Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ekIec3Z4NcbOfZeJz__dheQ6ADI.asa
File:                     ekIec3Z4NcbOfZeJz__dheQ6ADI.asa (raw, json)
Hash identifier:          wMvgjbkgn/I2EISfB6edcGe5yeO8pyjG3sRpa7AdptY=
Subject key identifier:   7A:42:1E:73:76:78:35:C6:CE:7D:97:89:CF:FF:DD:85:E4:3A:00:32
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EE84171288B2D259FDE8BB2E99375B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ekIec3Z4NcbOfZeJz__dheQ6ADI.asa
Signing time:             Thu 19 Feb 2026 08:05:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:05:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206340
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ee:84:17:12:88:b2:d2:59:fd:e8:bb:2e:99:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:05:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a421e73767835c6ce7d9789cfffdd85e43a0032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:ba:da:e7:02:fb:ad:dd:56:61:3f:e6:a5:
                    9d:3b:8f:95:d2:a2:b7:83:c1:9e:f9:01:d9:72:95:
                    9f:a0:e5:1e:bd:c9:74:7e:9d:fc:99:88:bf:08:41:
                    64:20:e0:48:dc:8d:0a:9f:0e:c5:c3:fa:93:20:a1:
                    5e:6f:f7:46:0a:7e:10:00:3a:51:ef:0e:e7:f2:ab:
                    e7:72:2a:73:e5:e7:a9:32:fd:63:57:4a:bb:25:74:
                    45:4b:c2:bf:47:1a:53:27:bf:5a:5b:78:8c:b5:09:
                    17:90:8e:76:20:f7:9f:04:e7:3f:c9:ea:46:2d:56:
                    d6:87:07:25:42:ec:f7:a7:e1:aa:a3:51:55:b3:8a:
                    f1:a6:5e:78:5a:1e:6f:64:d5:73:42:48:be:4a:b6:
                    f6:bc:62:27:62:c6:35:bd:e3:11:09:5b:04:f5:10:
                    75:1b:2d:39:63:22:6c:3d:55:d6:19:4c:3c:3c:3d:
                    a5:a2:17:0e:19:ce:46:4b:8d:2d:f8:27:0a:78:77:
                    3a:8e:e7:ee:fe:33:9a:20:57:78:0c:1c:83:a2:db:
                    26:66:8e:e6:33:3c:c6:e7:b8:f4:14:8e:91:c6:7d:
                    59:85:2a:a2:32:bd:a9:f1:07:99:54:d7:26:40:4c:
                    f1:3a:c9:c9:0f:c6:66:00:8e:44:40:dd:d1:bb:15:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:42:1E:73:76:78:35:C6:CE:7D:97:89:CF:FF:DD:85:E4:3A:00:32
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ekIec3Z4NcbOfZeJz__dheQ6ADI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206340

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:8e:a2:f6:c8:12:3c:bd:00:45:3f:0c:51:dc:ec:72:a5:
         25:9e:44:12:ab:b3:14:50:cd:6a:8d:05:1c:ee:fc:a5:1f:89:
         4e:cd:5d:21:e6:9c:35:81:57:01:8a:57:1f:af:71:52:2c:9b:
         4f:65:48:86:f8:3d:79:d2:95:86:6b:fa:bd:fd:79:fa:b9:4b:
         ca:aa:05:b8:ea:a4:2d:5d:9d:04:ee:0b:00:1f:a7:c9:7a:62:
         bd:41:11:e9:c0:77:fd:71:19:ea:21:50:73:1b:d1:b0:e4:32:
         1d:0c:05:23:4d:e5:a0:c7:18:52:48:d4:b7:1a:37:38:22:21:
         3c:9c:0c:f2:08:6f:00:77:8e:4c:5a:94:7b:a1:e8:d4:40:d7:
         64:e8:69:e1:ae:12:78:2a:c8:54:4c:7b:54:fa:a9:dc:aa:0c:
         c6:3d:19:1f:09:89:e7:ea:6b:1e:e0:c8:9a:09:02:16:5a:7e:
         3d:32:bb:80:a2:22:b2:ef:d2:00:03:be:81:9b:aa:5f:3d:0c:
         a4:63:2d:a2:0a:ef:e9:bc:c1:fc:b3:75:dc:62:f9:c8:25:37:
         64:ac:cc:24:f3:a8:3d:a2:77:85:fe:ef:e7:f9:e7:5b:79:3e:
         b6:e9:0f:6c:5b:64:9b:ba:a2:41:fd:da:c7:c9:3e:02:21:27:
         fa:e4:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:00 2026 by rpki-client