Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/SFBk5U763P1fy8w9IXg_u7J_QVE.asa
File:                     SFBk5U763P1fy8w9IXg_u7J_QVE.asa (raw, json)
Hash identifier:          HY3zuNVCk+vA8waHsSxh/gtJfK12g23OYWACA1L2CUs=
Subject key identifier:   48:50:64:E5:4E:FA:DC:FD:5F:CB:CC:3D:21:78:3F:BB:B2:7F:41:51
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       019CDCEC2AD4EA3EF88B9E433628F055631B
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/SFBk5U763P1fy8w9IXg_u7J_QVE.asa
Signing time:             Wed 11 Mar 2026 12:43:10 +0000
ASPA not before:          Wed 11 Mar 2026 12:43:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62178
Providers:                AS: 16246
                          AS: 201966
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:ec:2a:d4:ea:3e:f8:8b:9e:43:36:28:f0:55:63:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Mar 11 12:43:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=485064e54efadcfd5fcbcc3d21783fbbb27f4151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:d0:0b:29:3b:31:7e:9d:3b:57:88:41:9b:
                    86:e4:9e:fb:4b:16:d5:30:20:91:69:ca:aa:ca:6b:
                    2a:6f:07:c2:68:52:6d:1c:b6:e3:ff:36:0a:38:35:
                    ba:63:f1:82:fe:db:b5:68:67:1b:7c:a3:62:78:90:
                    ca:70:0f:f1:52:9a:1b:30:3c:eb:14:35:d3:ad:b9:
                    89:d1:d1:72:a5:58:09:e7:8b:10:2d:d3:30:03:1d:
                    40:16:33:02:db:29:49:37:23:02:93:7e:e6:2e:5d:
                    94:46:78:0d:8f:e8:ed:95:a8:21:f2:7a:cb:1d:80:
                    ca:ce:a1:de:34:e8:74:c1:1a:80:de:e7:2e:76:60:
                    13:f8:84:43:bc:51:5d:23:7b:0a:35:1a:ba:db:d0:
                    6c:fd:cb:c6:88:4b:af:54:01:49:00:8a:cc:9b:08:
                    09:e3:69:df:97:a8:e6:26:ac:71:42:88:e5:04:6d:
                    89:20:b9:de:5a:eb:43:0a:fe:97:4c:c7:57:a9:dc:
                    59:19:6c:6d:44:fc:9d:33:8d:b6:5d:26:9d:cc:1f:
                    9f:b0:15:a9:e8:2f:1d:8e:de:84:2a:11:62:0a:3d:
                    42:6d:23:08:61:6e:09:0a:c3:3e:50:8e:c3:c5:dd:
                    be:a4:e9:4a:87:5d:85:fb:35:b4:23:78:da:8e:43:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:50:64:E5:4E:FA:DC:FD:5F:CB:CC:3D:21:78:3F:BB:B2:7F:41:51
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/SFBk5U763P1fy8w9IXg_u7J_QVE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62178

    Signature Algorithm: sha256WithRSAEncryption
         77:10:53:a2:83:1a:07:0b:71:7a:4c:66:7c:84:ee:11:5e:94:
         10:87:50:a8:2f:48:fc:c8:36:58:d9:94:52:f4:e8:fc:32:75:
         67:d3:45:f8:05:85:f7:94:4a:89:87:07:25:9b:91:1e:b3:39:
         8d:e5:f1:b9:86:d7:f9:11:e0:45:02:32:2f:04:01:28:ff:ae:
         a2:38:0b:22:d3:2b:c0:20:c5:6e:a6:ef:06:05:9e:45:01:d2:
         fd:f3:4b:fe:ab:c5:b0:a8:d2:c9:72:df:bd:91:7e:e5:1e:10:
         42:1f:6e:cf:09:1d:e7:d2:c0:c1:1a:f9:da:04:39:47:5e:49:
         21:04:13:d5:94:f4:86:29:a1:08:ca:5b:00:f8:b4:ee:2e:8e:
         97:9f:be:91:7a:22:8b:3e:b7:0f:39:a6:10:55:dc:96:67:32:
         13:5f:58:41:cc:f9:9b:72:ee:de:63:cb:bb:b1:48:a8:d4:d1:
         f2:aa:9e:56:5c:66:6a:07:ef:55:ee:18:9e:1d:61:35:c1:da:
         60:05:91:7b:16:b1:ff:dd:01:96:4f:c1:c6:ab:36:c8:fb:47:
         30:2e:18:14:19:a0:04:38:81:17:e6:d5:2d:98:fa:a6:f9:48:
         76:3c:4c:d6:bf:e7:28:5c:3f:ce:37:2d:a5:ee:a0:7c:21:8e:
         91:af:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client