Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FDcuSgospweFPWLyyzaMMtAOM4U.asa
File:                     FDcuSgospweFPWLyyzaMMtAOM4U.asa (raw, json)
Hash identifier:          ElfajbY3jJQFX2hrRxQTpzclXLfuLB3pTXQFz72ELFE=
Subject key identifier:   14:37:2E:4A:0A:2C:A7:07:85:3D:62:F2:CB:36:8C:32:D0:0E:33:85
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EF6B22063D0D5844CC8B0185D8D787
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FDcuSgospweFPWLyyzaMMtAOM4U.asa
Signing time:             Thu 19 Feb 2026 08:06:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:06:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206582
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ef:6b:22:06:3d:0d:58:44:cc:8b:01:85:d8:d7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:06:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14372e4a0a2ca707853d62f2cb368c32d00e3385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f9:2d:7e:91:7b:f4:bb:7c:f0:a8:f0:16:0f:
                    f1:df:2c:74:52:aa:a8:22:fe:7f:45:d3:8e:8a:e3:
                    1e:3c:7b:38:6e:8c:00:c3:6b:c1:8c:26:13:ec:88:
                    ee:00:83:bc:78:95:3d:80:c1:2e:2f:cb:7f:60:a1:
                    fd:d5:63:07:b1:39:3c:13:9d:bc:d0:44:6b:19:c6:
                    83:f1:50:80:bf:14:43:f9:10:ff:ef:0c:09:ac:f0:
                    7a:3d:0f:fc:eb:9c:2a:df:8c:2f:38:38:c7:33:d6:
                    e7:0d:66:11:30:98:97:a3:9e:6e:30:e8:a6:83:eb:
                    8e:1c:1e:67:3e:d7:20:2c:e6:ce:9c:64:93:42:88:
                    42:7a:2e:9b:ed:92:32:5b:a4:57:9a:d5:f9:33:5c:
                    94:d5:50:8e:97:9b:03:41:1f:2f:2e:74:bd:c0:8e:
                    d1:77:46:50:0f:73:68:e4:c9:26:0a:8f:49:bd:6d:
                    79:89:55:59:2a:45:8c:9d:20:8c:55:88:a5:ce:f9:
                    7c:60:80:3a:c9:9d:38:51:de:99:f5:7c:49:53:d7:
                    22:3a:0b:b9:1a:21:5b:71:30:24:d7:0f:03:bf:08:
                    48:c3:4d:0b:ac:4c:f6:c9:98:17:ec:4f:86:be:c1:
                    0a:1d:87:8a:4a:c4:9c:cd:87:c7:62:40:2a:6f:6c:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:37:2E:4A:0A:2C:A7:07:85:3D:62:F2:CB:36:8C:32:D0:0E:33:85
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FDcuSgospweFPWLyyzaMMtAOM4U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206582

    Signature Algorithm: sha256WithRSAEncryption
         70:85:84:9e:42:76:08:ef:0f:63:14:03:e1:7d:5e:43:83:ae:
         90:49:eb:be:d6:57:ad:14:81:90:58:df:a5:9d:f1:4d:2f:d7:
         12:4d:f0:35:58:be:a9:12:8a:3f:86:07:80:62:43:b1:57:f4:
         7d:34:f4:e6:7f:9f:12:a2:f8:21:d4:59:86:dc:c9:2d:93:82:
         3e:b0:cc:30:91:d9:7d:d0:3d:32:8e:42:35:50:15:53:d3:0f:
         93:39:6a:ca:d0:59:c3:22:a9:b8:fd:71:c2:75:57:dd:53:92:
         c0:c4:a9:15:3c:3f:b7:a3:5c:94:2f:e2:b5:9c:41:43:57:2a:
         40:ce:0f:01:f9:2d:6e:6f:ee:c6:13:15:cf:ad:19:2c:f3:a6:
         47:ca:d1:a2:5a:2f:c0:cf:ce:fe:fb:28:ae:06:3b:af:88:22:
         1a:2d:85:46:ac:41:9f:70:97:3c:86:31:11:0a:cc:4d:37:40:
         ae:c1:7c:11:ad:83:02:dc:09:a7:34:7a:8f:ff:e3:f2:1b:df:
         74:94:46:26:12:02:ae:39:89:4d:63:d7:24:63:71:85:f1:70:
         a5:fd:a4:6c:49:f0:e9:fe:26:42:5d:f7:37:e8:5b:48:67:47:
         65:8b:38:08:50:27:9d:2c:62:1c:48:5c:75:01:2f:7e:7e:9a:
         5d:11:4f:e2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx072siBj0NWETMiwGF2NeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDM3MmU0YTBhMmNhNzA3ODUzZDYyZjJjYjM2OGMzMmQwMGUzMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vktfpF79Lt88KjwFg/x3yx0Uqqo
Iv5/RdOOiuMePHs4bowAw2vBjCYT7IjuAIO8eJU9gMEuL8t/YKH91WMHsTk8E528
0ERrGcaD8VCAvxRD+RD/7wwJrPB6PQ/865wq34wvODjHM9bnDWYRMJiXo55uMOim
g+uOHB5nPtcgLObOnGSTQohCei6b7ZIyW6RXmtX5M1yU1VCOl5sDQR8vLnS9wI7R
d0ZQD3No5MkmCo9JvW15iVVZKkWMnSCMVYilzvl8YIA6yZ04Ud6Z9XxJU9ciOgu5
GiFbcTAk1w8DvwhIw00LrEz2yZgX7E+GvsEKHYeKSsSczYfHYkAqb2wnJQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBQ3LkoKLKcHhT1i8ss2jDLQDjOFMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvRkRjdVNnb3Nwd2VGUFdMeXl6YU1NdEFPTTRVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMm9jANBgkqhkiG
9w0BAQsFAAOCAQEAcIWEnkJ2CO8PYxQD4X1eQ4OukEnrvtZXrRSBkFjfpZ3xTS/X
Ek3wNVi+qRKKP4YHgGJDsVf0fTT05n+fEqL4IdRZhtzJLZOCPrDMMJHZfdA9Mo5C
NVAVU9MPkzlqytBZwyKpuP1xwnVX3VOSwMSpFTw/t6NclC/itZxBQ1cqQM4PAfkt
bm/uxhMVz60ZLPOmR8rRolovwM/O/vsorgY7r4giGi2FRqxBn3CXPIYxEQrMTTdA
rsF8Ea2DAtwJpzR6j//j8hvfdJRGJhICrjmJTWPXJGNxhfFwpf2kbEnw6f4mQl33
N+hbSGdHZYs4CFAnnSxiHEhcdQEvfn6aXRFP4g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:05 2026 by rpki-client