Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/rP_iL3YlKk2j27EGy1gjBiPhqWk.asa
File:                     rP_iL3YlKk2j27EGy1gjBiPhqWk.asa (raw, json)
Hash identifier:          VdGAuCTZJ+tfevhKttwjpobcQd2Q6iTpWsuzsp314mE=
Subject key identifier:   AC:FF:E2:2F:76:25:2A:4D:A3:DB:B1:06:CB:58:23:06:23:E1:A9:69
Certificate issuer:       /CN=14655b0b1e3cf0ad7f5bea7527e1dbe18c652f14
Certificate serial:       019F84EC6BF8F7DA8CA4899244C26DB55F9E
Authority key identifier: 14:65:5B:0B:1E:3C:F0:AD:7F:5B:EA:75:27:E1:DB:E1:8C:65:2F:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/rP_iL3YlKk2j27EGy1gjBiPhqWk.asa
Signing time:             Tue 21 Jul 2026 13:45:14 +0000
ASPA not before:          Tue 21 Jul 2026 13:45:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199717
Providers:                AS: 174
                          AS: 2914
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:ec:6b:f8:f7:da:8c:a4:89:92:44:c2:6d:b5:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14655b0b1e3cf0ad7f5bea7527e1dbe18c652f14
        Validity
            Not Before: Jul 21 13:45:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=acffe22f76252a4da3dbb106cb58230623e1a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:27:ca:47:61:fc:2f:dd:4a:21:97:af:a0:
                    78:f4:44:37:eb:d1:c3:e1:de:f2:aa:54:83:21:7c:
                    fc:f2:5d:3e:77:e3:a2:2c:b2:a7:7b:3f:66:3c:82:
                    b2:7c:90:55:0d:59:61:71:7a:97:67:7c:2d:b0:6e:
                    ee:f5:08:b8:a2:cf:ee:f0:6e:25:51:0a:37:75:c8:
                    40:30:08:d9:7f:cc:b2:2d:9a:05:85:21:8b:76:77:
                    b2:21:bd:50:d0:2b:d1:89:be:bc:fc:70:5a:e5:04:
                    fb:3d:e2:2b:c4:5c:8a:6d:6f:ad:35:8f:96:d2:4d:
                    fc:d7:d4:3e:df:1e:1c:46:70:f7:5b:14:9b:aa:b4:
                    63:25:8a:d6:b0:3d:ae:46:bd:e8:c5:18:39:dc:a0:
                    2b:a2:23:ee:b8:df:ba:be:76:ab:9e:96:a4:c3:cc:
                    90:c6:5e:d3:aa:6f:b4:d5:27:52:82:0f:ec:77:b5:
                    44:c1:dc:91:3d:21:35:f3:4f:5f:49:24:63:e8:2e:
                    28:e3:48:8d:4a:3d:b4:7c:f0:92:4b:3a:90:65:16:
                    9b:1c:b9:07:36:8e:27:34:ba:c9:34:de:5c:cd:c4:
                    12:6d:76:91:d8:6a:a9:e2:2f:57:41:ff:bd:14:45:
                    37:fd:0f:64:8f:ef:78:e3:9f:e9:a5:8e:29:b9:27:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:E2:2F:76:25:2A:4D:A3:DB:B1:06:CB:58:23:06:23:E1:A9:69
            X509v3 Authority Key Identifier:
                keyid:14:65:5B:0B:1E:3C:F0:AD:7F:5B:EA:75:27:E1:DB:E1:8C:65:2F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGVbCx488K1_W-p1J-Hb4YxlLxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/rP_iL3YlKk2j27EGy1gjBiPhqWk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b5ad2-201f-4b4f-8bb8-54d17347c120/1/FGVbCx488K1_W-p1J-Hb4YxlLxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199717

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:52:7a:70:07:c0:ce:79:5a:68:81:9d:1e:d7:b7:6c:c1:
         7c:b0:f5:e4:3a:0b:e3:5b:79:40:5f:7b:13:39:bb:f4:74:9a:
         17:73:95:b9:7a:80:3f:86:eb:6e:52:c5:82:11:e6:83:36:e0:
         2f:99:d3:d4:1a:c7:56:44:4a:eb:b0:07:1b:1f:a8:e9:ce:e2:
         40:a9:ba:6f:98:a1:b5:2e:00:1d:6a:2b:c3:7e:ec:c7:6f:34:
         4a:1c:86:65:db:84:18:3d:0d:86:6b:92:7f:aa:3b:3e:43:aa:
         16:f7:fe:48:b9:dd:0b:0f:9f:f0:71:72:87:b0:0c:31:52:20:
         f9:86:a6:40:31:83:8f:15:b7:d2:c9:9a:c5:f8:4d:9f:18:75:
         7b:cd:26:aa:dc:88:a9:bb:6e:19:46:52:ae:e3:a4:5f:f0:1a:
         de:1d:bf:78:c1:d1:e3:5f:f8:cb:ff:7b:d8:09:17:15:15:7a:
         b2:00:89:4d:2a:3b:43:ac:80:4c:4c:83:53:98:8b:0f:4d:e7:
         42:36:5b:34:e3:21:cf:31:10:35:a0:7c:54:b9:43:6e:d7:2e:
         8a:d2:a4:39:1a:18:ac:9e:f3:fd:33:95:21:b5:6c:75:fe:b1:
         4c:02:ba:ab:fe:26:3a:23:22:c7:98:9d:6e:dd:22:7d:d3:3a:
         ee:f2:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:59 2026 by rpki-client