Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa
File:                     BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa (raw, json)
Hash identifier:          Kt6PxLaHA8KqzdMw5yzTBeC2Dt7pKSQXeeJoIQjj8h4=
Subject key identifier:   04:1A:81:D1:2D:81:67:53:22:A6:B0:69:F9:96:D4:F1:70:89:16:E3
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       01A0923A92931FFCC52DC45E366D7C3F6F4F
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa
Signing time:             Fri 11 Sep 2026 20:48:27 +0000
ASPA not before:          Fri 11 Sep 2026 20:48:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208794
Providers:                AS: 174
                          AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:92:3a:92:93:1f:fc:c5:2d:c4:5e:36:6d:7c:3f:6f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Sep 11 20:48:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=041a81d12d81675322a6b069f996d4f1708916e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:12:db:3a:1d:b1:bc:c9:28:02:60:78:9e:
                    09:1b:b3:f8:5f:0e:08:6d:27:4a:1f:35:7b:76:74:
                    34:f4:dc:7d:a0:ea:bc:61:e4:42:84:e2:64:33:42:
                    18:e4:76:75:98:4e:f4:a3:54:c3:a1:bd:74:b0:16:
                    db:1a:b4:24:4b:b6:a0:77:21:7e:1c:71:91:45:f4:
                    89:6f:26:57:f4:62:b7:6e:ea:8b:ba:8c:12:a0:e0:
                    7a:7c:6c:99:49:b7:06:81:20:d8:1f:7d:80:5c:34:
                    eb:04:8f:15:6a:2f:62:91:f9:57:33:94:d2:42:31:
                    f8:9b:18:df:ff:2c:45:e8:b9:6a:99:63:dc:cf:42:
                    c6:9b:15:33:5d:e1:4f:0f:fc:c4:c9:eb:93:be:14:
                    c9:22:f5:75:54:16:36:c3:c6:bb:20:79:70:61:7e:
                    a2:63:83:95:2b:52:4e:5a:6a:ee:5f:3a:09:84:95:
                    55:78:7a:2e:05:c0:7c:ed:65:d4:93:4b:9b:b1:b8:
                    9b:fb:e9:3e:08:56:06:5c:15:ef:df:15:0d:3b:70:
                    74:f5:59:e4:7c:35:ee:ed:76:3b:8d:01:e7:27:73:
                    05:eb:c7:00:5b:14:17:11:d2:f5:a6:ab:eb:21:12:
                    6a:49:89:b7:ba:4b:78:5c:67:59:dd:81:83:63:15:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:81:D1:2D:81:67:53:22:A6:B0:69:F9:96:D4:F1:70:89:16:E3
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208794

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:b4:ee:d7:0e:80:64:23:50:f8:5f:63:c5:0e:b2:c5:40:
         3e:5d:43:47:72:b0:31:33:06:e5:0b:f6:9d:4e:fa:1b:76:12:
         96:b5:81:49:77:01:e3:c2:30:27:7d:cf:68:4c:04:53:e6:94:
         32:f7:8f:1c:21:b1:13:bb:9e:7b:ad:45:e1:da:90:44:80:e5:
         0e:d5:39:b1:30:4d:68:5d:59:5e:76:78:66:e1:ea:8c:97:bf:
         0b:44:93:96:95:2e:07:ae:4b:60:ac:79:7b:d8:56:c8:b6:a7:
         93:b2:a0:0e:df:a1:46:64:dc:fd:a1:06:a2:4a:d4:85:bb:89:
         cc:c5:a8:47:bb:39:46:5e:2d:c7:ab:60:09:cc:82:d2:2d:83:
         5e:82:ca:22:07:19:c5:9b:30:77:ef:f7:c8:29:ae:2d:b7:12:
         f9:21:16:08:5c:e7:67:46:4a:b1:78:e7:77:08:1e:c5:49:de:
         48:4c:2f:5f:ce:58:88:aa:29:0d:e5:dd:7a:ea:6d:f0:6f:c7:
         45:1a:54:96:c3:c8:b6:9d:e1:33:b5:be:fc:10:fc:c6:7f:08:
         63:58:ab:1e:93:ef:4b:38:49:d6:c9:4b:55:8d:06:dc:1f:2b:
         8c:7a:25:74:9f:2e:e5:26:43:65:91:a3:e4:8e:ff:c1:0e:d5:
         f3:80:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 09:17:14 2026 by rpki-client