Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/qbe4uY_Zb00t6Fakyro4OJNWkR0.asa
File:                     qbe4uY_Zb00t6Fakyro4OJNWkR0.asa (raw, json)
Hash identifier:          Fz5EM5TghKPWk/7L/NMHjc78c10XDzIwyQrhrF+eGDI=
Subject key identifier:   A9:B7:B8:B9:8F:D9:6F:4D:2D:E8:56:A4:CA:BA:38:38:93:56:91:1D
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       01A0B02EB9968F96D281DC812630BB474A53
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/qbe4uY_Zb00t6Fakyro4OJNWkR0.asa
Signing time:             Thu 17 Sep 2026 16:24:07 +0000
ASPA not before:          Thu 17 Sep 2026 16:24:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62343
Providers:                AS: 6696
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:2e:b9:96:8f:96:d2:81:dc:81:26:30:bb:47:4a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Sep 17 16:24:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9b7b8b98fd96f4d2de856a4caba38389356911d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:98:db:f9:cd:c9:ec:1c:99:67:8d:bf:0e:
                    34:84:6a:0e:1b:b1:27:b5:48:1d:30:1e:cf:d3:83:
                    4d:da:d5:bf:68:eb:b2:3b:fe:cd:6d:a7:d4:a0:c8:
                    49:c5:fe:62:05:60:02:af:62:c8:f7:e1:53:95:aa:
                    6c:5d:6a:95:8e:cf:31:44:56:b0:b7:e7:8e:cb:e1:
                    7f:28:2a:71:fc:d8:d1:29:b2:27:3e:b1:f5:20:85:
                    4e:a4:fc:aa:08:d9:cb:6f:15:ff:b8:67:91:8d:f6:
                    af:3e:ac:03:21:d8:90:c6:52:10:12:69:1e:ce:40:
                    2f:d1:7e:28:3f:b1:a3:b5:20:8c:d4:7d:db:09:67:
                    5c:20:a6:77:10:b5:4f:71:48:43:97:e7:f6:e7:b2:
                    0c:ea:fd:3f:24:27:9a:a7:09:5c:07:47:aa:b1:9a:
                    e9:32:bd:db:47:f7:01:c5:b9:8f:b2:5d:6b:aa:89:
                    55:65:0f:5f:37:ff:d6:a3:b0:1f:d7:cd:c5:e4:bd:
                    b5:f5:fb:be:6c:3b:71:6d:16:dc:3f:5d:c1:b9:9f:
                    55:86:ee:20:ea:fa:43:68:5c:b5:54:bc:53:18:a2:
                    08:9e:13:7f:0d:76:9b:dc:c4:a6:c9:ad:5b:3e:56:
                    3c:22:5b:47:23:13:c2:76:d1:6f:3a:bf:67:d2:e0:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B7:B8:B9:8F:D9:6F:4D:2D:E8:56:A4:CA:BA:38:38:93:56:91:1D
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/qbe4uY_Zb00t6Fakyro4OJNWkR0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62343

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:b1:6b:32:98:14:df:9a:7e:1a:46:0e:7b:9b:76:0d:b7:
         17:44:d2:57:2a:57:01:54:3f:01:0e:65:fd:61:d8:7f:0d:62:
         ac:61:29:1a:ea:c9:e4:aa:b1:14:09:5f:f1:44:d9:eb:fc:02:
         fb:e6:1b:5c:c4:bd:71:bf:4d:69:92:ed:b2:ca:85:c7:b8:c4:
         0f:d9:23:52:7c:ed:25:6c:49:19:e0:03:50:a1:c7:a7:db:24:
         5e:4d:7b:8f:53:e2:fc:62:d1:9a:20:09:65:95:f5:94:29:66:
         9d:79:3e:6f:78:4d:ff:e1:8a:43:79:14:cf:18:64:1b:0f:56:
         92:85:f9:39:b2:01:ec:cf:9c:5e:a2:cf:da:51:17:7c:42:0b:
         a9:16:53:21:f2:ef:a0:84:71:9f:9a:9d:f8:17:94:d7:14:48:
         a8:dc:e3:ed:73:97:fa:2b:ad:b1:d0:88:ac:50:f2:83:16:e4:
         e9:1e:9d:35:1d:25:5e:fa:b9:7b:3d:f7:a9:4d:4a:d0:9a:79:
         b2:5f:e6:5c:0b:47:a1:1c:61:d4:03:43:4d:08:2d:66:9f:fa:
         1e:4b:90:e7:8d:ad:84:72:f1:78:f7:a8:0e:c0:69:be:05:18:
         6a:bf:f8:21:3a:6a:38:eb:5e:0d:c0:b5:a5:b0:eb:77:da:8d:
         30:29:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:28:52 2026 by rpki-client