Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/KAuPLol81PZ851DnLnmMS2olWck.asa
File:                     KAuPLol81PZ851DnLnmMS2olWck.asa (raw, json)
Hash identifier:          Urzy/pKqxNu6sX0XNMQwNZ71+eMUE4LwzCOVzZVxRq8=
Subject key identifier:   28:0B:8F:2E:89:7C:D4:F6:7C:E7:50:E7:2E:79:8C:4B:6A:25:59:C9
Certificate issuer:       /CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Certificate serial:       01A1D126D7A949799310AE06BC11DAB3FBA2
Authority key identifier: BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/KAuPLol81PZ851DnLnmMS2olWck.asa
Signing time:             Thu 12 Nov 2026 19:05:45 +0000
ASPA not before:          Thu 12 Nov 2026 19:05:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201124
Providers:                AS: 51396
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d1:26:d7:a9:49:79:93:10:ae:06:bc:11:da:b3:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
        Validity
            Not Before: Nov 12 19:05:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=280b8f2e897cd4f67ce750e72e798c4b6a2559c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:81:72:31:a9:c5:d4:0d:43:6d:ff:ce:3d:
                    8b:66:3c:c2:bd:7a:8c:a0:f6:82:37:67:c4:59:b5:
                    db:2c:14:db:ee:67:6f:8d:e1:f6:c9:6b:00:bb:77:
                    eb:c4:9a:c4:fa:91:9b:4a:7b:61:a8:ac:20:7c:e1:
                    f2:25:ab:90:6e:d7:74:04:12:6b:10:ed:79:d8:31:
                    fd:25:e9:70:71:1e:82:ee:08:91:7d:95:07:26:66:
                    66:92:fa:72:93:e5:ab:82:85:d5:c7:0c:12:93:b2:
                    a8:ea:85:fd:af:58:bd:7c:bf:ea:cb:69:5e:ef:36:
                    e0:ee:6b:bb:f9:ab:71:83:6f:6d:95:6b:9a:af:d6:
                    0e:92:1a:45:73:3c:1c:b9:ab:ac:3d:d8:c0:a5:74:
                    43:fc:81:5d:a9:7b:e4:51:dc:0a:e5:51:d3:b0:f3:
                    04:c9:3a:93:04:16:5d:49:3c:68:98:f9:f6:ce:58:
                    cb:c9:8d:bc:1e:78:fb:fa:74:10:15:66:79:26:10:
                    7d:a0:4d:fc:d2:14:da:23:fc:ec:3a:a0:ae:66:2d:
                    52:57:c8:20:35:b7:77:1d:fc:91:82:6a:84:db:1a:
                    1b:0d:30:e3:b3:a5:60:cd:36:48:f9:b6:42:9c:bf:
                    ff:d0:91:2a:06:57:47:46:91:8d:9f:3a:36:aa:b9:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0B:8F:2E:89:7C:D4:F6:7C:E7:50:E7:2E:79:8C:4B:6A:25:59:C9
            X509v3 Authority Key Identifier:
                keyid:BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/KAuPLol81PZ851DnLnmMS2olWck.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201124

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:4d:db:41:7b:88:fa:4b:a7:fc:e5:19:32:f0:cf:93:dc:
         5b:c9:65:ed:c2:bc:0e:68:6f:bb:ee:24:3f:b9:b9:bb:94:e5:
         e0:ce:c0:82:1e:a4:91:71:b0:e1:97:49:a1:fb:a5:ec:ac:00:
         eb:3c:14:f2:e3:da:bd:cd:b1:99:a8:cd:41:ad:9c:de:14:3c:
         4a:cb:9b:18:07:ff:29:5e:04:9b:3d:ef:dd:7b:4a:f0:2d:1f:
         85:7b:e7:49:a4:ae:e5:64:81:cd:0f:e8:20:b5:2e:0e:83:8e:
         c6:4e:5d:a6:3a:bd:26:f3:74:c6:c4:d5:db:61:55:e6:bf:49:
         eb:cb:ad:26:03:d3:d2:e6:c5:81:ce:ea:b9:cb:d9:09:df:2e:
         e2:fd:02:33:d2:16:41:58:67:46:66:e3:b7:44:f7:ad:03:3b:
         5e:5f:8d:8d:ef:f3:6d:ea:1a:8a:42:4b:8a:0b:41:6f:79:1c:
         e5:50:a2:ec:fc:91:0b:d8:c5:75:8d:c4:d4:db:2a:48:43:64:
         d5:68:9d:85:28:53:de:9e:28:e8:f1:de:59:6d:c8:ea:17:33:
         3c:7b:05:d8:b3:a1:a9:8a:e3:4d:95:e5:19:51:08:5e:2f:bd:
         0b:4c:84:a4:4f:46:5b:88:82:86:9a:f3:ea:a4:d0:f5:1e:76:
         9c:ff:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:18 2026 by rpki-client