Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9fnVFxD2vZVJBXK2aKAlYjK-0wI.asa
File:                     9fnVFxD2vZVJBXK2aKAlYjK-0wI.asa (raw, json)
Hash identifier:          TMy0ZEkeEaDbbOzaDe1nOYNWkXw+B4t5Jr/AEhXXvuo=
Subject key identifier:   F5:F9:D5:17:10:F6:BD:95:49:05:72:B6:68:A0:25:62:32:BE:D3:02
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ED96B0D3B3E2F002E57C185F44C68E
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9fnVFxD2vZVJBXK2aKAlYjK-0wI.asa
Signing time:             Thu 19 Feb 2026 08:04:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:04:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204868
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ed:96:b0:d3:b3:e2:f0:02:e5:7c:18:5f:44:c6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:04:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5f9d51710f6bd95490572b668a0256232bed302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:10:91:15:e1:0e:e7:75:00:2b:cb:be:14:
                    b0:66:a8:05:c2:17:c7:5f:b8:ab:94:a0:1d:eb:38:
                    cd:56:e1:8a:87:b5:d6:75:57:c5:2b:5e:ba:04:2c:
                    1a:0b:8c:57:b4:19:85:1d:66:6d:98:17:4a:23:22:
                    d5:fe:78:de:31:89:53:69:34:85:66:24:30:b5:50:
                    d7:96:57:77:08:55:eb:3c:2c:90:78:7a:f6:14:18:
                    a6:6a:62:2e:3b:94:ae:1b:62:05:b0:f2:13:dc:18:
                    06:57:27:28:e3:f4:95:c3:3a:79:cd:70:22:83:1e:
                    3e:54:ab:61:94:20:f0:77:ac:b5:e5:dc:a4:84:3c:
                    46:5a:89:da:53:72:5a:27:e4:ec:fd:79:18:45:01:
                    7e:9d:3a:59:2c:7c:69:ea:36:2e:3f:89:65:0b:29:
                    23:ae:05:0b:44:fd:ab:cc:d7:7c:45:be:ab:a9:d3:
                    f6:05:f9:fd:35:48:f1:05:df:e9:1f:41:f7:04:1c:
                    e4:3f:f7:42:68:d7:be:82:ec:05:e7:27:a4:36:87:
                    84:3d:9c:fd:f9:c6:b2:67:0f:5f:73:22:25:5d:fe:
                    35:9a:b6:7d:11:bd:b3:81:24:7a:f7:d5:33:6a:3c:
                    91:08:d1:4d:90:64:51:b2:85:d3:fb:6a:9e:a2:b9:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:D5:17:10:F6:BD:95:49:05:72:B6:68:A0:25:62:32:BE:D3:02
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9fnVFxD2vZVJBXK2aKAlYjK-0wI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204868

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:21:fd:49:8a:83:93:a0:40:31:07:8a:4c:6d:10:eb:f3:
         65:a7:7c:5f:b4:a1:1e:7d:98:64:f4:5d:64:b0:a3:2c:e1:29:
         46:90:3a:fe:95:0f:ea:cd:93:02:c0:2c:26:e1:48:ab:00:4f:
         41:ef:3a:96:d1:be:a3:27:b9:43:ce:d3:4d:dc:9d:b9:98:74:
         fd:1e:20:7a:6e:60:e9:7d:29:ac:95:f3:a3:61:c1:b3:79:23:
         4c:ac:69:6d:0f:26:7c:51:d7:68:b1:2a:60:34:2c:82:18:47:
         57:0d:59:97:da:58:b4:c5:13:cd:7d:d1:b8:1f:92:da:4f:ff:
         06:a0:a9:e4:09:8a:de:b2:5d:3d:23:e5:5d:38:24:d5:d1:84:
         48:bc:7a:e1:c9:ea:e0:1a:9d:2d:45:2e:55:c9:9d:3e:39:88:
         ca:5e:a4:82:d2:bd:60:98:0c:db:83:0b:d0:2a:6d:1e:0d:ff:
         55:aa:91:b4:c0:7f:cb:cb:65:f2:ed:55:12:20:17:6f:f0:4f:
         06:88:76:51:7e:d2:ec:7e:e2:09:17:3e:73:3b:8c:22:2b:84:
         80:7b:96:a1:46:57:06:ad:77:e0:5f:ae:ab:bc:17:4d:90:a4:
         7c:b4:8a:49:0e:a1:66:a7:91:56:4d:a0:8e:f8:86:d1:42:26:
         bd:85:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:39 2026 by rpki-client