Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y1VCqcHN9JNkDmtLjHMm6_XVT4k.asa
File:                     Y1VCqcHN9JNkDmtLjHMm6_XVT4k.asa (raw, json)
Hash identifier:          e2cKXXD1zbqSZ1yXzEZ2oDPXvDDfN7ENGoKLgz+1S/A=
Subject key identifier:   63:55:42:A9:C1:CD:F4:93:64:0E:6B:4B:8C:73:26:EB:F5:D5:4F:89
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EF6C70A5E2AB102CC78C2F6AD83A28
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y1VCqcHN9JNkDmtLjHMm6_XVT4k.asa
Signing time:             Thu 19 Feb 2026 08:06:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:06:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206644
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ef:6c:70:a5:e2:ab:10:2c:c7:8c:2f:6a:d8:3a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:06:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=635542a9c1cdf493640e6b4b8c7326ebf5d54f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:f8:ae:25:bb:21:cd:a0:91:dc:57:ba:aa:
                    c9:77:b7:12:cd:4b:ad:90:a1:a4:51:cb:da:d2:ba:
                    c6:4b:ee:86:ac:c7:0e:66:08:48:67:47:68:31:d9:
                    67:aa:09:cd:a5:29:37:87:f1:49:32:a8:aa:38:a9:
                    f3:29:6a:0f:50:09:e7:1d:17:58:e5:7c:ab:7e:b4:
                    a7:1d:f7:f1:53:61:54:bd:b1:11:ca:03:14:ec:ee:
                    e5:9b:d7:f8:40:7f:d4:46:be:66:a3:87:06:e5:af:
                    35:41:31:d8:78:f6:68:53:60:f5:fb:e7:d9:10:65:
                    b6:f6:cb:85:2b:1d:71:66:a7:42:a3:2c:76:39:9f:
                    49:d5:61:17:00:8c:55:c1:78:c6:3d:b1:11:d2:ae:
                    47:f6:48:8b:a1:5f:92:76:af:3b:cd:bc:7f:d9:bc:
                    c5:32:a3:85:78:c0:2d:51:e8:6f:b5:0b:5d:59:a8:
                    f8:b9:4a:7c:48:32:eb:86:39:2c:7d:f9:aa:9a:01:
                    39:06:21:59:10:a3:7d:ef:b9:27:63:84:4a:ab:3a:
                    3a:b9:d5:6f:d5:81:06:49:0d:fb:b9:d6:86:e7:89:
                    01:e8:8b:b3:7c:c6:a2:c4:3b:b6:9f:b9:44:1e:75:
                    f9:23:30:34:2a:84:c7:6d:76:d7:19:f6:f2:6b:9e:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:42:A9:C1:CD:F4:93:64:0E:6B:4B:8C:73:26:EB:F5:D5:4F:89
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y1VCqcHN9JNkDmtLjHMm6_XVT4k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206644

    Signature Algorithm: sha256WithRSAEncryption
         17:24:f1:a2:dd:97:de:37:48:19:44:f3:8f:88:93:8d:f9:bf:
         a9:88:a4:d1:6d:1d:cc:90:50:e3:0f:be:c9:09:c8:4b:3e:1b:
         c3:84:33:05:bf:84:f2:7c:fe:a3:a7:7f:f0:e5:f0:d1:14:84:
         ef:20:ab:82:f8:65:1e:50:07:df:fb:66:72:a3:db:6d:a1:e5:
         94:9b:b3:46:ec:5c:98:4a:e0:50:86:2b:ba:50:ff:9f:a1:d7:
         c5:71:7c:c4:48:b3:29:b8:92:4c:ee:65:29:d0:00:30:72:ce:
         66:2b:c4:33:7e:7f:3c:f3:cb:3d:a9:31:d7:1e:aa:35:21:64:
         c2:bf:65:a9:9d:b5:83:0d:eb:6f:fc:e2:c7:ba:00:80:15:f5:
         21:1c:82:3d:7f:b1:56:96:29:72:ad:d5:0b:68:9d:9a:1f:09:
         00:44:b6:02:09:68:40:7e:4a:bb:d8:13:a7:3e:fe:f9:db:79:
         b9:45:3b:da:d2:35:ad:00:61:9c:6b:a6:32:37:f9:c5:12:fb:
         c0:36:1c:5c:b8:1a:29:d7:2f:16:2c:0c:b1:42:29:44:ba:33:
         53:c4:ed:7a:56:91:84:d9:16:ed:47:6a:f6:0b:d7:03:fd:5d:
         f8:be:04:39:19:79:15:c8:74:bc:55:96:0a:4b:50:bb:f5:ce:
         4a:ce:c6:8f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx072xwpeKrECzHjC9q2DooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzU1NDJhOWMxY2RmNDkzNjQwZTZiNGI4YzczMjZlYmY1ZDU0Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQz4riW7Ic2gkdxXuqrJd7cSzUut
kKGkUcva0rrGS+6GrMcOZghIZ0doMdlnqgnNpSk3h/FJMqiqOKnzKWoPUAnnHRdY
5XyrfrSnHffxU2FUvbERygMU7O7lm9f4QH/URr5mo4cG5a81QTHYePZoU2D1++fZ
EGW29suFKx1xZqdCoyx2OZ9J1WEXAIxVwXjGPbER0q5H9kiLoV+Sdq87zbx/2bzF
MqOFeMAtUehvtQtdWaj4uUp8SDLrhjksffmqmgE5BiFZEKN977knY4RKqzo6udVv
1YEGSQ37udaG54kB6IuzfMaixDu2n7lEHnX5IzA0KoTHbXbXGfbya575uwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGNVQqnBzfSTZA5rS4xzJuv11U+JMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvWTFWQ3FjSE45Sk5rRG10TGpITW02X1hWVDRrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnNDANBgkqhkiG
9w0BAQsFAAOCAQEAFyTxot2X3jdIGUTzj4iTjfm/qYik0W0dzJBQ4w++yQnISz4b
w4QzBb+E8nz+o6d/8OXw0RSE7yCrgvhlHlAH3/tmcqPbbaHllJuzRuxcmErgUIYr
ulD/n6HXxXF8xEizKbiSTO5lKdAAMHLOZivEM35/PPPLPakx1x6qNSFkwr9lqZ21
gw3rb/zix7oAgBX1IRyCPX+xVpYpcq3VC2idmh8JAES2AgloQH5Ku9gTpz7++dt5
uUU72tI1rQBhnGumMjf5xRL7wDYcXLgaKdcvFiwMsUIpRLozU8TtelaRhNkW7Udq
9gvXA/1d+L4EORl5Fch0vFWWCktQu/XOSs7Gjw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:59 2026 by rpki-client