Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/M5RYnwsVqgi8pW8exFBo3vQgoqI.asa
File:                     M5RYnwsVqgi8pW8exFBo3vQgoqI.asa (raw, json)
Hash identifier:          SWI8hdt89wyS80gUUSYiZ/OOMVmaxEAFBECpKUXbBQs=
Subject key identifier:   33:94:58:9F:0B:15:AA:08:BC:A5:6F:1E:C4:50:68:DE:F4:20:A2:A2
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EF6A10E080CD3563D460065CEE7CC1
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/M5RYnwsVqgi8pW8exFBo3vQgoqI.asa
Signing time:             Thu 19 Feb 2026 08:06:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:06:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206535
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ef:6a:10:e0:80:cd:35:63:d4:60:06:5c:ee:7c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:06:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3394589f0b15aa08bca56f1ec45068def420a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:81:16:32:69:7a:29:3c:37:2a:3d:2e:0b:
                    da:e0:4a:6c:73:7a:3e:04:77:63:37:e3:d7:89:0a:
                    21:69:c4:4a:85:6d:07:28:a4:75:0a:a0:38:8b:bb:
                    01:a5:0b:65:00:92:92:cb:59:29:1e:3b:98:76:fe:
                    9a:b2:0b:0a:31:e5:a2:0b:13:db:48:2b:dd:e7:dc:
                    b3:4e:a5:cc:10:9d:ad:c6:28:b1:68:c5:b7:76:30:
                    9d:1c:a4:40:28:01:16:64:78:74:b3:81:19:80:98:
                    18:5a:34:e5:b0:ba:00:28:a8:2f:89:82:f3:6f:db:
                    06:f6:39:ed:39:83:21:4f:01:c1:f9:fa:21:45:68:
                    b8:94:90:d4:74:a3:77:2b:28:62:d9:b5:9b:a6:5d:
                    e5:5e:1b:1b:28:e1:61:82:e7:7e:59:7e:5f:c4:46:
                    14:f2:f6:90:e0:dd:08:5d:d0:6a:be:6a:f0:5d:57:
                    96:55:e1:39:4e:47:f4:e7:b7:2f:a8:8a:21:de:6f:
                    79:9e:51:f1:f6:18:c2:07:9a:b2:78:cd:6d:4f:3f:
                    1d:dc:6c:1f:96:b7:a7:15:6e:77:28:62:10:80:e1:
                    f8:88:4b:ff:85:7c:81:9a:16:b4:b4:7d:f5:7e:9f:
                    27:47:30:3c:dd:89:63:6b:40:a8:b6:04:b3:8d:a6:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:58:9F:0B:15:AA:08:BC:A5:6F:1E:C4:50:68:DE:F4:20:A2:A2
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/M5RYnwsVqgi8pW8exFBo3vQgoqI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206535

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:c5:de:85:d8:c2:0b:23:3e:00:bc:42:28:5e:f0:34:05:
         b0:45:f7:14:fc:3e:98:6b:97:c9:17:1c:39:d2:17:7b:51:05:
         cc:47:f4:a9:f3:c2:37:43:44:bd:55:16:0b:4e:26:bf:9d:56:
         5b:78:20:ed:40:1d:10:27:a0:d6:8e:fd:50:89:a5:59:2f:97:
         80:50:b1:d9:cd:95:19:26:b5:d1:e4:38:58:15:97:82:bc:4d:
         79:9a:40:ea:cf:d7:d9:84:69:34:1f:b5:d5:6d:84:47:2e:45:
         4a:b2:74:0a:60:6b:a1:96:6d:93:02:8c:a0:2d:86:07:84:26:
         ff:a3:0d:e2:67:44:43:4a:e7:44:25:7c:28:15:01:d3:77:73:
         2e:f6:75:79:51:de:e4:fd:ea:84:0a:65:9a:e1:ac:98:17:07:
         aa:f9:23:2a:49:4b:a7:4f:bc:41:33:e0:56:ff:81:8d:d8:ee:
         bd:44:17:00:6b:45:7f:28:4e:be:56:0e:4a:fd:9a:f1:c8:fb:
         35:b1:f7:66:0a:ab:e7:28:09:0d:99:45:21:17:42:43:34:67:
         e2:01:ab:50:a1:33:57:79:ff:34:6f:12:0f:77:00:a6:28:6d:
         f5:c8:bc:e9:2f:92:c6:cb:96:fc:17:6f:7a:5d:8d:48:fe:3c:
         af:35:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:25 2026 by rpki-client