Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa
File:                     Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (raw, json)
Hash identifier:          YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=
Subject key identifier:   43:A9:F1:E3:B5:8A:F9:32:0F:78:62:5F:A0:07:1B:0F:7F:DC:9A:E0
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ECABA3901E4A2FABBCD3BB2BCC6003
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa
Signing time:             Thu 19 Feb 2026 08:03:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:03:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209896
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ec:ab:a3:90:1e:4a:2f:ab:bc:d3:bb:2b:cc:60:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:03:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43a9f1e3b58af9320f78625fa0071b0f7fdc9ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:48:6c:1b:49:d5:09:a4:8f:80:4a:86:7c:
                    e3:a5:48:72:4a:04:9e:de:dd:25:e8:13:37:8d:0d:
                    e5:3f:99:67:83:2e:08:f3:c9:a5:b1:b5:11:5a:f8:
                    9f:ca:54:4f:83:c2:26:eb:06:13:ac:4c:8d:99:4b:
                    c3:da:10:15:9a:fb:14:71:78:22:fd:ec:c5:c2:ac:
                    03:7b:82:76:ee:00:03:d2:4d:8c:e8:d9:68:60:6c:
                    9f:b6:fe:36:c1:1f:49:3b:7f:84:85:b0:ee:be:3e:
                    bf:0c:aa:b8:01:24:76:a8:33:2d:6b:7b:f4:79:35:
                    17:fb:7f:13:04:f3:50:11:60:e5:b7:33:50:a8:a9:
                    b8:eb:4e:3d:de:ac:c6:20:17:43:75:45:c8:7c:fe:
                    29:f4:62:57:f9:de:ed:99:39:05:8e:fd:64:d9:95:
                    e7:c1:d7:61:cb:2f:be:0c:38:e0:86:62:2c:3b:35:
                    06:b1:1e:18:f5:a5:c9:09:f0:65:68:04:8a:78:f9:
                    fb:25:4c:06:94:5a:6c:40:d9:cb:bc:13:ae:16:fb:
                    9a:6d:d3:ee:a2:0a:f4:b1:f1:b0:9b:d5:51:c4:a1:
                    01:ea:80:d4:c8:78:8f:4e:25:52:54:b7:77:b0:6a:
                    5b:34:64:9d:3d:83:4b:ea:f7:20:6b:b1:d8:b0:56:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:F1:E3:B5:8A:F9:32:0F:78:62:5F:A0:07:1B:0F:7F:DC:9A:E0
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209896

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:88:df:20:f4:db:74:f4:18:ed:af:e0:00:f3:3b:66:68:
         82:ec:49:88:35:1a:4a:ee:23:49:d1:21:aa:6a:49:98:55:a5:
         cf:c2:74:fa:ea:95:9c:aa:92:94:b1:5f:9c:63:a4:10:ca:ef:
         d9:49:98:37:8d:d3:66:6b:ae:49:42:9d:09:ed:61:fe:65:9c:
         23:e1:dc:d4:93:d7:44:3d:90:fb:ce:49:cb:b9:5e:c3:0e:d2:
         70:7f:3c:e7:7f:0a:67:76:11:21:c7:b8:e5:d9:a2:d5:ea:e6:
         b0:b0:41:3c:b4:6f:42:fc:ab:d7:9f:23:c8:eb:8f:cc:6b:19:
         3c:e4:2a:b3:29:38:9d:40:d2:51:e4:84:b1:f0:f2:01:9f:d7:
         58:89:e8:1c:4b:0f:f1:cd:3c:f6:d4:61:b3:ef:36:0e:2f:6a:
         a5:cc:c0:85:b0:f7:0e:af:ce:33:73:4c:fb:59:51:13:13:d4:
         ad:f2:14:62:45:1f:3d:85:29:03:be:60:52:2f:32:64:3c:cb:
         12:94:e8:f8:b7:36:56:b8:ae:6c:c8:df:17:e0:5c:2f:07:90:
         dd:77:a1:e9:b0:ef:d5:d3:e4:b3:f7:8b:ad:ef:d6:a4:87:97:
         e1:35:7c:f0:70:1e:78:6e:86:92:9d:a9:2e:42:9c:57:4b:c4:
         da:10:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:42 2026 by rpki-client