Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa
File:                     Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (raw, json)
Hash identifier:          1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=
Subject key identifier:   62:76:FA:FC:63:89:AF:90:56:B2:6B:2C:9E:60:A2:59:3D:5F:9F:BC
Certificate issuer:       /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial:       019C56B733F2424A74FBD79A73D0073148A6
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa
Signing time:             Fri 13 Feb 2026 11:16:12 +0000
ASPA not before:          Fri 13 Feb 2026 11:16:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196621
Providers:                AS: 8758
                          AS: 15576
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:b7:33:f2:42:4a:74:fb:d7:9a:73:d0:07:31:48:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
        Validity
            Not Before: Feb 13 11:16:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6276fafc6389af9056b26b2c9e60a2593d5f9fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:ff:23:8d:ea:0b:fe:13:32:22:b2:2e:6c:
                    d1:35:a3:ac:3b:5d:80:e6:c1:00:1f:4e:24:3c:97:
                    f0:4f:15:42:d0:37:08:da:64:88:30:2b:3f:c7:4f:
                    f6:73:c9:a3:f0:a4:8a:4b:4f:34:cb:ce:01:33:40:
                    63:d8:f2:ff:d5:59:28:d1:ee:cb:6f:30:e6:73:98:
                    34:2b:a1:b0:79:e5:5b:c2:f0:29:9c:8e:f9:73:e6:
                    82:9f:73:76:3c:77:78:80:5c:8c:a7:0b:08:5d:b7:
                    fe:73:3b:ae:9c:d0:04:05:2b:6d:6d:c4:cc:cc:16:
                    fb:8f:c1:bc:21:18:8f:d2:cb:6b:d0:e4:47:89:7f:
                    ef:3d:c8:5f:71:92:5e:9e:ff:28:b4:60:a3:06:39:
                    a5:ca:36:77:f1:16:a9:0e:6b:f2:43:fb:da:21:7d:
                    c7:30:3a:3e:15:ae:ba:14:60:be:fa:c7:9f:93:ce:
                    94:ae:2a:fc:36:b4:76:2b:2e:67:33:cd:4d:b6:84:
                    1c:15:dc:fd:0b:fd:27:95:b7:35:70:3b:9b:af:27:
                    01:ce:00:d6:c7:0b:72:32:91:4b:53:45:1f:f7:2d:
                    c3:08:fb:df:21:a6:06:77:7c:1e:c6:b6:b0:4a:56:
                    eb:c0:49:9f:62:fb:b3:2f:67:d0:3f:5e:29:29:d5:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:FA:FC:63:89:AF:90:56:B2:6B:2C:9E:60:A2:59:3D:5F:9F:BC
            X509v3 Authority Key Identifier:
                keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196621

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:a6:27:81:47:51:b9:31:b7:8c:46:85:ed:cc:9a:b6:92:
         a8:fd:72:8d:7d:e5:ae:f5:00:9a:59:11:4d:8d:9e:90:ed:1f:
         37:5f:0f:64:f0:13:ea:32:0f:03:5b:a0:a6:4d:b3:1f:d2:7a:
         2c:e0:ee:a1:37:2f:ca:d9:09:ac:ba:39:8a:09:97:dd:af:4c:
         97:8f:19:47:f1:39:5f:88:bd:cd:59:53:51:6f:a3:e8:4e:84:
         e9:f0:6e:2b:bc:7c:d5:19:87:15:d0:40:df:12:8c:25:69:99:
         96:8b:79:23:4b:0c:8b:99:97:ab:a7:13:af:a2:c0:f2:93:c6:
         13:4b:50:39:3b:bc:d6:b9:4d:5e:dc:29:18:28:50:71:63:a0:
         ef:51:06:39:bd:b3:5a:56:0d:12:80:fc:71:3d:32:3a:3a:c7:
         4b:8f:50:6f:64:27:c6:c0:72:89:5e:c4:41:e3:7c:b8:ad:45:
         17:f8:6a:1a:44:c1:71:6a:9b:3b:e7:37:60:e9:3a:93:94:a5:
         3a:e3:29:e4:28:4d:34:65:72:ac:47:ab:51:16:a5:2c:0c:cc:
         2f:7c:7e:03:e4:96:de:0f:c1:f1:34:e7:21:56:6f:43:d1:2c:
         f6:5a:8a:91:a2:ce:3a:a8:3a:ef:43:fc:ea:7d:b6:7b:ad:33:
         78:e1:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:36 2026 by rpki-client