Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/fg2QbP6_NHroFLcB4VqlEsdsL78.asa
File:                     fg2QbP6_NHroFLcB4VqlEsdsL78.asa (raw, json)
Hash identifier:          c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=
Subject key identifier:   7E:0D:90:6C:FE:BF:34:7A:E8:14:B7:01:E1:5A:A5:12:C7:6C:2F:BF
Certificate issuer:       /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial:       019D631667FC8AB7D74ADFF0E394EC6E610B
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/fg2QbP6_NHroFLcB4VqlEsdsL78.asa
Signing time:             Mon 06 Apr 2026 13:58:25 +0000
ASPA not before:          Mon 06 Apr 2026 13:58:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6206
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 3549
                          AS: 6453
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:63:16:67:fc:8a:b7:d7:4a:df:f0:e3:94:ec:6e:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
        Validity
            Not Before: Apr  6 13:58:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e0d906cfebf347ae814b701e15aa512c76c2fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:4b:e9:75:aa:a5:74:46:ff:8f:a3:4c:85:
                    42:9c:29:38:1a:ae:05:a8:6c:d2:23:09:b8:cb:ce:
                    a0:f7:42:38:04:e3:69:88:7d:fc:0b:08:78:33:95:
                    f2:9f:43:5c:43:36:58:76:dc:09:65:53:ca:ac:56:
                    be:ea:58:5c:5f:76:ff:55:73:f5:77:9b:cb:56:50:
                    c5:49:9a:3d:35:2d:e9:d4:95:0e:21:83:20:29:b5:
                    c0:9c:7d:eb:7d:36:23:5e:c2:43:38:aa:96:f8:85:
                    33:c8:01:e9:01:1b:84:7a:84:3e:df:69:11:6b:a7:
                    09:90:b3:93:e0:d1:25:13:6d:03:27:49:00:76:b8:
                    fb:3f:65:a1:27:39:4b:9e:43:f3:ed:c1:32:5e:e3:
                    c3:55:45:5f:09:5d:f7:68:50:cb:f3:a5:9a:ba:c0:
                    8a:f5:72:88:38:f9:f2:e6:66:9b:a0:46:9e:4c:03:
                    7a:15:61:22:a6:70:13:2d:6a:72:63:2b:0a:a6:c7:
                    5c:bc:45:47:a4:80:f8:ca:56:b5:2d:10:e1:14:90:
                    42:bf:74:8a:a0:62:50:c2:9f:5c:0f:b2:07:18:02:
                    d6:27:0a:1d:63:15:ee:38:60:e0:8a:14:ec:fb:15:
                    a0:4c:c2:38:2b:af:a1:8c:6d:cc:56:51:92:88:4b:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:90:6C:FE:BF:34:7A:E8:14:B7:01:E1:5A:A5:12:C7:6C:2F:BF
            X509v3 Authority Key Identifier:
                keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/fg2QbP6_NHroFLcB4VqlEsdsL78.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6206

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:5e:ff:6b:9b:c0:68:f8:30:62:5a:d4:74:cb:22:fb:f5:
         ef:d1:c7:b8:c8:e8:a3:1e:91:f1:1f:f3:e7:1c:1a:dd:7b:99:
         3c:c0:ad:8f:dd:8c:82:d7:12:af:81:b0:84:ac:fe:dc:07:0d:
         9c:6b:d0:e6:aa:2c:24:56:02:27:c2:4e:31:be:98:eb:7c:63:
         b2:01:8b:9e:d7:87:de:5d:82:72:5e:8d:63:80:8c:dc:32:5d:
         e4:cb:a5:53:25:37:70:46:e4:a4:1d:26:59:8b:91:28:47:00:
         ea:5a:c2:0d:38:6c:3f:d9:ad:b0:e8:0e:e3:1a:f5:3e:33:8e:
         bb:95:1d:e7:f2:04:32:af:10:da:4a:06:40:30:5c:7f:b0:3f:
         41:22:43:47:de:30:74:50:d9:64:0d:cc:1d:b9:60:1c:80:f5:
         bf:41:d9:6e:f6:47:28:df:42:19:47:a8:9d:d0:63:d4:3f:dc:
         f0:91:b2:fb:4d:1f:16:17:39:c8:f8:0a:d1:d4:dd:3b:44:6b:
         fb:ca:14:9a:c4:62:3e:03:14:50:a1:c5:1e:94:64:14:4b:15:
         99:b1:53:36:5f:76:1d:39:c8:ef:57:3d:76:06:b2:ce:8a:d7:
         d3:4e:9c:35:28:f8:1e:7c:79:54:84:58:bc:4c:11:47:a4:24:
         b3:e1:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:37 2026 by rpki-client