Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/eP-TyCF75KvTvLNdF9vU_rYeU3E.asa
File:                     eP-TyCF75KvTvLNdF9vU_rYeU3E.asa (raw, json)
Hash identifier:          0Epx0U6Itm2kWZsGC4/F56TemMt2wa0wwlWuK+ovmIw=
Subject key identifier:   78:FF:93:C8:21:7B:E4:AB:D3:BC:B3:5D:17:DB:D4:FE:B6:1E:53:71
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74ED98CD0BAA3660A87D9F7635CE7870
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/eP-TyCF75KvTvLNdF9vU_rYeU3E.asa
Signing time:             Thu 19 Feb 2026 08:04:14 +0000
ASPA not before:          Thu 19 Feb 2026 08:04:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205745
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ed:98:cd:0b:aa:36:60:a8:7d:9f:76:35:ce:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:04:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78ff93c8217be4abd3bcb35d17dbd4feb61e5371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:1b:33:57:ab:ff:ca:4b:24:66:44:37:ae:
                    8d:1d:4e:7e:45:98:99:38:bb:91:86:d9:28:38:13:
                    93:35:16:5d:46:94:a2:29:6c:31:d3:c0:ec:1d:64:
                    30:6d:f9:b7:68:45:58:2e:aa:67:dc:93:be:48:70:
                    70:0e:b7:24:26:a3:a9:3c:d2:fa:06:f0:af:34:0b:
                    e6:2e:3d:d5:00:94:f1:94:cd:57:27:3c:32:2c:00:
                    78:f5:e0:60:5b:f2:4f:f6:ad:e2:9b:22:8d:88:90:
                    07:02:99:2e:89:de:e3:e7:1f:df:32:ef:b6:e5:80:
                    bb:f3:35:3f:18:67:c7:ba:4e:9a:bd:0a:1d:39:d5:
                    01:fe:bd:83:da:d8:63:d4:0b:2c:f7:8e:e1:43:b1:
                    f2:bb:1d:60:18:4f:a5:c5:ed:a8:b1:cc:5b:c6:b9:
                    fa:99:4d:00:83:34:57:e7:b3:08:03:ee:d3:d0:9b:
                    cb:25:6d:e3:97:33:db:cd:38:cc:10:a5:9a:20:14:
                    0a:d8:c0:1f:e2:0b:03:f6:b5:18:2e:55:5b:0b:a8:
                    59:96:9b:43:fc:a0:3f:d1:3e:1e:6c:34:4c:b8:5b:
                    5f:cf:c5:d7:8a:d7:f2:2d:8a:32:ca:ad:7c:6b:84:
                    a9:78:ef:46:17:a8:84:8e:77:85:e0:10:74:7e:bb:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FF:93:C8:21:7B:E4:AB:D3:BC:B3:5D:17:DB:D4:FE:B6:1E:53:71
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/eP-TyCF75KvTvLNdF9vU_rYeU3E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205745

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:30:d3:39:93:91:83:67:f3:1b:83:78:58:b1:d2:80:e6:
         65:d5:48:b6:f5:6f:db:4c:7a:6f:6b:97:1c:f5:ef:bc:21:d1:
         32:41:c8:6e:5c:b1:c1:28:a3:6d:ca:b0:39:6e:64:62:39:33:
         69:59:50:45:61:7a:d0:60:2d:ee:d1:29:31:5c:72:1f:ef:6f:
         9a:69:0d:fc:91:18:28:23:e8:f0:6b:dd:4d:01:e3:49:03:ff:
         cd:83:f9:bc:e4:3a:d9:d8:d0:de:c6:e3:d7:50:c6:b9:78:61:
         c9:b2:e3:fb:7f:f2:1a:9c:10:4f:00:fc:1b:3e:a0:ed:67:93:
         61:5f:fc:ea:db:83:89:5a:50:ef:9c:e8:95:dc:9f:cc:a4:41:
         11:53:47:99:52:36:4d:b4:7e:35:7e:1d:5c:a0:a3:7f:06:0f:
         e7:73:84:c8:c7:77:bf:bb:fa:e9:27:e9:a8:14:7d:e3:c0:41:
         92:cd:f0:9e:48:80:0a:b6:3a:fd:ff:13:1d:49:ab:d5:21:04:
         c6:d3:df:73:9b:f8:6c:9f:f6:3e:6c:66:b4:ad:eb:56:da:77:
         bc:1e:dd:34:df:59:46:70:54:9e:9a:9d:f1:43:9a:95:25:e4:
         54:85:f9:cc:f6:8e:39:bf:b9:55:0f:fb:f0:e1:c6:98:9d:46:
         10:c6:88:5f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx07ZjNC6o2YKh9n3Y1znhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGZmOTNjODIxN2JlNGFiZDNiY2IzNWQxN2RiZDRmZWI2MWU1MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e4bM1er/8pLJGZEN66NHU5+RZiZ
OLuRhtkoOBOTNRZdRpSiKWwx08DsHWQwbfm3aEVYLqpn3JO+SHBwDrckJqOpPNL6
BvCvNAvmLj3VAJTxlM1XJzwyLAB49eBgW/JP9q3imyKNiJAHApkuid7j5x/fMu+2
5YC78zU/GGfHuk6avQodOdUB/r2D2thj1Ass947hQ7Hyux1gGE+lxe2oscxbxrn6
mU0AgzRX57MIA+7T0JvLJW3jlzPbzTjMEKWaIBQK2MAf4gsD9rUYLlVbC6hZlptD
/KA/0T4ebDRMuFtfz8XXitfyLYoyyq18a4SpeO9GF6iEjneF4BB0frvd4QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHj/k8ghe+Sr07yzXRfb1P62HlNxMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvZVAtVHlDRjc1S3ZUdkxOZEY5dlVfclllVTNFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjsTANBgkqhkiG
9w0BAQsFAAOCAQEAGusw0zmTkYNn8xuDeFix0oDmZdVItvVv20x6b2uXHPXvvCHR
MkHIblyxwSijbcqwOW5kYjkzaVlQRWF60GAt7tEpMVxyH+9vmmkN/JEYKCPo8Gvd
TQHjSQP/zYP5vOQ62djQ3sbj11DGuXhhybLj+3/yGpwQTwD8Gz6g7WeTYV/86tuD
iVpQ75zoldyfzKRBEVNHmVI2TbR+NX4dXKCjfwYP53OEyMd3v7v66SfpqBR948BB
ks3wnkiACrY6/f8THUmr1SEExtPfc5v4bJ/2PmxmtK3rVtp3vB7dNN9ZRnBUnpqd
8UOalSXkVIX5zPaOOb+5VQ/78OHGmJ1GEMaIXw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:47 2026 by rpki-client