Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B_C85kDpJu0hZuIrTMiOCLFh_q8.asa
File:                     B_C85kDpJu0hZuIrTMiOCLFh_q8.asa (raw, json)
Hash identifier:          OdYSKpxUTPgwaZyFzJCRJnCGKE+BB6yXZ/+kiDZiuRk=
Subject key identifier:   07:F0:BC:E6:40:E9:26:ED:21:66:E2:2B:4C:C8:8E:08:B1:61:FE:AF
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ED99100356208B51FE45AF1B1AE7DE
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B_C85kDpJu0hZuIrTMiOCLFh_q8.asa
Signing time:             Thu 19 Feb 2026 08:04:14 +0000
ASPA not before:          Thu 19 Feb 2026 08:04:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208317
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ed:99:10:03:56:20:8b:51:fe:45:af:1b:1a:e7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:04:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07f0bce640e926ed2166e22b4cc88e08b161feaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:46:42:8d:2c:91:95:af:b1:44:b8:15:2e:
                    c6:9c:48:37:e4:de:68:d3:e5:77:5a:5e:6d:84:b9:
                    fa:f3:6a:d0:99:0d:27:c3:ed:79:56:f9:c3:f1:a0:
                    2d:07:1a:e9:17:50:43:65:47:d0:54:d4:f5:18:88:
                    bf:fc:5d:d5:e8:5c:81:23:16:65:35:15:ec:2e:74:
                    c0:9b:b8:f8:82:b0:3d:00:61:d2:4e:d6:1e:33:45:
                    ed:68:96:f2:46:4f:58:39:34:16:9f:1d:08:59:1e:
                    7c:bb:2b:ec:78:80:61:52:b9:22:01:cd:a8:72:03:
                    40:d0:03:fc:9d:77:31:a7:ea:4f:37:78:91:fb:ab:
                    84:67:7d:57:9c:58:53:26:24:c8:2c:4f:ea:1c:2c:
                    5e:67:df:9a:c6:7f:1e:1d:65:ed:6b:7c:87:12:d9:
                    57:6c:01:62:ba:02:72:c8:71:9d:20:83:24:65:1e:
                    25:78:15:8d:3a:c0:c6:19:fd:83:38:60:bc:60:8d:
                    01:56:91:d1:d2:3c:81:c0:3d:84:e3:e9:da:ba:e0:
                    c3:b6:ca:cd:4e:c2:9b:f8:e4:bd:c6:1b:96:6d:f7:
                    70:14:b9:09:db:78:c7:47:2d:0d:6f:05:3f:e9:aa:
                    b0:a0:68:20:e8:c0:f8:a6:56:4b:e3:54:b3:11:33:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:BC:E6:40:E9:26:ED:21:66:E2:2B:4C:C8:8E:08:B1:61:FE:AF
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B_C85kDpJu0hZuIrTMiOCLFh_q8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208317

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:99:20:0e:09:a3:32:d0:c0:44:0d:c6:e3:27:8b:a0:6a:
         2c:93:9b:a9:ea:e9:04:54:d0:2d:bf:52:46:24:f3:6f:5e:ff:
         17:ab:dc:dd:f9:d2:69:ed:f8:d6:4f:11:8c:ed:7d:f6:72:0b:
         06:dc:e0:74:2a:f5:94:c6:1a:4c:7d:f1:51:24:65:51:60:19:
         81:53:75:1c:90:ed:d6:02:75:3f:e8:e8:18:76:b0:27:80:8d:
         6b:a9:91:63:00:ed:41:55:e1:d1:d2:45:e2:40:e2:c0:dd:71:
         56:38:7f:63:85:d7:7b:10:a1:f1:e6:6a:ef:61:5a:af:9d:9e:
         e6:78:fb:27:80:d1:1d:d4:61:53:c2:b6:03:28:b2:88:1b:a0:
         cf:cc:ed:d6:0c:4b:6b:5b:9d:60:a4:94:2e:b7:b3:bb:5e:ab:
         57:cd:24:75:4d:3c:58:b0:99:9c:de:84:65:b1:21:89:a4:e0:
         c1:f6:45:32:f1:35:02:51:f3:f6:9b:f1:4f:1e:ba:0a:bc:bd:
         ae:3a:2d:77:74:2b:7a:c0:55:d7:c4:a2:cd:da:41:19:be:3e:
         12:b3:a4:e7:c2:8d:8b:83:a6:fd:26:eb:7f:05:e5:4c:1b:fa:
         a5:b6:81:c3:e4:ad:33:38:8a:c2:cd:1d:dd:77:87:ef:94:1e:
         05:bc:da:45
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx07ZkQA1Ygi1H+Ra8bGufeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2YwYmNlNjQwZTkyNmVkMjE2NmUyMmI0Y2M4OGUwOGIxNjFmZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKhGQo0skZWvsUS4FS7GnEg35N5o
0+V3Wl5thLn682rQmQ0nw+15VvnD8aAtBxrpF1BDZUfQVNT1GIi//F3V6FyBIxZl
NRXsLnTAm7j4grA9AGHSTtYeM0XtaJbyRk9YOTQWnx0IWR58uyvseIBhUrkiAc2o
cgNA0AP8nXcxp+pPN3iR+6uEZ31XnFhTJiTILE/qHCxeZ9+axn8eHWXta3yHEtlX
bAFiugJyyHGdIIMkZR4leBWNOsDGGf2DOGC8YI0BVpHR0jyBwD2E4+nauuDDtsrN
TsKb+OS9xhuWbfdwFLkJ23jHRy0NbwU/6aqwoGgg6MD4plZL41SzETMSEQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAfwvOZA6SbtIWbiK0zIjgixYf6vMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvQl9DODVrRHBKdTBoWnVJclRNaU9DTEZoX3E4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtvTANBgkqhkiG
9w0BAQsFAAOCAQEAcm2ZIA4JozLQwEQNxuMni6BqLJObqerpBFTQLb9SRiTzb17/
F6vc3fnSae341k8RjO199nILBtzgdCr1lMYaTH3xUSRlUWAZgVN1HJDt1gJ1P+jo
GHawJ4CNa6mRYwDtQVXh0dJF4kDiwN1xVjh/Y4XXexCh8eZq72Far52e5nj7J4DR
HdRhU8K2AyiyiBugz8zt1gxLa1udYKSULrezu16rV80kdU08WLCZnN6EZbEhiaTg
wfZFMvE1AlHz9pvxTx66Cry9rjotd3QresBV18SizdpBGb4+ErOk58KNi4Om/Sbr
fwXlTBv6pbaBw+StMziKws0d3XeH75QeBbzaRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:47 2026 by rpki-client