AS: 1299
                          AS: 3491
                          AS: 39392
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b8:37:70:16:c8:86:3a:17:a9:b7:6a:b6:06:fa:f0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: Mar  4 09:39:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb41128c2701809f62951cf85a99c388c8259472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:ba:6c:2c:35:5b:e7:36:51:6a:ee:95:0b:
                    3a:81:b4:ff:ab:44:38:b0:e1:27:2f:fe:4d:8d:96:
                    82:ce:ae:c6:fc:2a:52:53:b3:12:8b:90:02:19:f4:
                    94:44:06:4e:db:f0:0d:cc:21:74:96:10:3b:39:0b:
                    3e:91:94:46:d6:39:05:54:2b:25:7b:7d:50:88:6b:
                    ed:f0:6c:6b:56:7b:5f:b3:78:f0:c9:2e:a1:ba:0b:
                    cd:5e:41:d7:7a:9f:21:1f:59:2e:81:7a:0c:20:1b:
                    06:57:e8:06:63:d4:b1:71:3c:d5:76:43:c9:59:62:
                    43:8f:e0:a4:8e:1f:90:70:8d:65:6a:91:1f:f0:40:
                    cf:14:f7:5e:5e:2f:a4:3d:c9:6e:7e:a5:a5:8d:be:
                    6e:ed:b0:7c:5e:fa:03:4d:77:5a:70:dc:0d:3b:7e:
                    a5:78:18:7a:7e:fb:34:5f:1e:bc:ae:d2:08:68:e5:
                    4d:a0:2e:90:16:8a:61:de:38:f7:61:54:9f:2c:73:
                    24:29:c9:47:6c:04:3d:f9:73:08:11:e7:1b:7c:45:
                    6f:97:e0:c8:b8:dc:b3:3d:b8:bc:a5:c8:2d:89:81:
                    46:af:cc:a3:67:4a:0e:29:9e:21:43:b3:cb:0f:4c:
                    c2:fb:5c:69:2d:d9:4f:cb:8a:af:30:4c:e3:66:38:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:12:8C:27:01:80:9F:62:95:1C:F8:5A:99:C3:88:C8:25:94:72
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21430

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:f8:e0:d7:e8:6c:99:38:36:80:cc:15:c6:6d:0f:3f:5e:
         d9:a1:ff:c6:96:d1:f4:db:d2:a7:94:7d:7a:83:8b:c5:ab:c1:
         1f:b2:14:d1:f1:38:02:7d:f3:41:e5:1c:e3:4a:2b:65:20:ae:
         01:6f:69:85:1b:d6:61:d2:10:c0:7f:a0:22:bd:be:8a:7f:c2:
         ea:42:15:00:1b:55:d2:92:77:7b:49:d8:98:32:fe:67:43:fb:
         10:60:35:67:7e:b5:05:c5:da:66:9d:57:c0:2c:98:45:a1:7a:
         11:96:53:c0:5a:d9:b0:12:b3:b0:1f:d1:76:ec:05:11:0d:7c:
         2a:19:d7:dd:4e:e9:de:6d:c9:79:51:72:40:07:df:7a:ad:10:
         64:51:56:33:a7:93:1c:49:00:f4:2c:7b:a1:e6:67:3d:5c:31:
         f7:2c:92:25:0f:22:1a:e4:ba:b1:7f:3c:87:f3:f7:d8:97:61:
         dc:8d:88:b7:a2:73:aa:35:2e:5d:bb:28:47:36:f0:17:7e:a5:
         4f:53:6a:16:ff:9e:a3:37:c1:d3:ee:bb:6c:1a:b4:5c:9c:a9:
         3e:0b:41:24:e7:d9:d7:8f:58:12:06:e9:99:c0:e3:2f:02:98:
         5f:4c:d5:61:9a:2d:7c:bc:00:3e:3d:c2:6c:95:09:3a:8d:2b:
         5c:f3:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:51 2026 by rpki-client