Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TT7AxVwRgLIDSeadKvoi71E8vK0.asa
File:                     TT7AxVwRgLIDSeadKvoi71E8vK0.asa (raw, json)
Hash identifier:          o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=
Subject key identifier:   4D:3E:C0:C5:5C:11:80:B2:03:49:E6:9D:2A:FA:22:EF:51:3C:BC:AD
Certificate issuer:       /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial:       019D251187F7972DC08A9792B645D3E5979D
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TT7AxVwRgLIDSeadKvoi71E8vK0.asa
Signing time:             Wed 25 Mar 2026 12:56:38 +0000
ASPA not before:          Wed 25 Mar 2026 12:56:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211519
Providers:                AS: 56376
                          AS: 56911
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:11:87:f7:97:2d:c0:8a:97:92:b6:45:d3:e5:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
        Validity
            Not Before: Mar 25 12:56:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d3ec0c55c1180b20349e69d2afa22ef513cbcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:c4:4b:b0:52:05:33:bf:06:cc:63:ad:2d:
                    30:26:b0:b2:1f:7c:54:fa:3b:9d:d8:52:f9:c3:3c:
                    44:73:c1:01:03:4c:aa:d6:63:fc:de:d7:9c:32:10:
                    32:f6:56:93:44:10:35:8e:48:0a:04:54:be:36:8d:
                    71:cb:30:2c:21:c2:a1:29:07:b3:f8:25:46:7b:38:
                    02:dd:5c:f5:2b:b8:98:3a:33:62:50:69:25:4e:59:
                    bb:0d:20:05:25:c3:ae:c8:4a:71:1f:b5:de:5a:5f:
                    0f:b5:9f:e5:95:5f:92:db:a0:55:c4:91:31:80:ad:
                    8d:a0:25:db:ee:da:30:7a:92:a7:f4:fe:e2:34:bd:
                    b6:08:94:8e:cf:d9:51:ce:b5:f7:55:80:2a:a1:65:
                    bc:2b:41:af:4c:ca:32:2c:14:d9:08:9c:29:da:59:
                    0e:60:74:78:dd:f4:26:6c:77:ed:19:51:af:05:7b:
                    eb:92:d6:da:6e:d3:b1:68:89:b0:4f:83:7c:f6:d7:
                    47:6d:24:2f:d0:c9:28:ec:61:47:a4:45:e4:04:91:
                    8b:e9:54:39:a4:dc:18:6c:85:99:f7:ec:17:31:6b:
                    95:4b:f7:17:4d:d2:1a:68:61:b6:38:34:80:3c:96:
                    1b:ca:8b:50:e5:bb:88:e1:28:4f:0e:be:db:e1:40:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:C0:C5:5C:11:80:B2:03:49:E6:9D:2A:FA:22:EF:51:3C:BC:AD
            X509v3 Authority Key Identifier:
                keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TT7AxVwRgLIDSeadKvoi71E8vK0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211519

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:79:88:7a:f6:e9:01:c3:b8:a3:ff:82:47:dc:be:0f:8c:
         47:d5:70:9c:fc:d8:61:17:e5:3b:c0:ab:c9:84:03:af:ee:28:
         29:0a:3c:56:7f:b2:f1:fb:04:e4:37:3b:ae:d8:5f:02:7d:1c:
         ed:01:06:25:03:7e:d6:93:e1:23:89:82:36:43:49:40:3c:17:
         79:cc:a1:1b:90:03:51:87:fc:6f:33:bc:d4:3c:5f:49:ec:31:
         b4:8f:cf:e8:2b:f7:84:b1:92:4e:25:ca:c1:c4:32:53:a7:3e:
         f2:6a:74:62:5a:a4:ea:54:ba:e1:e7:3b:e8:6b:aa:11:b3:35:
         7a:d7:47:be:3b:30:16:c2:d4:5e:7d:68:5d:40:ad:3a:5d:a6:
         be:ab:27:6d:85:c8:e4:34:20:0a:f3:0a:ff:b6:88:eb:06:b3:
         48:ce:3a:82:ab:e2:29:c4:a1:31:6c:b3:07:45:0e:c9:b5:80:
         8b:0a:ad:1e:7a:c1:70:5e:bb:95:97:1e:94:43:a0:5d:29:d1:
         5b:45:a6:f5:58:5a:56:70:32:04:82:62:a1:8b:07:97:7c:f8:
         18:c0:fc:ed:66:87:50:32:82:db:75:cb:44:a0:c2:69:bc:dc:
         7e:97:74:54:fe:b4:fc:fa:d0:05:1c:28:17:75:4f:d4:19:26:
         00:f6:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:15 2026 by rpki-client