Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/6uNgCBb1usgxiFhpsc-Q1Rlp3F4.asa
File:                     6uNgCBb1usgxiFhpsc-Q1Rlp3F4.asa (raw, json)
Hash identifier:          deuVh3hqy+azxjy1GY2nBohU+YfBhmK2t5wnUDIRJkA=
Subject key identifier:   EA:E3:60:08:16:F5:BA:C8:31:88:58:69:B1:CF:90:D5:19:69:DC:5E
Certificate issuer:       /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial:       01A1A7BF0D9ECE4D2F425DC56D71E539248C
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/6uNgCBb1usgxiFhpsc-Q1Rlp3F4.asa
Signing time:             Wed 04 Nov 2026 18:07:58 +0000
ASPA not before:          Wed 04 Nov 2026 18:07:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204882
Providers:                AS: 11967
                          AS: 47272
                          AS: 209533
                          AS: 212895
                          AS: 214205
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a7:bf:0d:9e:ce:4d:2f:42:5d:c5:6d:71:e5:39:24:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
        Validity
            Not Before: Nov  4 18:07:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eae3600816f5bac831885869b1cf90d51969dc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:40:30:08:ca:d2:a7:9f:28:cd:ab:68:2e:
                    50:9c:e1:eb:e9:26:3a:50:e7:50:21:be:c6:ad:af:
                    e3:ed:73:8c:be:4e:e6:66:06:99:c5:8c:c1:2b:07:
                    5d:ae:71:99:ff:ed:40:18:bc:86:64:f0:71:94:8e:
                    d0:bf:07:b0:98:49:98:7e:fd:ee:a7:7a:37:ab:d3:
                    fe:03:7e:26:34:a5:ef:97:80:32:f5:bb:7f:80:e2:
                    dc:62:91:0b:e6:9c:77:24:f2:c1:0f:7c:8b:2f:eb:
                    43:3e:c4:fd:04:90:1b:bb:2a:e4:7e:18:7e:ab:d5:
                    23:8d:0a:90:1b:b0:46:cb:f0:72:cf:61:1f:a9:71:
                    bd:52:30:fa:cc:26:75:3f:c1:6e:d6:3e:6d:42:de:
                    98:bc:d5:c1:fd:c1:73:93:c9:3a:b5:2b:79:a2:c7:
                    88:7e:dc:5a:b4:14:46:13:5f:fa:55:15:ce:9c:5e:
                    a1:a2:40:a7:38:f1:2f:51:4b:fb:f9:3c:32:d5:2d:
                    e9:ff:4c:70:9d:93:2f:d7:6c:7d:6e:c0:c5:5f:03:
                    2d:54:e5:87:1a:7f:1d:0e:5a:ec:35:8e:6e:f4:06:
                    ae:df:31:6c:ff:2c:bc:02:26:6e:96:5e:5c:24:8a:
                    8f:09:47:42:a9:4d:71:6e:94:35:08:b4:b9:8b:c2:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:60:08:16:F5:BA:C8:31:88:58:69:B1:CF:90:D5:19:69:DC:5E
            X509v3 Authority Key Identifier:
                keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/6uNgCBb1usgxiFhpsc-Q1Rlp3F4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204882

    Signature Algorithm: sha256WithRSAEncryption
         27:68:37:99:62:5f:d9:47:3d:49:c9:31:a3:7e:5a:51:86:04:
         92:5e:45:85:ef:ee:78:c1:9c:b3:14:3a:2c:71:c1:00:59:20:
         03:f0:28:56:30:10:12:27:a9:3c:51:5b:b0:41:d4:a3:12:39:
         aa:6b:31:8e:50:e1:d1:19:6a:f2:17:ea:1b:da:7f:f1:55:86:
         2a:bd:a8:3c:e9:84:03:a0:d6:2e:de:75:2a:58:0c:b0:af:2c:
         05:b1:8e:9e:20:21:01:e2:03:ee:c5:b4:0e:1e:b7:0c:07:e0:
         35:9f:f4:cc:b3:01:92:a0:46:b9:7b:7e:34:9e:94:d9:39:f4:
         49:72:ba:f8:c3:b8:5a:02:de:78:6b:0b:20:f1:12:63:51:85:
         d6:81:cd:6b:59:67:b1:e1:a1:20:b0:06:62:d4:4f:99:15:da:
         b3:16:af:6f:aa:81:7e:09:38:0c:c0:a6:1a:be:fa:95:c5:2f:
         5f:39:b9:9a:80:6e:19:e8:dc:17:aa:b5:80:fe:55:58:b6:69:
         3e:8c:fe:f6:0a:8f:ab:3f:11:33:c7:e3:66:cb:fe:ea:f4:a0:
         45:cc:c3:5d:5a:51:b3:45:5a:b5:6c:62:12:54:a1:e7:cd:73:
         00:3e:6d:30:3e:3d:e2:4e:4e:4e:4e:13:5a:71:03:89:5d:01:
         3e:c6:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:47:08 2026 by rpki-client