Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Gjf6v4jcOI9aKRMaVzltOJXUMe8.asa
File:                     Gjf6v4jcOI9aKRMaVzltOJXUMe8.asa (raw, json)
Hash identifier:          12PU0b/NAZIYIts0JVm8M3AZBRBrj2zxGlN7q8KfrXA=
Subject key identifier:   1A:37:FA:BF:88:DC:38:8F:5A:29:13:1A:57:39:6D:38:95:D4:31:EF
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ED9605C7BE51FE04A7219B0BF43597
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Gjf6v4jcOI9aKRMaVzltOJXUMe8.asa
Signing time:             Thu 19 Feb 2026 08:04:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:04:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203950
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ed:96:05:c7:be:51:fe:04:a7:21:9b:0b:f4:35:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:04:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a37fabf88dc388f5a29131a57396d3895d431ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:fa:3c:61:24:d4:50:73:1c:6a:17:66:64:
                    88:4e:29:3d:98:78:dc:8c:6e:62:15:93:98:0e:5a:
                    e2:08:8b:22:a3:12:c5:10:0f:c4:50:35:3e:d9:fa:
                    2a:49:9c:3b:91:37:23:53:9c:17:01:45:a0:90:65:
                    ac:40:c7:e1:aa:79:ca:8d:ac:62:0a:a7:c2:b7:33:
                    42:85:37:e6:13:d3:29:1e:81:59:ce:7e:97:6b:c2:
                    ae:ec:5a:84:26:fa:c1:ec:24:02:39:8a:ef:0f:69:
                    ec:a7:86:28:ea:85:5e:00:aa:dc:27:b8:12:8b:ee:
                    8a:e0:53:d3:e5:4d:03:e0:04:e6:23:75:11:00:83:
                    cf:81:36:ba:c3:74:b1:b9:48:39:e5:c6:3c:1b:6f:
                    f7:b4:85:29:16:8f:98:9d:fc:90:f3:5b:74:cc:1b:
                    21:80:34:d7:d2:54:b1:a5:92:55:77:67:cb:b8:97:
                    53:4c:16:46:5c:b9:56:64:46:d3:c7:4d:88:0d:24:
                    75:10:95:8c:7f:84:00:fd:fc:48:97:16:b4:27:fb:
                    ce:10:1f:4c:89:8b:16:1f:4e:f4:31:0c:b6:75:7c:
                    bb:a5:96:d6:e4:59:58:d2:75:79:02:af:c8:93:12:
                    8e:b2:34:53:4f:5b:e6:15:2f:a1:35:7b:86:f0:f1:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:FA:BF:88:DC:38:8F:5A:29:13:1A:57:39:6D:38:95:D4:31:EF
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Gjf6v4jcOI9aKRMaVzltOJXUMe8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203950

    Signature Algorithm: sha256WithRSAEncryption
         9a:b3:63:f5:8a:d0:ef:c6:a6:a0:65:02:25:1e:0c:6c:81:f1:
         ba:3f:39:ee:11:d3:ec:46:4a:ae:35:3e:f8:97:08:7f:fa:8e:
         68:71:4d:93:21:ff:36:aa:12:08:f5:5b:ab:fb:fd:cd:96:a1:
         98:3b:d6:6c:c8:87:71:3a:b6:30:cc:71:04:4a:dc:8c:7c:b2:
         8b:75:d1:50:7b:18:4b:63:17:03:ee:e8:9a:b1:b5:06:ac:88:
         f9:eb:19:b5:f9:a9:a2:b2:4a:f7:69:1c:5c:69:7a:d6:7a:b1:
         5b:2e:51:e8:7a:ec:6a:8f:8e:e7:03:a1:be:30:4c:93:24:cc:
         05:6e:c9:4f:e0:fe:42:18:5c:10:bb:2d:1a:33:75:22:ce:37:
         66:13:d2:13:72:8c:48:f5:1d:7b:a4:54:bb:1c:9f:12:8c:7e:
         d7:d3:73:bd:df:3e:10:4c:a1:c8:ed:cb:ff:90:26:35:36:7a:
         44:d3:0b:11:58:50:de:9c:e1:78:f9:58:c6:2a:55:b5:3d:74:
         48:c5:31:32:72:41:a9:c6:ec:f4:2f:93:e5:d0:82:41:bc:3f:
         d8:f5:86:58:97:2d:25:5d:4d:18:e6:08:18:70:52:af:88:0a:
         91:f8:45:d5:64:9f:dd:c8:2e:23:9b:0e:aa:9e:d5:f9:6b:5d:
         3f:2c:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:26:25 2026 by rpki-client