Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/d1Tx0BRhO0A755H4u6noDy2gPLs.asa
File:                     d1Tx0BRhO0A755H4u6noDy2gPLs.asa (raw, json)
Hash identifier:          WM47Vnnr7aAw05benty80wMA9v/i6b9NhWin81FN414=
Subject key identifier:   77:54:F1:D0:14:61:3B:40:3B:E7:91:F8:BB:A9:E8:0F:2D:A0:3C:BB
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019D2ADA86FB36797B9A40FCC98CA8AB217D
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/d1Tx0BRhO0A755H4u6noDy2gPLs.asa
Signing time:             Thu 26 Mar 2026 15:54:17 +0000
ASPA not before:          Thu 26 Mar 2026 15:54:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:da:86:fb:36:79:7b:9a:40:fc:c9:8c:a8:ab:21:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Mar 26 15:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7754f1d014613b403be791f8bba9e80f2da03cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:4c:16:ca:35:3e:fb:4f:62:c1:33:ba:37:
                    0a:b7:24:2d:3e:62:5c:f1:e6:ad:ef:7b:6a:1a:b5:
                    fe:16:da:10:21:10:aa:7e:72:82:8d:e4:60:e3:ba:
                    49:ff:b3:c6:11:8d:bc:2e:24:c4:f9:ed:2a:b0:e7:
                    b8:66:2a:87:5a:34:41:2a:49:09:0f:cc:b5:eb:ea:
                    b3:63:c5:63:9f:ca:f5:93:61:45:05:35:10:c7:12:
                    36:56:82:52:63:33:3a:08:ba:aa:ff:dc:cf:47:42:
                    65:e5:2c:28:45:fa:2a:1e:59:e1:c5:3f:3c:d6:8b:
                    7e:a1:64:61:41:c2:89:15:30:0c:98:86:70:9c:62:
                    5a:16:ac:4a:88:2c:44:0d:10:85:d3:0a:28:f4:65:
                    83:61:b8:5b:0d:bd:ad:f8:c7:a3:06:01:ea:bb:9f:
                    40:a8:5a:af:80:f2:45:4c:cc:a2:10:5d:ca:4d:41:
                    63:51:d8:86:bd:75:e6:ba:cd:fe:03:16:b4:3c:9b:
                    46:ba:94:49:4e:c1:c3:d3:86:03:7b:ce:0f:07:35:
                    a5:c3:28:ce:96:e8:58:fb:c9:3b:10:d0:f7:a2:40:
                    76:fd:0c:db:d6:b8:dc:fe:39:87:9b:94:ce:89:50:
                    96:3f:c1:7c:3d:42:df:36:4c:ce:23:c6:a9:0e:ee:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:54:F1:D0:14:61:3B:40:3B:E7:91:F8:BB:A9:E8:0F:2D:A0:3C:BB
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/d1Tx0BRhO0A755H4u6noDy2gPLs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         39:26:1f:c6:e6:cc:09:ab:af:6a:5e:07:fa:bb:04:e8:ed:ad:
         80:6f:62:54:ff:ca:b5:80:4b:01:97:f9:34:7a:88:29:db:56:
         80:d5:27:a1:0c:d3:c2:f3:e9:49:29:93:8a:5f:3d:e2:bf:70:
         fe:f6:c6:85:65:c7:ab:fb:a8:4b:65:c1:1d:09:5c:4d:6f:ef:
         42:0f:9a:e0:3e:f3:8b:33:6e:c6:92:a0:67:3a:3c:1b:99:d9:
         c4:a2:37:89:63:a1:50:41:53:2f:e8:e2:24:ab:83:c1:ed:1b:
         29:f1:75:ac:cd:8f:fa:21:a6:f8:6a:d7:a7:1e:4e:92:a7:ef:
         c1:c1:a6:2b:66:40:5c:a8:c9:d6:6e:db:e5:2b:cb:57:d4:b2:
         1f:08:31:53:5b:c8:00:9b:54:82:fb:bf:34:fc:1e:4f:e1:fa:
         da:1a:8c:60:a7:85:ec:aa:28:da:39:7e:e9:78:22:77:f3:b2:
         8f:a6:d9:73:e4:ae:79:62:1e:c2:da:99:ed:44:c5:45:41:84:
         d5:cf:d5:66:be:df:d8:92:4b:2b:67:69:eb:2f:0c:a1:3a:14:
         05:03:5a:c2:13:4c:ef:e6:ac:ac:37:1b:60:79:a5:63:48:3c:
         2a:8a:37:c8:f3:38:87:b2:f8:8d:b5:23:a9:84:87:44:a4:2f:
         31:d1:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:52 2026 by rpki-client