Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/odwPZDNuXyDgnLpxFjQripVtxTU.asa
File:                     odwPZDNuXyDgnLpxFjQripVtxTU.asa (raw, json)
Hash identifier:          igJaENyyF56dOLL+KkaJi4krAn2njacTd33CsRM20MU=
Subject key identifier:   A1:DC:0F:64:33:6E:5F:20:E0:9C:BA:71:16:34:2B:8A:95:6D:C5:35
Certificate issuer:       /CN=fdce12d95c046454903a7b2a56289db791635a6d
Certificate serial:       01A0A1C489F2D8BC771617DF2E6E0330AC13
Authority key identifier: FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/odwPZDNuXyDgnLpxFjQripVtxTU.asa
Signing time:             Mon 14 Sep 2026 21:13:27 +0000
ASPA not before:          Mon 14 Sep 2026 21:13:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201254
Providers:                AS: 35661
                          AS: 212024
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a1:c4:89:f2:d8:bc:77:16:17:df:2e:6e:03:30:ac:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdce12d95c046454903a7b2a56289db791635a6d
        Validity
            Not Before: Sep 14 21:13:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1dc0f64336e5f20e09cba7116342b8a956dc535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:ea:48:b0:ed:5b:ad:e6:74:29:de:4c:b7:
                    21:18:54:5c:53:01:8a:06:13:7e:0a:3d:dd:4f:bf:
                    24:bc:88:f7:bf:a6:2e:74:08:8a:10:bc:ff:d7:d8:
                    b0:fd:0a:b9:96:1e:6b:f5:f0:4d:b1:09:cb:e5:a1:
                    ac:0f:52:56:00:95:05:81:26:5d:fc:4a:b8:ba:bd:
                    b2:a3:1c:c7:93:c7:14:39:3b:d5:e7:a8:df:40:62:
                    31:1d:51:a8:b7:83:00:77:70:e0:f6:b3:e8:d2:93:
                    c4:f5:6f:e8:b1:91:85:a1:30:da:71:ac:60:d7:8b:
                    5a:55:6f:24:30:fe:52:6e:d8:62:36:44:2b:67:44:
                    22:48:31:99:09:c0:02:54:ab:d7:85:b6:50:f7:6c:
                    fe:9f:17:f7:aa:ea:fe:d5:20:53:7c:97:b4:39:19:
                    2c:b2:5b:ff:f9:01:e9:8a:f1:69:8d:f8:94:d2:70:
                    ad:a1:2d:37:b9:39:9a:40:b9:d0:df:fe:51:16:4f:
                    35:53:e8:ab:61:cb:cf:d6:ca:30:6a:4c:08:e8:23:
                    91:61:b9:0d:63:85:76:9d:45:7a:51:9c:f3:46:aa:
                    92:ed:54:77:84:e9:3c:80:3d:9b:64:f0:22:d0:65:
                    8e:84:f2:72:c3:b4:dd:5d:31:66:c6:2f:8b:89:b6:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:0F:64:33:6E:5F:20:E0:9C:BA:71:16:34:2B:8A:95:6D:C5:35
            X509v3 Authority Key Identifier:
                keyid:FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/odwPZDNuXyDgnLpxFjQripVtxTU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201254

    Signature Algorithm: sha256WithRSAEncryption
         49:32:16:8c:b8:2c:0d:23:54:ce:9f:7f:85:c7:09:ff:dc:a5:
         d3:41:88:d3:08:7b:3d:f7:e5:10:74:c6:10:f3:18:dd:18:a9:
         8b:3e:8b:de:d3:12:47:12:bf:c5:4c:6c:64:e4:fc:03:90:d4:
         8f:dd:36:9d:af:9e:dd:21:be:b5:5a:a8:ed:d4:f4:b1:9c:cb:
         52:74:c0:74:22:ca:11:3b:e6:2f:a3:30:1e:3a:72:ea:8a:c2:
         9d:14:31:0e:29:52:3a:31:d9:bd:2e:31:75:d7:ea:5f:14:df:
         28:c2:43:f6:8d:65:de:11:e6:f0:be:28:0d:69:a0:f5:c0:76:
         f5:1d:93:a9:8c:84:ed:aa:a0:c9:af:12:be:d6:17:74:73:5c:
         4e:85:d8:18:be:50:9c:2e:f9:a2:e3:d6:ef:c0:35:3e:32:0b:
         b0:7a:4c:3e:27:0a:bd:6a:3e:da:d8:06:a9:1c:cd:52:94:ae:
         18:cd:d0:cc:f6:d3:c3:91:4c:d1:e2:ec:31:e4:ef:48:fa:9a:
         34:dd:0b:d6:7a:14:a5:ea:42:f5:6c:60:b9:1f:82:f3:f9:5e:
         0d:16:4f:50:d2:38:26:84:27:19:ef:0f:43:58:35:1f:6d:ed:
         66:aa:e7:28:9b:97:e5:1b:ef:f1:10:2a:b7:4f:40:e8:48:0b:
         0f:db:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:43 2026 by rpki-client