Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/kjCR_bdCRqh1misX4Uz-yIyS1po.asa
File:                     kjCR_bdCRqh1misX4Uz-yIyS1po.asa (raw, json)
Hash identifier:          82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=
Subject key identifier:   92:30:91:FD:B7:42:46:A8:75:9A:2B:17:E1:4C:FE:C8:8C:92:D6:9A
Certificate issuer:       /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial:       019CFB6B7A49D644991182AEFD9523139B73
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/kjCR_bdCRqh1misX4Uz-yIyS1po.asa
Signing time:             Tue 17 Mar 2026 10:50:50 +0000
ASPA not before:          Tue 17 Mar 2026 10:50:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215362
Providers:                AS: 174
                          AS: 8953
                          AS: 9002
                          AS: 62403
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fb:6b:7a:49:d6:44:99:11:82:ae:fd:95:23:13:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
        Validity
            Not Before: Mar 17 10:50:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=923091fdb74246a8759a2b17e14cfec88c92d69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:a1:24:24:96:c4:6b:7a:3c:49:04:6d:37:
                    23:e6:36:98:df:a6:8d:e4:bd:a7:9f:ff:7b:bd:08:
                    0b:14:67:06:e3:fc:7d:05:79:f0:25:b1:7e:d9:6e:
                    16:3f:b8:07:de:e5:93:52:fc:d6:41:cc:11:6a:cd:
                    bd:3b:98:0c:59:7e:ae:9c:28:78:e1:05:2b:96:9c:
                    5e:04:9c:3e:04:3d:f9:d7:47:e7:9c:3a:5e:37:a8:
                    56:f1:67:26:07:07:76:3d:b3:25:65:64:70:cf:63:
                    7a:e9:a8:b2:92:b5:51:5f:bc:79:dd:22:79:21:27:
                    c9:b9:32:01:30:8d:e0:0f:ec:04:ce:ce:b9:7a:bd:
                    de:6e:41:a1:11:e9:ae:7e:07:7f:99:36:56:5d:df:
                    d5:a6:ab:58:e2:78:dc:54:6d:3a:7e:f5:9e:37:ca:
                    52:1e:87:dc:97:d7:05:19:19:ad:aa:7d:22:d1:0e:
                    ee:9b:56:15:69:19:20:10:c5:27:90:b3:a8:f3:ab:
                    91:41:61:c1:72:ec:51:7d:2c:cc:90:fc:41:07:07:
                    fd:e1:06:21:73:a1:a4:f5:b1:0a:65:05:72:74:2e:
                    c4:f8:30:3c:23:c0:ca:55:6d:20:e5:4b:81:fe:1f:
                    cf:93:b6:d8:98:3a:a5:91:0f:d6:24:7b:8d:6d:d3:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:30:91:FD:B7:42:46:A8:75:9A:2B:17:E1:4C:FE:C8:8C:92:D6:9A
            X509v3 Authority Key Identifier:
                keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/kjCR_bdCRqh1misX4Uz-yIyS1po.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215362

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:63:ca:c8:39:66:09:aa:29:cb:94:16:aa:6e:38:41:db:
         14:32:09:3c:1e:fe:4c:f3:71:d5:a3:01:50:6f:2f:48:bf:d1:
         a5:d7:90:81:ea:8c:42:a2:db:34:b6:83:2b:1f:3f:f3:77:ad:
         d2:0d:7f:af:3b:19:94:6f:5c:a9:60:e3:08:97:c0:0c:4a:3a:
         92:c1:76:be:e0:2f:ec:39:4b:d5:ac:ab:ee:3b:2f:51:8e:e2:
         43:1d:7b:19:d4:61:f1:43:2b:e7:6d:69:0e:64:e8:d7:8a:84:
         35:85:ed:b5:d1:01:72:81:81:5d:34:ad:a8:d5:77:6d:8a:f4:
         95:0f:eb:c2:d1:1b:2c:c9:db:db:78:63:79:9d:4d:87:75:c4:
         d0:fc:42:4c:a7:1d:a6:c9:a1:05:c4:6a:dc:85:87:bc:4e:8e:
         47:55:fa:37:db:c3:6c:32:21:1c:3e:ad:e3:4d:be:42:53:1d:
         85:98:bd:10:b6:91:ae:0c:bd:47:df:54:50:8d:81:9a:bf:42:
         9b:f7:c3:6a:0c:12:e2:87:c9:2b:f2:ab:f4:90:db:83:00:ff:
         11:db:2a:fd:e3:c0:29:07:9f:a6:43:c5:10:91:f9:f0:b5:a7:
         dd:b4:8c:de:7b:c9:f3:ad:54:bd:1a:19:cd:bb:36:79:66:12:
         79:f1:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:44 2026 by rpki-client