Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/FRs40rH1nsbuTD3XEyCW5bV_Pds.asa
File:                     FRs40rH1nsbuTD3XEyCW5bV_Pds.asa (raw, json)
Hash identifier:          cZJXay+u0fbI+PrPs4z5BwTR1CMRlGSWGEvUhPzA/As=
Subject key identifier:   15:1B:38:D2:B1:F5:9E:C6:EE:4C:3D:D7:13:20:96:E5:B5:7F:3D:DB
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D767C7B8D5781FE3D5B0B4407E224
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/FRs40rH1nsbuTD3XEyCW5bV_Pds.asa
Signing time:             Thu 10 Sep 2026 09:02:01 +0000
ASPA not before:          Thu 10 Sep 2026 09:02:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57963
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:76:7c:7b:8d:57:81:fe:3d:5b:0b:44:07:e2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=151b38d2b1f59ec6ee4c3dd7132096e5b57f3ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:82:74:7a:16:9f:11:d3:84:60:44:5d:fa:
                    27:ed:eb:1e:4a:d5:1b:c9:d1:56:cb:9a:93:78:58:
                    4a:22:d0:cb:ed:fa:96:ed:aa:e8:ea:86:a0:4c:8a:
                    c7:7c:72:90:69:a8:95:8f:e6:3d:e6:f4:6e:46:07:
                    73:67:c7:4d:b9:a6:01:20:28:c9:6c:5e:a6:c8:cc:
                    00:3b:9b:d0:c5:0e:c3:c4:6b:3d:e8:e5:72:ba:d1:
                    46:c4:ba:5c:4e:77:02:3d:e1:c4:aa:e2:fa:ed:43:
                    f7:c8:49:ae:c6:7d:0b:ed:ee:c1:49:34:0d:de:3c:
                    0f:4a:8f:aa:82:a0:81:bf:45:9e:30:cd:ed:b2:26:
                    a8:36:77:10:25:92:59:bd:b3:5c:8d:f0:73:df:d8:
                    02:6e:e1:b3:42:e9:67:a5:cb:e7:47:62:ad:03:07:
                    c1:4e:76:77:3e:c8:bb:1d:5f:31:39:ce:16:2d:42:
                    ef:e8:d3:fd:32:24:0e:2f:b7:10:90:34:34:d7:73:
                    10:9c:c1:13:a2:19:6e:9b:dd:42:a1:91:78:38:97:
                    ac:53:1f:90:b8:ea:23:ea:3e:e6:a4:bb:f9:7d:e4:
                    f1:7d:c6:22:09:6a:fe:56:01:27:25:3a:87:df:42:
                    b9:57:43:a3:a1:2a:13:22:ef:20:5c:09:9b:c5:da:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:38:D2:B1:F5:9E:C6:EE:4C:3D:D7:13:20:96:E5:B5:7F:3D:DB
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/FRs40rH1nsbuTD3XEyCW5bV_Pds.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57963

    Signature Algorithm: sha256WithRSAEncryption
         de:7e:4d:b4:be:c6:e2:52:6a:65:2c:0e:a6:16:1d:09:54:eb:
         0c:d4:8b:cc:38:1e:38:70:7a:53:b6:01:3c:83:da:7f:74:f4:
         c9:02:fa:d3:55:16:75:5c:61:ee:a6:b6:f2:2d:99:9f:1b:25:
         21:59:8d:99:f4:b7:ea:96:f1:fc:69:fd:d3:9c:08:6b:cd:a3:
         cc:94:de:f7:93:e6:4e:50:e9:41:1e:f7:a8:7c:7d:78:77:5e:
         a9:fe:be:a4:89:82:a1:cb:4b:f9:de:8b:0d:2c:ed:f0:67:8e:
         57:b1:3e:1a:27:0b:a8:8f:66:ed:81:d2:33:1a:aa:b9:eb:ee:
         0b:ca:d8:18:e5:02:a7:e6:6c:bd:c5:70:d0:93:97:41:53:c6:
         83:53:2b:28:09:58:23:7c:93:be:ef:10:46:53:df:f2:ee:8e:
         f3:45:af:02:c8:2b:a7:00:61:a1:14:33:e1:2f:bc:f8:dd:6f:
         00:b0:a1:0e:1f:64:54:e6:53:76:a4:9b:ca:ac:1c:54:52:6d:
         c6:6b:55:83:a5:85:86:db:16:83:b2:da:cd:75:75:1b:b7:11:
         4b:bb:75:11:8a:9d:cc:0c:7d:9a:cb:cd:89:2b:00:5a:cc:4b:
         94:07:3c:74:9f:67:f0:8d:4e:06:c5:f5:f6:ab:1a:58:81:67:
         47:c9:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:38 2026 by rpki-client