Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/FOOPB2i79v30ZU4e59nJjmdovPU.asa
File:                     FOOPB2i79v30ZU4e59nJjmdovPU.asa (raw, json)
Hash identifier:          k1uJDIk+79tpD5LznP7cblhPtOamlM7MezLEhCaFR7U=
Subject key identifier:   14:E3:8F:07:68:BB:F6:FD:F4:65:4E:1E:E7:D9:C9:8E:67:68:BC:F5
Certificate issuer:       /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial:       019FC66C03B2D6F4A8189BE4800D18454CC4
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/FOOPB2i79v30ZU4e59nJjmdovPU.asa
Signing time:             Mon 03 Aug 2026 06:59:55 +0000
ASPA not before:          Mon 03 Aug 2026 06:59:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215448
Providers:                AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:6c:03:b2:d6:f4:a8:18:9b:e4:80:0d:18:45:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
        Validity
            Not Before: Aug  3 06:59:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14e38f0768bbf6fdf4654e1ee7d9c98e6768bcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:ab:51:74:63:b6:fd:95:5b:35:f5:fe:4f:
                    13:23:97:bd:9f:23:3d:1f:1b:88:2e:46:31:23:3c:
                    22:98:ad:b8:9b:73:ac:f0:79:00:f6:b7:81:93:9f:
                    95:ed:e0:8b:28:f7:66:41:1d:c4:e9:f0:e2:6d:1d:
                    87:b8:f6:b6:d1:61:55:10:83:3d:cd:0e:8c:cb:e3:
                    1f:98:04:19:89:63:59:f8:ab:f8:99:3e:91:44:15:
                    a6:1b:55:d8:c9:8a:86:0b:a4:d4:a2:ae:8f:a2:16:
                    66:96:8c:81:b9:a5:30:f8:1c:2b:b1:21:7b:e8:0d:
                    99:58:6b:6d:a0:f6:40:9d:fd:d1:92:47:ef:f0:0a:
                    20:e3:1e:a3:6f:f6:6d:1f:7d:46:55:81:fe:b8:67:
                    9f:88:20:9b:12:22:04:27:32:f1:f5:78:f0:d0:34:
                    7d:8b:f0:7d:2a:eb:42:47:86:e6:84:4c:0b:5c:b6:
                    c6:e4:9e:19:76:33:24:8f:d7:ad:45:01:1e:5f:53:
                    0b:ac:b0:34:d6:ad:38:51:c0:bd:08:b9:fa:9e:07:
                    d2:0a:30:15:f0:08:55:fb:ef:e9:70:bb:9c:ba:bf:
                    54:2e:99:0f:f5:eb:09:87:27:5d:43:e2:89:2a:50:
                    87:48:42:08:0c:b2:b7:8e:b0:1a:e4:50:69:e6:31:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E3:8F:07:68:BB:F6:FD:F4:65:4E:1E:E7:D9:C9:8E:67:68:BC:F5
            X509v3 Authority Key Identifier:
                keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/FOOPB2i79v30ZU4e59nJjmdovPU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215448

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:4c:5f:51:7c:c8:fe:d6:de:65:c7:83:9e:fa:f8:52:25:
         31:3c:ee:5c:c3:9c:02:a3:a3:f6:d4:26:7a:1b:34:66:91:6a:
         19:8b:97:0a:09:21:05:f1:fc:cb:00:b0:69:57:fc:54:88:39:
         f2:99:c7:cf:c0:e3:41:d7:cf:2f:8e:f2:04:6b:3c:ea:6e:e5:
         67:07:92:9d:d0:f1:ab:ab:95:07:d8:ae:cf:03:a7:3a:2a:a6:
         09:50:ab:20:af:b2:be:8f:68:f1:41:44:52:86:30:d6:5c:f3:
         20:f0:34:7e:90:01:68:45:84:33:17:a7:9a:f4:18:c9:37:27:
         b0:af:f9:a8:dd:1f:28:1d:ae:cf:5e:07:bd:84:09:5a:c8:bd:
         d3:df:b4:5b:6d:da:a5:64:4d:d8:37:c9:27:2a:74:f4:82:e3:
         14:c6:76:1e:37:4b:6a:4a:49:2d:57:23:2b:c4:df:38:b3:ee:
         c6:1e:71:ba:71:fa:33:5c:ff:7f:fc:4e:fb:dd:fd:ed:b7:d1:
         be:5f:27:eb:09:5b:9e:78:4a:f7:93:bb:2d:fa:ad:68:95:11:
         aa:45:bf:75:ad:b0:20:b1:be:40:1c:2f:5a:54:44:c2:e0:26:
         0d:75:8a:0d:c1:2f:eb:0e:d3:21:de:f7:3f:fb:ca:b1:c5:96:
         44:ab:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:45 2026 by rpki-client