Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/TKi5Jc1udqDBDsgL2rBdfQJKyaw.asa
File:                     TKi5Jc1udqDBDsgL2rBdfQJKyaw.asa (raw, json)
Hash identifier:          KhMBzIjfTHf/tvoofjoDZ0lsVhM+F3bIHDRD7s5Mr04=
Subject key identifier:   4C:A8:B9:25:CD:6E:76:A0:C1:0E:C8:0B:DA:B0:5D:7D:02:4A:C9:AC
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EBC21F653AC033084D31E2EAC22B54
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/TKi5Jc1udqDBDsgL2rBdfQJKyaw.asa
Signing time:             Thu 19 Feb 2026 08:02:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:02:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209982
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:eb:c2:1f:65:3a:c0:33:08:4d:31:e2:ea:c2:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:02:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ca8b925cd6e76a0c10ec80bdab05d7d024ac9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:f7:4f:81:5e:05:91:62:1d:7b:50:97:05:
                    2a:53:fa:38:55:c4:e7:c7:2d:d3:b1:c4:4f:92:e5:
                    86:6c:b0:b2:74:16:4c:3c:dc:72:53:bc:5b:a2:ea:
                    ef:2c:fb:bd:93:83:ad:c2:31:b0:15:cc:f8:64:99:
                    1e:73:e7:92:c7:93:a0:79:51:a6:3e:a1:d7:dc:8c:
                    b0:39:29:93:27:28:be:da:9b:58:7d:ce:ea:37:0b:
                    9f:fc:54:68:6c:94:23:1d:c6:52:b6:99:f5:ae:b5:
                    37:e8:4c:d8:e3:44:12:ef:76:8c:9d:4e:cc:44:26:
                    14:72:42:7a:7c:61:ef:1e:97:2d:26:7e:b3:04:b1:
                    f8:8e:1c:bc:28:d6:89:1a:21:03:9a:a8:1d:a9:e2:
                    66:82:0a:e4:5c:b7:69:49:67:49:04:ff:92:bf:f9:
                    0f:35:14:85:21:f0:30:ea:98:02:8d:a3:57:ad:5c:
                    e0:8e:ec:45:f8:7a:6d:f0:c2:db:08:58:33:32:e7:
                    4a:4f:fd:39:a0:51:84:4f:32:fa:7d:73:a3:64:de:
                    17:31:94:aa:88:8e:3c:be:9e:03:06:78:09:af:71:
                    69:f5:e4:f1:89:22:0c:2c:50:59:bd:61:ba:2c:5e:
                    d2:e8:c6:63:71:e9:d2:0d:20:96:40:67:bb:b0:24:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:B9:25:CD:6E:76:A0:C1:0E:C8:0B:DA:B0:5D:7D:02:4A:C9:AC
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/TKi5Jc1udqDBDsgL2rBdfQJKyaw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209982

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:28:18:4d:06:be:98:64:6d:68:ca:77:aa:55:0a:a7:0b:
         f5:df:3b:cc:20:53:69:77:42:6a:c9:72:64:98:9c:31:b6:fe:
         98:67:74:80:f8:7d:1f:b8:e6:e2:bf:16:ab:5b:68:46:90:17:
         9a:b4:e9:fc:78:4e:28:c6:ea:62:28:1b:ce:49:f6:af:b3:16:
         da:7d:91:ba:f9:53:e5:78:3d:fb:61:00:0b:ad:0e:bb:ed:ee:
         7c:89:be:01:a5:5c:37:23:83:b0:c8:23:80:4e:68:22:8f:02:
         30:8b:19:41:93:ba:f5:7a:05:03:a1:1d:50:a0:a2:8d:cc:5d:
         74:af:3c:75:ec:a6:b5:ec:84:97:94:e6:6e:dd:75:30:6b:9a:
         36:1f:41:87:21:1d:fc:c7:b4:8f:16:3f:a6:2b:52:90:b6:93:
         b5:fd:f5:1b:9d:df:1f:6f:66:f5:0b:04:24:59:fa:8c:8b:82:
         07:fc:5f:aa:36:64:f1:48:f7:bb:e9:30:20:7b:11:bd:87:43:
         d5:d1:4c:48:a2:74:f4:34:56:fc:e8:f3:3b:05:fd:75:b2:2e:
         81:bc:fe:d9:fe:5b:e9:59:16:e8:30:16:13:53:9b:be:3c:87:
         7a:43:76:0e:de:a8:f8:66:4e:4e:7b:4d:4f:62:db:19:77:7f:
         cd:ba:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:55 2026 by rpki-client