Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_X0SJYNz6JPYOk9T1UckINla5oA.asa
File:                     _X0SJYNz6JPYOk9T1UckINla5oA.asa (raw, json)
Hash identifier:          wr0ZCo2EVGbPautel9KxdbBSyMfPprxGjLHwJbNkA+s=
Subject key identifier:   FD:7D:12:25:83:73:E8:93:D8:3A:4F:53:D5:47:24:20:D9:5A:E6:80
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ECAABF6486F08EE89FFB209D35DF9B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_X0SJYNz6JPYOk9T1UckINla5oA.asa
Signing time:             Thu 19 Feb 2026 08:03:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:03:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209868
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ec:aa:bf:64:86:f0:8e:e8:9f:fb:20:9d:35:df:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:03:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd7d12258373e893d83a4f53d5472420d95ae680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:cd:c4:bf:87:5f:1b:a5:c4:e1:ae:59:29:
                    27:fa:59:3c:84:9e:0e:a5:42:61:ff:d3:77:4b:b3:
                    17:d1:5e:ac:0d:a4:0b:f1:7f:f3:b5:6f:e4:be:3d:
                    a5:c2:15:47:27:e6:7e:24:d8:35:e0:cb:e3:c8:a7:
                    57:1f:fb:f6:60:17:5e:51:40:65:57:94:97:3d:3d:
                    8b:3a:a4:1e:40:3c:aa:c3:06:c7:83:2d:70:cb:6b:
                    de:36:34:2e:ca:e7:23:4c:f1:2e:01:1e:01:6d:f4:
                    9a:53:0f:ba:9a:25:5d:9c:85:da:e2:ed:3e:60:0e:
                    6c:bf:3f:c9:f8:3a:09:26:3a:4d:43:a2:f0:f5:99:
                    4e:6d:d4:c7:78:92:f3:35:c2:c4:a9:2c:cc:8d:99:
                    d9:0c:71:1e:0b:bc:d5:c9:01:b3:f3:a0:81:c7:60:
                    80:42:3c:ef:8a:c6:52:88:17:62:c0:4e:17:ae:c2:
                    82:70:98:d9:f1:68:3f:69:30:df:02:4a:3a:d8:9a:
                    30:5b:ea:6a:73:b3:70:c0:13:7d:f8:42:fe:e9:4f:
                    17:75:e3:87:c5:76:f9:2b:06:7c:ce:d9:f2:ea:d8:
                    bc:f3:39:00:0c:19:29:66:f5:51:54:d6:9b:29:b5:
                    00:34:36:9d:4a:01:c2:98:f3:a3:e5:53:a4:a0:52:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7D:12:25:83:73:E8:93:D8:3A:4F:53:D5:47:24:20:D9:5A:E6:80
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_X0SJYNz6JPYOk9T1UckINla5oA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209868

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:3a:82:56:28:ee:24:aa:ac:5d:5c:63:b5:79:26:78:68:
         3d:50:ae:e2:83:64:f6:60:36:c9:1c:ff:e3:44:e8:99:25:36:
         8a:18:89:83:55:dd:fa:fd:71:bf:59:f9:a3:82:bc:21:25:68:
         1a:2f:91:01:df:a8:42:f4:5d:d4:30:5d:16:c5:f9:78:61:fb:
         56:34:ad:8d:e7:fb:21:a1:5f:34:1a:4a:2e:6a:17:26:3f:2c:
         9d:07:8f:91:b6:3d:7c:93:9c:0c:38:81:b3:97:aa:77:76:a6:
         32:05:57:bb:46:3d:78:47:35:49:d2:13:73:40:a9:4a:78:77:
         61:82:04:a3:a9:32:7b:00:8c:05:0d:31:e4:e3:2a:e4:1a:5e:
         db:bc:24:55:29:a8:16:e9:68:ea:f5:58:1f:f4:b4:58:bb:8a:
         30:c4:43:38:23:bc:2c:71:71:a2:e6:a1:85:21:9a:31:87:05:
         d4:70:f3:94:2e:0d:b9:b3:8b:72:66:69:05:23:cb:ef:d1:ec:
         10:98:58:47:ae:16:d6:0b:fa:1a:e1:fa:83:e9:ad:5d:dc:60:
         d3:84:91:0e:67:ee:5a:1a:92:99:4a:7c:f3:fd:7a:8a:32:ed:
         2c:8d:f5:52:c9:c3:1f:aa:32:3c:ac:bb:a1:18:3d:fc:7b:bd:
         8a:21:bf:6d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx07Kq/ZIbwjuif+yCdNd+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDdkMTIyNTgzNzNlODkzZDgzYTRmNTNkNTQ3MjQyMGQ5NWFlNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHjNxL+HXxulxOGuWSkn+lk8hJ4O
pUJh/9N3S7MX0V6sDaQL8X/ztW/kvj2lwhVHJ+Z+JNg14MvjyKdXH/v2YBdeUUBl
V5SXPT2LOqQeQDyqwwbHgy1wy2veNjQuyucjTPEuAR4BbfSaUw+6miVdnIXa4u0+
YA5svz/J+DoJJjpNQ6Lw9ZlObdTHeJLzNcLEqSzMjZnZDHEeC7zVyQGz86CBx2CA
QjzvisZSiBdiwE4XrsKCcJjZ8Wg/aTDfAko62JowW+pqc7NwwBN9+EL+6U8XdeOH
xXb5KwZ8ztny6ti88zkADBkpZvVRVNabKbUANDadSgHCmPOj5VOkoFJBwQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFP19EiWDc+iT2DpPU9VHJCDZWuaAMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvX1gwU0pZTno2SlBZT2s5VDFVY2tJTmxhNW9BLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzzDANBgkqhkiG
9w0BAQsFAAOCAQEAHVQ6glYo7iSqrF1cY7V5JnhoPVCu4oNk9mA2yRz/40TomSU2
ihiJg1Xd+v1xv1n5o4K8ISVoGi+RAd+oQvRd1DBdFsX5eGH7VjStjef7IaFfNBpK
LmoXJj8snQePkbY9fJOcDDiBs5eqd3amMgVXu0Y9eEc1SdITc0CpSnh3YYIEo6ky
ewCMBQ0x5OMq5Bpe27wkVSmoFulo6vVYH/S0WLuKMMRDOCO8LHFxouahhSGaMYcF
1HDzlC4NubOLcmZpBSPL79HsEJhYR64W1gv6GuH6g+mtXdxg04SRDmfuWhqSmUp8
8/16ijLtLI31UsnDH6oyPKy7oRg9/Hu9iiG/bQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:20 2026 by rpki-client