Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa
File:                     1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (raw, json)
Hash identifier:          1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=
Subject key identifier:   F9:90:37:B6:36:57:B5:39:E5:8D:BD:7F:2F:26:0A:A0:27:B2:38:B8
Certificate issuer:       /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial:       019C4CB679356DA3A0E053BE4547F9895F9D
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa
Signing time:             Wed 11 Feb 2026 12:39:12 +0000
ASPA not before:          Wed 11 Feb 2026 12:39:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201472
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:b6:79:35:6d:a3:a0:e0:53:be:45:47:f9:89:5f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
        Validity
            Not Before: Feb 11 12:39:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f99037b63657b539e58dbd7f2f260aa027b238b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:df:34:c2:07:bf:06:cf:2e:6e:85:e0:65:
                    15:26:b0:6a:d3:fc:d4:ec:5e:01:a9:90:0b:32:36:
                    70:8f:b8:e0:e7:19:c5:0d:f1:97:ef:31:01:7b:b0:
                    02:c1:cb:f3:00:5a:17:c2:f2:86:2d:a4:78:61:46:
                    7d:08:bd:db:6d:91:b6:0a:f9:4d:97:68:fa:bf:95:
                    9d:5a:82:24:6b:ac:a3:ea:6c:b7:d1:30:0e:11:3d:
                    86:1f:74:ce:92:3d:34:3d:91:b3:c9:91:5c:d5:8d:
                    8a:f8:49:85:21:5a:9d:81:25:94:13:49:0a:dd:15:
                    cd:b3:ba:c3:ba:a9:ca:3e:e7:48:ee:e2:47:c8:83:
                    cb:aa:3b:fa:9a:09:25:46:a2:46:27:5d:f5:51:2a:
                    5e:6c:a1:81:3f:f1:a6:a2:5d:ea:85:79:66:f3:c1:
                    6d:42:a6:29:03:24:80:df:31:de:ae:c1:eb:2b:6b:
                    90:95:37:35:64:0f:93:b6:3c:ec:81:d6:10:78:8d:
                    de:fd:37:4d:98:36:cd:12:e9:be:8e:90:ec:5a:2d:
                    61:82:5c:07:fe:d1:7d:04:1e:b7:d5:9a:1d:14:02:
                    fe:85:08:28:83:fe:67:ce:80:0b:df:d6:3d:13:57:
                    00:40:3c:2a:01:a0:a0:bb:85:58:73:47:f6:1a:a4:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:37:B6:36:57:B5:39:E5:8D:BD:7F:2F:26:0A:A0:27:B2:38:B8
            X509v3 Authority Key Identifier:
                keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201472

    Signature Algorithm: sha256WithRSAEncryption
         9f:69:67:18:0f:d3:7f:6e:1d:17:99:91:ac:82:8d:d3:08:27:
         ab:69:ec:d0:58:96:c4:fe:06:89:b9:dc:44:9a:93:b4:00:7c:
         32:5a:c7:ef:9f:e0:fd:8a:3b:95:d9:24:a0:8c:3e:be:2e:2f:
         b9:3a:92:c3:85:0b:66:65:b1:b0:41:6f:c4:b8:d6:49:2a:89:
         c1:8e:7f:d8:06:cc:85:e9:e2:fc:00:1a:6c:6d:d8:a4:f9:5a:
         48:00:72:11:06:e7:ef:b4:c5:04:dd:24:42:ec:ba:af:e7:87:
         6c:3c:4c:5c:32:89:41:6f:67:df:5a:0f:3a:04:39:c7:c2:83:
         bb:4a:cb:3d:3c:d0:35:f3:be:cb:5f:74:de:89:62:48:26:72:
         0a:a1:3a:4c:1d:57:73:79:8c:da:3b:ee:ee:6c:21:33:64:d4:
         9f:38:97:a6:72:95:ef:b8:34:4a:29:03:41:9c:1f:0b:bc:d0:
         26:24:6f:06:68:31:3c:97:47:f6:94:85:cd:87:3a:17:62:9c:
         18:c7:0f:74:79:83:c4:97:84:d9:0f:55:ab:ec:29:72:46:f3:
         0b:c1:0e:b0:c9:6e:e6:e7:08:4f:07:81:0d:98:af:81:47:00:
         1b:b0:f2:75:fb:bf:d2:57:d7:89:40:02:d2:28:6d:a2:05:79:
         9a:99:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:04:48 2026 by rpki-client