Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mIRkQSiXrLKr5pQXg2knYf9hb7g.asa
File:                     mIRkQSiXrLKr5pQXg2knYf9hb7g.asa (raw, json)
Hash identifier:          lUilE7PxJwildzfMeiNR/Q8/cRIjOC3StPRdmvx0kvw=
Subject key identifier:   98:84:64:41:28:97:AC:B2:AB:E6:94:17:83:69:27:61:FF:61:6F:B8
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EE81019E5E0C487A5222B602EBFE57
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mIRkQSiXrLKr5pQXg2knYf9hb7g.asa
Signing time:             Thu 19 Feb 2026 08:05:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:05:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205884
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ee:81:01:9e:5e:0c:48:7a:52:22:b6:02:eb:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:05:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=988464412897acb2abe6941783692761ff616fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:0f:f8:e9:bb:7c:40:69:2f:dd:17:75:5a:
                    ab:67:64:09:7d:ca:28:a0:ec:78:d6:9e:b7:12:f5:
                    01:87:30:d6:e9:87:1c:a2:ec:16:c1:16:32:90:9a:
                    f1:2b:4b:d1:0c:bd:ef:58:4c:6c:ef:db:8e:65:e0:
                    5c:c5:b1:f0:5c:93:3c:f5:1a:fa:1e:37:2b:80:d7:
                    47:da:32:8f:09:28:8d:23:e4:2a:8e:3e:97:29:05:
                    77:94:a5:51:92:58:c7:78:72:49:96:44:89:ca:9a:
                    33:3f:ee:af:ad:48:65:42:69:63:2a:6b:1a:62:58:
                    a5:00:d6:08:fe:0e:33:c9:d2:68:69:9c:22:09:2e:
                    62:aa:8e:c1:45:ec:b8:4f:a6:a6:cc:7f:c1:69:19:
                    21:6b:b4:49:1d:24:40:5c:e4:b2:b7:78:e9:b1:d0:
                    4c:d4:5e:b9:54:7d:a5:eb:fc:14:e6:8e:d3:dd:bc:
                    b2:04:07:52:ff:f6:e1:ab:87:b4:bb:60:8d:00:24:
                    0d:ac:88:b0:7a:81:0b:91:e8:1f:12:0b:38:87:88:
                    53:05:bb:e5:26:fe:ec:85:49:68:2b:90:25:39:a8:
                    31:75:39:1b:a5:6d:38:01:00:96:eb:04:49:05:e0:
                    e0:58:3c:e2:f9:71:d7:4f:56:5d:4b:bd:a0:6b:a8:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:64:41:28:97:AC:B2:AB:E6:94:17:83:69:27:61:FF:61:6F:B8
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mIRkQSiXrLKr5pQXg2knYf9hb7g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205884

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:e7:5e:0f:09:35:d2:7e:26:55:5a:ff:37:b8:59:8a:26:
         f3:c4:83:7d:2f:9f:c0:01:19:58:f1:59:66:ef:8b:b3:06:3f:
         6c:6e:02:ed:02:37:d9:ab:49:48:f2:20:ff:09:25:5b:74:66:
         57:8b:57:54:17:d6:60:ce:79:ea:dd:68:ca:f5:57:d5:95:ff:
         71:99:a3:f0:39:1f:af:9b:41:0f:f5:6f:85:0a:32:63:40:bb:
         66:22:81:c8:3e:14:01:8f:3e:39:b0:04:d1:06:28:58:9d:49:
         b1:68:2c:70:dd:6e:20:50:c9:ec:da:77:a9:70:32:22:05:0f:
         26:a9:ee:88:83:18:a2:12:7f:e9:00:a5:c9:3e:cc:73:32:72:
         df:43:55:4e:ad:83:57:40:b7:34:ea:0a:94:75:4e:85:0c:b9:
         7a:3b:f0:cb:b5:24:9a:22:be:fc:41:b4:fc:5d:ae:08:38:55:
         9b:6e:40:6b:16:b9:21:ad:e6:11:88:d9:91:3f:79:97:f8:a2:
         ed:5e:0b:de:a7:90:a2:d8:40:b2:d4:73:ac:ca:24:8b:e5:af:
         9a:a2:92:96:fb:7a:f6:99:13:92:d4:37:37:65:11:0a:25:d4:
         55:04:e4:19:0e:74:2b:20:14:82:be:2a:cd:15:b5:fe:90:54:
         0a:e1:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:48 2026 by rpki-client