Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/aeOfb-zGDsa8_FBW39pk1js57Hk.asa
File:                     aeOfb-zGDsa8_FBW39pk1js57Hk.asa (raw, json)
Hash identifier:          BYAkM9IIl83ZrQKLAPnm2cYbw5HnZaKf/2Zs0U3sgJw=
Subject key identifier:   69:E3:9F:6F:EC:C6:0E:C6:BC:FC:50:56:DF:DA:64:D6:3B:39:EC:79
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ECAB114529BF674B3FCA8858F713ED
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/aeOfb-zGDsa8_FBW39pk1js57Hk.asa
Signing time:             Thu 19 Feb 2026 08:03:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:03:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209883
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ec:ab:11:45:29:bf:67:4b:3f:ca:88:58:f7:13:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:03:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e39f6fecc60ec6bcfc5056dfda64d63b39ec79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:27:7e:b0:43:97:30:d4:c4:6e:c6:87:9e:
                    b8:f6:55:ec:cf:4b:1f:25:d0:c6:e0:9e:26:c4:67:
                    c5:f0:ff:ff:01:e1:a9:a5:e7:de:70:be:19:99:91:
                    b2:2f:f7:27:e3:36:8e:c9:9b:89:eb:8e:26:95:4d:
                    21:a8:f4:19:19:19:5a:3d:1b:db:0c:ea:49:f4:f9:
                    7b:64:7e:b6:54:0c:bd:ee:be:68:fb:42:09:9c:23:
                    8f:d1:32:37:8b:1c:4e:09:11:71:6b:21:fe:8d:3a:
                    bd:01:a1:94:92:42:4f:61:41:97:e7:bc:85:e6:54:
                    33:99:9f:1f:3b:fc:34:18:9d:dc:fd:18:db:ad:ca:
                    05:0a:31:b5:05:ac:02:76:ff:26:8a:61:10:b0:7b:
                    78:a4:71:61:28:c4:12:43:a5:0a:ef:a2:15:cd:e8:
                    00:2d:62:ad:52:f4:c2:12:97:89:3e:37:fb:ef:77:
                    87:75:5a:d0:a1:b8:4b:17:d3:b1:bc:1f:db:c5:08:
                    db:47:b5:50:f1:17:2f:ca:41:32:55:cd:00:e7:4c:
                    0f:98:9d:4a:63:61:c9:71:ac:55:70:5b:7c:16:bd:
                    c8:84:d3:e5:79:3f:28:7c:d9:25:c5:e0:1e:2a:4d:
                    03:7a:33:8f:1f:68:a8:7b:53:41:46:a5:7a:7e:69:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:9F:6F:EC:C6:0E:C6:BC:FC:50:56:DF:DA:64:D6:3B:39:EC:79
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/aeOfb-zGDsa8_FBW39pk1js57Hk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209883

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:91:df:24:db:c3:75:d5:6d:47:b7:b5:ac:08:c0:c1:73:
         d7:3b:70:88:59:a0:89:1e:2c:b7:c1:3f:0b:c3:4c:dd:2b:b4:
         72:91:17:22:20:be:ab:5f:ca:12:95:34:70:92:4e:36:13:f3:
         7a:70:16:66:1a:a4:a5:a6:e7:a4:7a:a6:a5:c9:c9:1a:91:7e:
         31:ff:28:64:55:f6:6c:3d:94:b9:ed:23:e6:57:a8:13:b9:a8:
         3e:df:06:13:94:49:3f:92:d2:d4:66:9a:b8:a9:47:08:be:be:
         d5:18:49:6d:77:9a:b3:2d:4d:23:63:ad:1c:24:3c:35:52:06:
         90:92:6d:43:ee:20:37:66:3c:52:a4:89:54:15:0d:fb:89:c0:
         14:cb:59:18:e5:2c:f4:51:b3:f6:8c:f6:05:eb:4d:4d:a3:c9:
         64:73:fc:d8:b7:6e:ec:3a:ad:a6:b1:12:6b:00:c0:d1:a1:db:
         33:1b:3b:86:c4:24:09:93:4d:16:2b:15:c4:6b:e6:cf:ca:2a:
         ca:bf:e4:17:88:dd:f5:46:89:24:48:06:cd:4d:c2:60:fe:b8:
         49:71:2e:98:d6:8a:c4:e2:fc:13:d1:36:01:0d:52:91:d8:a6:
         bf:47:cf:d3:44:bb:22:52:e9:96:9f:85:32:4b:25:5e:8a:93:
         62:e3:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:50 2026 by rpki-client