Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/zmn-b5i2YY5IXJkTgysbYWRBlJs.asa
File:                     zmn-b5i2YY5IXJkTgysbYWRBlJs.asa (raw, json)
Hash identifier:          4I0lmXhzYeGZHzRYm4422sP+Zq6BEtZ1H86Kcra76c8=
Subject key identifier:   CE:69:FE:6F:98:B6:61:8E:48:5C:99:13:83:2B:1B:61:64:41:94:9B
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C74EE81F0E68BEEE7C84EE2CAE4115A1A
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/zmn-b5i2YY5IXJkTgysbYWRBlJs.asa
Signing time:             Thu 19 Feb 2026 08:05:13 +0000
ASPA not before:          Thu 19 Feb 2026 08:05:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206127
Providers:                AS: 43289
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:74:ee:81:f0:e6:8b:ee:e7:c8:4e:e2:ca:e4:11:5a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb 19 08:05:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce69fe6f98b6618e485c9913832b1b616441949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:f3:85:80:73:1b:dd:9f:41:07:50:39:0b:
                    03:cf:3e:8b:38:28:5a:18:ca:1d:aa:9f:e5:34:7a:
                    1b:bd:4a:b9:22:31:f6:4a:c0:c9:aa:4f:33:03:b9:
                    a5:fd:67:47:e8:2b:25:25:64:b5:05:72:5c:21:3c:
                    4c:70:ee:ea:8d:36:d2:c5:f5:b0:c8:00:90:b1:df:
                    aa:f8:d4:ea:ab:83:cf:63:c0:2a:26:80:ed:3b:30:
                    ea:23:ee:54:87:a0:27:0a:e2:cc:b0:d5:7e:ab:f3:
                    39:97:42:58:8a:c2:55:7e:c8:73:f9:96:8a:bd:09:
                    9a:8f:05:c6:87:d3:59:45:55:38:25:70:05:b1:0e:
                    95:1b:1a:b6:96:40:a2:46:38:3a:99:09:9f:57:90:
                    5f:ce:e5:75:f8:25:92:db:20:18:88:34:32:32:08:
                    f9:6f:e3:22:af:e0:c2:98:c1:77:4c:ea:8b:c9:4d:
                    26:7c:7b:09:6a:6f:e9:a9:32:e9:c5:e4:92:b3:88:
                    23:8b:01:30:fc:cb:21:f4:d0:f7:d7:f0:08:c3:3a:
                    0b:7e:aa:c4:71:f0:b1:6d:9f:c7:fd:04:61:6b:6b:
                    b3:cd:01:ec:4b:c9:0d:80:6e:99:ce:fc:ba:d6:24:
                    38:02:41:94:05:20:af:68:a4:c9:dc:19:bb:6f:1d:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:69:FE:6F:98:B6:61:8E:48:5C:99:13:83:2B:1B:61:64:41:94:9B
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/zmn-b5i2YY5IXJkTgysbYWRBlJs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206127

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:bd:39:bb:1f:76:26:80:75:7a:9a:dd:ec:a0:99:2d:bb:
         df:2a:cb:20:87:fb:4b:f7:87:09:83:ea:e8:f5:d1:eb:88:97:
         5b:6f:c7:07:f3:40:ab:fe:31:5e:99:b4:70:02:e4:e9:99:82:
         e1:ca:37:8b:e2:ad:00:1d:a7:1c:d8:b7:cd:0b:7c:70:8d:88:
         05:bf:d0:1a:f3:5c:5b:f6:45:b8:4e:1d:55:54:b7:8c:43:8f:
         92:cd:27:bb:be:6d:65:cc:ac:f2:f3:df:26:70:85:3e:56:0b:
         1a:6d:89:21:7a:f7:b2:23:0b:62:d6:fb:d6:df:4f:84:8f:43:
         76:de:f5:5b:a5:c2:de:bb:c6:ce:ec:56:9e:23:9d:19:5d:d5:
         56:b4:37:03:c6:cb:dc:b3:52:8c:b7:08:93:55:58:54:e4:aa:
         67:0a:3f:0a:01:4e:f1:44:59:cf:3f:2e:00:a7:7f:81:8c:a1:
         f2:12:5d:52:f7:3f:d7:a2:8b:f2:d4:27:6e:18:d3:a0:9f:38:
         26:27:db:bf:73:be:a6:eb:2d:f0:4c:0f:64:d4:ce:38:26:43:
         f4:10:0a:2f:3d:a6:7a:84:f6:1d:40:7c:ff:92:30:5b:0f:06:
         bc:15:38:e6:f7:e7:2f:4c:70:42:c5:d1:40:de:b9:77:9e:8d:
         6d:68:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:37 2026 by rpki-client