Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_3NLZzXMtKTQ4_EiFbBATtCR7lU.asa
File:                     _3NLZzXMtKTQ4_EiFbBATtCR7lU.asa (raw, json)
Hash identifier:          XdtELNgAyVO+ezOR5PgRu5sGPDjsq49knzrgmOo+MXI=
Subject key identifier:   FF:73:4B:67:35:CC:B4:A4:D0:E3:F1:22:15:B0:40:4E:D0:91:EE:55
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ED988AAFDBDCBB20C95241089E2B99
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_3NLZzXMtKTQ4_EiFbBATtCR7lU.asa
Signing time:             Thu 19 Feb 2026 08:04:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:04:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205301
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ed:98:8a:af:db:dc:bb:20:c9:52:41:08:9e:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:04:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff734b6735ccb4a4d0e3f12215b0404ed091ee55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:59:9d:15:71:6f:14:d9:f0:1f:29:f4:01:
                    a1:a2:82:2d:10:84:47:3b:58:52:54:c5:09:b2:56:
                    85:a9:06:76:5a:52:75:52:5c:a2:89:37:7e:b6:0d:
                    b8:c8:6c:02:7f:2e:ab:74:ed:9c:ea:dd:f0:ea:04:
                    b2:9b:62:ce:d3:8e:40:19:cd:a4:ba:cb:37:b7:f3:
                    6c:14:c5:76:a9:40:96:07:8a:a8:b8:d1:d2:ef:e1:
                    f3:3a:3f:cc:e0:85:9d:e7:28:f2:74:e0:92:74:72:
                    d7:73:c1:94:79:00:45:22:14:fc:76:39:db:26:a0:
                    cd:95:64:6b:77:b4:e2:94:65:7e:b5:7c:d6:bb:38:
                    33:f9:a5:8f:35:ee:59:9d:12:82:09:c9:48:ca:61:
                    00:03:e1:8c:d2:5f:e4:00:e1:56:0c:f2:5b:b4:c9:
                    08:02:57:51:3f:1e:96:de:fb:e8:cb:a4:e6:4a:2e:
                    8d:31:31:d1:17:b1:e8:29:50:e6:bd:cd:25:73:6e:
                    c9:4c:83:45:93:7e:52:6a:38:e9:40:d4:49:6c:74:
                    46:62:d7:4e:01:b1:ff:05:77:1e:c0:17:3f:f3:15:
                    fa:ac:99:6a:48:ae:4f:63:d0:96:56:35:b5:a4:57:
                    88:68:0e:c2:b7:bf:b2:1e:19:c2:01:41:60:52:bb:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:4B:67:35:CC:B4:A4:D0:E3:F1:22:15:B0:40:4E:D0:91:EE:55
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_3NLZzXMtKTQ4_EiFbBATtCR7lU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205301

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:b9:ac:c0:fa:85:b6:7a:4e:d1:17:fd:77:27:b8:95:21:
         e7:43:de:03:2a:f5:20:68:e4:29:c2:48:37:bc:61:b6:d0:c1:
         d3:c2:30:b5:c0:41:b0:73:dc:02:c5:ce:3d:e9:ad:bc:bf:32:
         5c:4e:98:f0:b8:b4:70:3b:70:53:34:9b:f5:27:90:c0:b6:64:
         b9:b2:dd:e0:a2:10:ea:a6:27:10:68:78:e6:a6:4f:a5:68:f7:
         f1:a9:b5:bf:69:e1:cc:71:ea:cf:be:c2:d5:9b:da:36:84:2c:
         1c:ae:17:41:ce:ff:f2:2f:43:c4:3a:3e:37:f5:c1:10:7a:b2:
         fa:5d:72:14:82:61:0c:76:2b:7a:c6:af:bc:23:cc:58:b6:0a:
         16:7f:88:97:e8:d8:d6:71:fe:8e:aa:dd:ea:3d:4b:c7:27:39:
         c0:fa:37:70:b0:d2:0d:dc:91:cb:a8:f4:2f:56:fa:58:d3:8e:
         d9:c1:e3:fe:3d:ad:f3:17:a3:84:fd:47:16:28:a1:a7:28:ca:
         47:e3:26:7d:65:d2:a4:2d:1a:06:76:a7:83:68:24:0a:81:8e:
         16:57:42:ea:d9:0c:97:3e:6a:47:9c:a1:6f:d5:44:49:70:a3:
         bb:3b:64:d9:49:02:d5:c4:41:99:a5:dd:2a:c5:e1:4d:17:1c:
         d9:71:1c:a6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx07ZiKr9vcuyDJUkEIniuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjczNGI2NzM1Y2NiNGE0ZDBlM2YxMjIxNWIwNDA0ZWQwOTFlZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW9ZnRVxbxTZ8B8p9AGhooItEIRH
O1hSVMUJslaFqQZ2WlJ1UlyiiTd+tg24yGwCfy6rdO2c6t3w6gSym2LO045AGc2k
uss3t/NsFMV2qUCWB4qouNHS7+HzOj/M4IWd5yjydOCSdHLXc8GUeQBFIhT8djnb
JqDNlWRrd7TilGV+tXzWuzgz+aWPNe5ZnRKCCclIymEAA+GM0l/kAOFWDPJbtMkI
AldRPx6W3vvoy6TmSi6NMTHRF7HoKVDmvc0lc27JTINFk35SajjpQNRJbHRGYtdO
AbH/BXcewBc/8xX6rJlqSK5PY9CWVjW1pFeIaA7Ct7+yHhnCAUFgUrsWywIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFP9zS2c1zLSk0OPxIhWwQE7Qke5VMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvXzNOTFp6WE10S1RRNF9FaUZiQkFUdENSN2xVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMh9TANBgkqhkiG
9w0BAQsFAAOCAQEAN5+5rMD6hbZ6TtEX/XcnuJUh50PeAyr1IGjkKcJIN7xhttDB
08IwtcBBsHPcAsXOPemtvL8yXE6Y8Li0cDtwUzSb9SeQwLZkubLd4KIQ6qYnEGh4
5qZPpWj38am1v2nhzHHqz77C1ZvaNoQsHK4XQc7/8i9DxDo+N/XBEHqy+l1yFIJh
DHYresavvCPMWLYKFn+Il+jY1nH+jqrd6j1Lxyc5wPo3cLDSDdyRy6j0L1b6WNOO
2cHj/j2t8xejhP1HFiihpyjKR+MmfWXSpC0aBnang2gkCoGOFldC6tkMlz5qR5yh
b9VESXCjuztk2UkC1cRBmaXdKsXhTRcc2XEcpg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:08 2026 by rpki-client