Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/446iU2iUtSCpiCvxa6ntvEqHvJE.asa
File:                     446iU2iUtSCpiCvxa6ntvEqHvJE.asa (raw, json)
Hash identifier:          XNtxkVgkkNUJbPUnKEA9zgscIN6i8nLzHGlvaFwLLcg=
Subject key identifier:   E3:8E:A2:53:68:94:B5:20:A9:88:2B:F1:6B:A9:ED:BC:4A:87:BC:91
Certificate issuer:       /CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Certificate serial:       01A0973FF9BFA7D11659C4D3304B7C50D5B4
Authority key identifier: A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/446iU2iUtSCpiCvxa6ntvEqHvJE.asa
Signing time:             Sat 12 Sep 2026 20:12:27 +0000
ASPA not before:          Sat 12 Sep 2026 20:12:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215666
Providers:                AS: 50629
                          AS: 207252
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:97:3f:f9:bf:a7:d1:16:59:c4:d3:30:4b:7c:50:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
        Validity
            Not Before: Sep 12 20:12:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e38ea2536894b520a9882bf16ba9edbc4a87bc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:3d:f8:31:66:f9:6e:ad:ed:63:8e:5c:10:
                    6d:49:54:ba:cf:93:fc:9f:f2:5a:fd:d4:d7:90:93:
                    e1:ea:46:75:79:26:12:8e:19:67:2e:56:cb:71:2c:
                    65:2e:f2:5c:9a:7b:b6:f5:e5:87:4c:9f:b1:85:32:
                    54:ae:fa:7b:f2:88:8b:22:72:5f:f7:8a:4a:42:22:
                    a6:6a:cf:e7:1b:72:8e:ce:ab:63:85:ad:65:3c:fd:
                    f5:79:a4:8b:e9:7d:45:55:d1:b7:07:07:c8:2a:0d:
                    01:3e:ef:33:9f:2f:16:34:27:cf:a4:b7:fc:8f:b6:
                    bd:b3:18:29:47:6a:72:41:54:e1:12:aa:b3:a2:64:
                    85:7b:91:67:46:35:c3:10:f0:62:99:c7:86:51:b0:
                    f5:f0:48:c9:25:b1:80:a4:45:01:3f:02:c1:20:78:
                    74:37:3b:ff:5b:4c:13:be:21:4d:1f:ba:9f:37:81:
                    22:8d:0a:0b:0e:9e:af:9f:5f:77:bf:fe:79:c4:54:
                    da:6d:c4:3b:5d:da:3e:b2:93:f0:52:fb:c1:80:17:
                    7b:d4:dc:c2:4b:70:d1:ab:1b:a4:12:92:7f:a7:b6:
                    de:2f:c1:0d:49:04:f8:c6:cf:ff:c5:bc:9e:40:7b:
                    5f:8b:d3:9f:ec:32:c0:1a:f8:01:20:a8:ac:e1:0e:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8E:A2:53:68:94:B5:20:A9:88:2B:F1:6B:A9:ED:BC:4A:87:BC:91
            X509v3 Authority Key Identifier:
                keyid:A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/446iU2iUtSCpiCvxa6ntvEqHvJE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215666

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:cb:d6:28:5d:10:83:f0:87:67:d8:51:a6:f1:8e:89:c9:
         0d:a6:16:27:6f:c6:f5:50:1c:41:7c:ea:35:a5:a8:3d:9b:33:
         bb:2a:bb:48:75:b7:ab:92:fc:07:1d:f5:86:20:dc:8f:35:4c:
         1a:d8:e2:bf:7c:7e:5a:5b:48:2d:b3:83:13:8b:27:bf:7a:9c:
         71:20:b6:f7:2a:32:67:e8:11:97:4e:70:9b:cd:2a:e4:db:78:
         de:46:46:0e:d2:75:64:57:b0:c1:e5:e7:a4:e1:82:a7:9b:d8:
         a0:44:78:22:7f:e4:06:d7:4b:3a:81:af:df:ba:36:f4:e8:55:
         f8:52:97:52:27:19:e3:e8:03:29:c6:43:a4:9b:19:66:88:5a:
         d3:d2:f1:dc:c2:28:7e:f1:eb:ce:7e:bf:33:ed:3a:f8:bc:39:
         6a:83:25:34:e3:bc:c4:f7:74:c4:dc:b9:23:da:85:e6:81:90:
         43:50:6e:0a:81:2b:1b:ef:75:98:2e:fd:c9:f2:dc:6c:10:ee:
         a3:33:9a:0d:fc:e1:52:36:19:48:b0:44:ec:52:f4:53:16:f6:
         db:0b:e5:19:98:0a:d4:2b:57:20:a6:88:27:00:b1:b3:ce:49:
         3d:c9:a9:c3:bb:76:c9:60:71:17:30:54:e7:6f:b3:55:52:c1:
         08:25:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:58 2026 by rpki-client