Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa
File:                     6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (raw, json)
Hash identifier:          IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=
Subject key identifier:   E8:66:F1:0D:3E:9A:E9:65:7A:B0:C5:38:4C:BC:C6:0D:D9:70:60:68
Certificate issuer:       /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial:       019C46E400A9FB9DC630CE25E64AF2982C78
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa
Signing time:             Tue 10 Feb 2026 09:31:13 +0000
ASPA not before:          Tue 10 Feb 2026 09:31:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197883
Providers:                AS: 174
                          AS: 3257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:e4:00:a9:fb:9d:c6:30:ce:25:e6:4a:f2:98:2c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
        Validity
            Not Before: Feb 10 09:31:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e866f10d3e9ae9657ab0c5384cbcc60dd9706068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:b9:73:24:f1:25:fe:67:ff:0d:fb:0d:08:
                    01:13:d0:39:11:bd:5d:4a:0a:1b:c1:0d:06:64:27:
                    a6:61:47:91:b2:a2:2c:4e:c5:c9:61:19:0c:72:d2:
                    b6:72:f7:af:e5:fc:8a:76:ad:85:3b:50:ef:19:da:
                    45:33:d0:5a:e4:93:2d:5a:1a:0b:53:b5:c5:c1:0f:
                    51:6a:c7:84:cd:4c:e7:6b:5d:42:a3:da:23:6d:ee:
                    7c:bf:23:f0:19:40:c5:bc:cb:12:d0:a9:13:c1:73:
                    ca:7f:a8:9b:71:b0:f0:3a:23:1c:91:8b:70:b8:f4:
                    29:94:83:ff:20:f9:2f:f5:3d:dd:e9:f0:72:f0:91:
                    45:a0:ca:c3:a7:cd:2b:4b:03:28:c0:39:e0:72:3d:
                    63:d9:b3:59:82:84:5f:00:a1:64:1e:47:de:f3:ad:
                    ad:21:a6:79:e8:7d:00:77:fc:d9:a2:73:c1:a0:7a:
                    5f:50:ce:c5:05:39:65:2b:18:0f:0d:c2:5a:65:71:
                    a5:67:a5:31:29:56:fe:2e:69:10:c9:dd:70:6d:3b:
                    fe:9e:34:7f:46:bd:3c:92:b8:0c:64:82:30:80:f0:
                    85:c4:b3:ac:f8:d0:80:bd:93:33:7c:1f:10:b3:58:
                    34:61:26:e7:e9:fa:11:1c:ff:f3:cd:69:1c:0b:ba:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:F1:0D:3E:9A:E9:65:7A:B0:C5:38:4C:BC:C6:0D:D9:70:60:68
            X509v3 Authority Key Identifier:
                keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197883

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:a3:41:89:84:c9:64:2f:fe:c2:0c:cb:6d:b9:27:05:86:
         db:08:24:db:2f:a8:71:6c:95:a1:0b:6a:25:07:3f:5f:a6:31:
         81:86:80:cd:2d:3f:8a:25:b4:ce:90:75:de:42:a7:10:c4:21:
         af:a2:9f:8f:71:19:ba:85:6b:71:95:7a:20:a0:ea:bd:c6:f2:
         72:ff:61:03:70:e0:e6:77:ce:9f:f3:a0:5c:62:33:86:1f:aa:
         93:a3:b8:0c:b2:e4:0f:f0:b8:a8:78:51:d7:77:3d:dd:75:52:
         a8:4b:89:85:77:06:37:a9:07:f6:46:68:bc:71:20:63:82:63:
         5e:31:ca:02:27:85:67:83:02:a3:f1:18:78:3b:22:b6:ff:97:
         60:52:20:a9:e8:79:5b:b5:06:e1:57:83:82:c7:f1:13:08:e1:
         dc:e7:71:3e:68:53:d3:19:cd:81:1c:59:93:7e:57:8c:4a:3b:
         c4:3c:02:7c:0b:f6:25:fc:76:52:b6:1e:8c:fb:e7:13:c6:9b:
         14:58:17:f8:77:05:f2:59:0e:d5:7a:f7:aa:08:28:81:44:c2:
         c0:87:60:bd:02:23:e6:bb:28:49:d9:4e:b0:5f:ba:8a:d1:94:
         4a:5f:26:c8:5f:2a:82:32:14:ae:32:34:57:fa:3f:c8:60:1e:
         59:bd:9c:11
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxG5ACp+53GMM4l5krymCx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi
YzJkOTUwHhcNMjYwMjEwMDkzMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODY2ZjEwZDNlOWFlOTY1N2FiMGM1Mzg0Y2JjYzYwZGQ5NzA2MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRu5cyTxJf5n/w37DQgBE9A5Eb1d
SgobwQ0GZCemYUeRsqIsTsXJYRkMctK2cvev5fyKdq2FO1DvGdpFM9Ba5JMtWhoL
U7XFwQ9RaseEzUzna11Co9ojbe58vyPwGUDFvMsS0KkTwXPKf6ibcbDwOiMckYtw
uPQplIP/IPkv9T3d6fBy8JFFoMrDp80rSwMowDngcj1j2bNZgoRfAKFkHkfe862t
IaZ56H0Ad/zZonPBoHpfUM7FBTllKxgPDcJaZXGlZ6UxKVb+LmkQyd1wbTv+njR/
Rr08krgMZIIwgPCFxLOs+NCAvZMzfB8Qs1g0YSbn6foRHP/zzWkcC7pIaQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOhm8Q0+mullerDFOEy8xg3ZcGBoMB8GA1UdIwQY
MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt
MThjNzBlYmY2ODFhLzEvNkdieERUNmE2V1Y2c01VNFRMekdEZGx3WUdnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh
LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwME+zANBgkqhkiG
9w0BAQsFAAOCAQEALsqjQYmEyWQv/sIMy225JwWG2wgk2y+ocWyVoQtqJQc/X6Yx
gYaAzS0/iiW0zpB13kKnEMQhr6Kfj3EZuoVrcZV6IKDqvcbycv9hA3Dg5nfOn/Og
XGIzhh+qk6O4DLLkD/C4qHhR13c93XVSqEuJhXcGN6kH9kZovHEgY4JjXjHKAieF
Z4MCo/EYeDsitv+XYFIgqeh5W7UG4VeDgsfxEwjh3OdxPmhT0xnNgRxZk35XjEo7
xDwCfAv2Jfx2UrYejPvnE8abFFgX+HcF8lkO1Xr3qggogUTCwIdgvQIj5rsoSdlO
sF+6itGUSl8myF8qgjIUrjI0V/o/yGAeWb2cEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:48 2026 by rpki-client