Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xes_k3JoKGrL7_6I08B4I_XzPgI.asa
File:                     Xes_k3JoKGrL7_6I08B4I_XzPgI.asa (raw, json)
Hash identifier:          NnPfQBVat6PhW7TcIeJkZO5d0cW65dOzTHlcv5ZaWGA=
Subject key identifier:   5D:EB:3F:93:72:68:28:6A:CB:EF:FE:88:D3:C0:78:23:F5:F3:3E:02
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EE8448DAF8271E3591ED8906014E1D
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xes_k3JoKGrL7_6I08B4I_XzPgI.asa
Signing time:             Thu 19 Feb 2026 08:05:14 +0000
ASPA not before:          Thu 19 Feb 2026 08:05:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206413
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ee:84:48:da:f8:27:1e:35:91:ed:89:06:01:4e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:05:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5deb3f937268286acbeffe88d3c07823f5f33e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:87:65:05:a9:d2:28:d9:ae:0b:5b:a0:b9:
                    a7:bd:37:92:82:30:60:18:f5:30:5f:03:e9:d1:70:
                    d5:29:3b:2d:67:d8:ce:49:a6:e9:3e:5e:db:a6:17:
                    44:c2:b4:a3:ec:f8:6f:36:8e:46:dd:de:0c:1c:22:
                    2f:88:73:fe:79:39:2b:29:ca:ea:77:b7:ea:64:ec:
                    84:0a:46:ea:0e:46:72:1a:c1:db:3a:c7:92:ac:b5:
                    a1:86:40:d8:0e:95:fc:cc:d6:b2:9e:0a:ca:b0:36:
                    29:3d:da:1b:86:57:b4:35:78:a9:0b:1d:02:1b:64:
                    79:82:44:49:f9:1d:5c:a6:a2:8f:51:cb:8d:0c:fa:
                    b6:fb:64:79:a3:9c:f2:0b:07:1f:ce:e8:48:af:54:
                    7e:99:47:ce:6b:d9:92:45:26:24:d9:07:e7:5a:58:
                    b5:ac:21:79:63:16:67:0e:2c:8b:eb:34:a2:b7:8c:
                    f5:2f:25:82:a8:9d:39:1a:c7:9a:e6:64:e8:09:6d:
                    95:bf:05:3e:ae:84:03:46:d0:d0:77:b0:8d:1d:9b:
                    d3:e6:de:1b:33:51:15:96:65:d7:cc:3c:2c:13:32:
                    e7:e1:6f:9f:a0:c3:d9:54:f1:5a:fe:6a:a3:c5:92:
                    9d:61:e3:4a:8e:cd:eb:18:f3:4a:4d:65:c5:d4:7f:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:3F:93:72:68:28:6A:CB:EF:FE:88:D3:C0:78:23:F5:F3:3E:02
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xes_k3JoKGrL7_6I08B4I_XzPgI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206413

    Signature Algorithm: sha256WithRSAEncryption
         96:91:25:65:5b:db:23:41:82:2e:f8:17:80:26:11:ff:c5:37:
         90:7d:7b:2f:ee:a6:9d:11:67:c9:87:31:df:73:e2:0b:50:ff:
         c7:44:e6:23:bd:5d:5e:ac:8a:6b:74:14:2c:72:4a:81:15:e3:
         ee:c0:54:d4:15:68:70:bf:9c:5d:49:79:9f:de:bc:67:f0:ca:
         c7:ec:d6:90:24:14:c6:71:48:4d:ca:5b:c8:7e:8b:2d:ba:33:
         32:b3:07:3d:7b:38:a7:ae:1d:dc:2c:5a:1d:22:c9:f1:ad:43:
         4f:61:68:64:8f:7d:d3:ac:7a:4b:54:ad:6d:43:85:0b:3c:35:
         2b:48:f4:63:4d:0f:e3:2b:27:a7:72:bc:59:f3:52:95:94:ae:
         59:b0:51:12:ab:b6:17:f3:43:f4:c5:82:38:af:97:a3:12:bc:
         6d:dd:c9:ef:4b:88:e8:0a:e8:5b:c7:b8:58:5c:45:fd:82:12:
         84:24:a1:3a:6f:51:f2:c9:79:bf:91:e8:22:ef:83:fc:26:19:
         bb:4f:64:9e:7b:f6:19:e5:1e:62:14:f3:53:d2:c5:e7:c5:66:
         18:99:a6:9c:be:0b:a3:d5:36:23:d3:a2:23:1f:96:90:94:88:
         83:4c:1b:4c:6e:49:e9:68:45:da:33:10:52:66:b0:1f:03:db:
         29:86:2d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:18 2026 by rpki-client