Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y2rvHUYG5qjlTuTVsni1vN_7lXQ.asa
File:                     Y2rvHUYG5qjlTuTVsni1vN_7lXQ.asa (raw, json)
Hash identifier:          Yfb/vhEkQuXSNMsG01Qd/+GyHfdUggN7YyBuAU3nhUk=
Subject key identifier:   63:6A:EF:1D:46:06:E6:A8:E5:4E:E4:D5:B2:78:B5:BC:DF:FB:95:74
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EF6D1307C99B9D37FD3D55155954E9
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y2rvHUYG5qjlTuTVsni1vN_7lXQ.asa
Signing time:             Thu 19 Feb 2026 08:06:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:06:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206744
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ef:6d:13:07:c9:9b:9d:37:fd:3d:55:15:59:54:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:06:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=636aef1d4606e6a8e54ee4d5b278b5bcdffb9574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:b3:04:ad:66:f3:b4:e8:35:cc:2a:1e:b4:
                    47:a7:b4:c4:fb:89:5e:2c:ed:54:96:39:18:2a:b2:
                    9a:0e:a3:2b:b5:db:97:2e:c1:fd:7b:7e:16:eb:cb:
                    45:1c:91:d6:23:56:a1:b6:62:bd:bf:5a:8b:7a:c5:
                    20:31:ac:31:df:ac:a3:50:fe:bc:01:ee:c3:55:5d:
                    ed:4d:99:bc:59:72:7b:48:fd:3d:dc:c1:79:20:b9:
                    16:9a:16:f1:38:9a:4f:29:18:ca:d2:88:d4:a5:9b:
                    07:8e:77:91:21:ef:c4:21:37:4e:f4:f5:5c:4b:89:
                    56:29:2c:bb:e4:6e:43:0b:df:e2:95:75:ef:df:9f:
                    e2:78:2f:44:e5:43:bd:44:64:ea:df:2e:cb:7c:a7:
                    00:7a:97:53:09:df:80:91:23:14:5c:b0:b5:41:ff:
                    e0:a6:98:3b:75:dd:89:8c:97:a6:b8:4a:39:a9:7d:
                    6d:c6:63:35:d6:fa:01:77:88:f7:d5:93:16:8c:ac:
                    af:cf:32:ff:f9:80:70:da:98:91:83:67:cf:5a:38:
                    bc:6b:85:92:26:e1:f0:1d:36:6d:eb:0a:a2:73:1a:
                    41:c5:a2:81:cf:8d:97:0a:68:a2:f6:ae:75:58:21:
                    24:a2:45:7d:81:ac:f0:b5:9f:c2:d1:27:46:1a:37:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:EF:1D:46:06:E6:A8:E5:4E:E4:D5:B2:78:B5:BC:DF:FB:95:74
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Y2rvHUYG5qjlTuTVsni1vN_7lXQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206744

    Signature Algorithm: sha256WithRSAEncryption
         23:67:88:6b:cd:5f:a5:51:99:26:80:8a:fa:63:44:05:a4:55:
         a9:ab:17:d2:58:f8:40:ea:ed:15:1e:1f:7a:91:f8:89:ab:a6:
         bf:e2:83:ab:77:dd:2b:cb:3c:f9:88:cf:ea:f7:1a:7e:4b:ed:
         6a:38:e8:ed:5e:f7:1e:26:4e:3e:0e:cd:86:23:95:bc:9b:86:
         57:f4:8d:16:b5:f2:bf:01:2f:07:07:c9:35:7c:cc:fa:b0:cc:
         93:40:dd:8e:3a:b3:15:3c:1e:76:73:4a:f6:44:e4:bf:81:ac:
         18:18:6b:d1:bc:a1:a2:37:42:d5:ea:85:22:44:f7:fe:99:e4:
         33:6e:1c:e7:b6:df:7e:4a:3d:d9:57:e1:ba:8f:5b:cc:0b:26:
         92:ca:19:b3:77:37:24:44:23:1b:17:89:1a:f3:35:d4:04:7c:
         ce:9c:f3:fa:6c:49:8e:7c:02:54:df:fe:2b:f4:89:73:a7:26:
         f6:51:08:08:9f:72:45:79:eb:ee:8e:a2:e3:24:be:94:a0:20:
         6c:84:5e:85:f9:ca:36:89:ab:6b:41:31:e5:dd:c2:96:9e:57:
         da:91:2b:21:27:2d:7f:0f:b4:de:6e:d4:24:fc:c4:ce:84:84:
         95:39:04:14:17:59:45:43:50:26:09:5a:48:ea:64:ee:32:a0:
         39:8a:6e:cc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx0720TB8mbnTf9PVUVWVTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzZhZWYxZDQ2MDZlNmE4ZTU0ZWU0ZDViMjc4YjViY2RmZmI5NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru+zBK1m87ToNcwqHrRHp7TE+4le
LO1UljkYKrKaDqMrtduXLsH9e34W68tFHJHWI1ahtmK9v1qLesUgMawx36yjUP68
Ae7DVV3tTZm8WXJ7SP093MF5ILkWmhbxOJpPKRjK0ojUpZsHjneRIe/EITdO9PVc
S4lWKSy75G5DC9/ilXXv35/ieC9E5UO9RGTq3y7LfKcAepdTCd+AkSMUXLC1Qf/g
ppg7dd2JjJemuEo5qX1txmM11voBd4j31ZMWjKyvzzL/+YBw2piRg2fPWji8a4WS
JuHwHTZt6wqicxpBxaKBz42XCmii9q51WCEkokV9gazwtZ/C0SdGGjcOKwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGNq7x1GBuao5U7k1bJ4tbzf+5V0MB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvWTJydkhVWUc1cWpsVHVUVnNuaTF2Tl83bFhRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnmDANBgkqhkiG
9w0BAQsFAAOCAQEAI2eIa81fpVGZJoCK+mNEBaRVqasX0lj4QOrtFR4fepH4iaum
v+KDq3fdK8s8+YjP6vcafkvtajjo7V73HiZOPg7NhiOVvJuGV/SNFrXyvwEvBwfJ
NXzM+rDMk0DdjjqzFTwednNK9kTkv4GsGBhr0byhojdC1eqFIkT3/pnkM24c57bf
fko92Vfhuo9bzAsmksoZs3c3JEQjGxeJGvM11AR8zpzz+mxJjnwCVN/+K/SJc6cm
9lEICJ9yRXnr7o6i4yS+lKAgbIRehfnKNomra0Ex5d3Clp5X2pErISctfw+03m7U
JPzEzoSElTkEFBdZRUNQJglaSOpk7jKgOYpuzA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:15:44 2026 by rpki-client