Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa
File:                     DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (raw, json)
Hash identifier:          BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=
Subject key identifier:   0D:3D:0F:42:6D:CA:14:03:87:6D:B5:54:67:5E:C3:63:C1:EF:BC:51
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74F055055D33A5E9547842AB2B1B0ED1
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa
Signing time:             Thu 19 Feb 2026 08:07:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:07:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42881
Providers:                AS: 8926
                          AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:f0:55:05:5d:33:a5:e9:54:78:42:ab:2b:1b:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:07:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d3d0f426dca1403876db554675ec363c1efbc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:f7:e9:0d:89:54:7e:fb:f3:0e:00:e0:5c:
                    c3:f1:b1:fb:97:60:50:25:02:cd:ce:ce:c6:d2:ef:
                    2d:f9:69:6f:a9:be:a6:ba:32:e8:b3:04:08:c2:33:
                    2d:f3:78:86:a6:41:64:61:68:10:5c:29:4e:d5:d7:
                    b9:51:1b:77:41:57:db:5e:40:ae:18:e1:7c:f7:c1:
                    0f:a1:f5:71:14:cd:bf:fa:ec:fe:42:11:75:ab:82:
                    fd:df:e6:23:64:c8:d5:a2:a7:aa:14:ec:8a:90:ed:
                    51:49:0d:22:90:6b:f8:8a:cd:4c:66:d2:f2:ef:d9:
                    04:87:cb:4d:95:54:4c:03:7d:e8:fb:4e:a0:83:00:
                    e8:6a:f0:7a:1b:07:ab:21:fe:5d:51:8f:77:16:26:
                    59:b7:73:5d:75:1c:c1:83:8e:23:01:75:cc:b0:b0:
                    64:cd:e0:a8:91:50:a6:ee:ae:fd:12:2f:60:87:4e:
                    0c:38:db:e9:e9:9a:7f:17:31:d9:6d:d8:a5:42:18:
                    ec:cd:46:c6:a7:53:bf:62:75:6e:aa:8c:4c:ac:2e:
                    0b:c9:29:fc:82:00:dc:a0:7c:d7:7f:ca:d6:f3:dc:
                    e3:24:04:09:4d:df:3e:ef:41:be:b2:93:1c:54:d7:
                    d5:db:89:ee:9a:43:85:09:86:e1:c8:a6:94:85:2c:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:0F:42:6D:CA:14:03:87:6D:B5:54:67:5E:C3:63:C1:EF:BC:51
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42881

    Signature Algorithm: sha256WithRSAEncryption
         84:57:40:a7:cb:41:84:1d:27:30:5e:38:fb:e2:7c:dc:aa:da:
         18:a6:53:23:84:46:70:d9:64:5a:d3:b4:62:88:65:8d:ab:cc:
         08:34:6d:b7:68:e5:0b:9c:5c:54:f7:b7:7c:85:64:9c:ef:c4:
         0a:17:a3:01:c1:e8:2d:5f:f9:58:10:f2:3f:d0:ac:0a:bf:72:
         86:1c:c3:0b:c9:43:23:fd:35:12:a7:93:72:60:69:11:dc:5c:
         ee:7e:46:70:2a:05:2e:05:eb:ae:cd:6f:63:7f:45:d5:88:ce:
         84:69:69:a4:f9:fe:10:a4:33:e0:db:7e:72:95:b3:61:89:e9:
         ed:ad:d1:3a:66:96:a7:53:5f:4a:16:04:b5:9a:c3:cf:e5:30:
         a6:2a:38:06:22:4c:48:4c:98:b0:c4:4b:ff:c8:39:98:04:84:
         9d:71:de:64:c3:a2:63:91:37:ea:41:41:28:ed:b1:92:f0:eb:
         2c:70:97:70:47:51:ec:22:c9:87:f1:e8:ba:16:a7:3f:dd:d8:
         f7:20:66:05:11:90:ce:25:5f:c4:2d:94:43:e4:6b:1f:13:1e:
         9d:aa:20:de:8b:4b:f3:9c:61:06:88:5a:9c:15:9a:0b:1f:b0:
         31:f3:7e:bf:27:a9:a1:7c:cc:8a:da:7e:84:30:d0:1e:db:f0:
         18:e6:df:b6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx08FUFXTOl6VR4QqsrGw7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDNkMGY0MjZkY2ExNDAzODc2ZGI1NTQ2NzVlYzM2M2MxZWZiYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nj36Q2JVH778w4A4FzD8bH7l2BQ
JQLNzs7G0u8t+Wlvqb6mujLoswQIwjMt83iGpkFkYWgQXClO1de5URt3QVfbXkCu
GOF898EPofVxFM2/+uz+QhF1q4L93+YjZMjVoqeqFOyKkO1RSQ0ikGv4is1MZtLy
79kEh8tNlVRMA33o+06ggwDoavB6GwerIf5dUY93FiZZt3NddRzBg44jAXXMsLBk
zeCokVCm7q79Ei9gh04MONvp6Zp/FzHZbdilQhjszUbGp1O/YnVuqoxMrC4LySn8
ggDcoHzXf8rW89zjJAQJTd8+70G+spMcVNfV24numkOFCYbhyKaUhSwWaQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA09D0JtyhQDh221VGdew2PB77xRMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvRFQwUFFtM0tGQU9IYmJWVVoxN0RZOEh2dkZFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCngTANBgkqhkiG
9w0BAQsFAAOCAQEAhFdAp8tBhB0nMF44++J83KraGKZTI4RGcNlkWtO0YohljavM
CDRtt2jlC5xcVPe3fIVknO/EChejAcHoLV/5WBDyP9CsCr9yhhzDC8lDI/01EqeT
cmBpEdxc7n5GcCoFLgXrrs1vY39F1YjOhGlppPn+EKQz4Nt+cpWzYYnp7a3ROmaW
p1NfShYEtZrDz+Uwpio4BiJMSEyYsMRL/8g5mASEnXHeZMOiY5E36kFBKO2xkvDr
LHCXcEdR7CLJh/HouhanP93Y9yBmBRGQziVfxC2UQ+RrHxMenaog3otL85xhBoha
nBWaCx+wMfN+vyepoXzMitp+hDDQHtvwGObftg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:22 2026 by rpki-client