Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kp0drfMkPNFmGK5Vqa4oZHKZIB4.asa
File:                     kp0drfMkPNFmGK5Vqa4oZHKZIB4.asa (raw, json)
Hash identifier:          Up2nHdI5MhTXxUO/PDxPZYz9gJLsqmymHHYAXE1fbFU=
Subject key identifier:   92:9D:1D:AD:F3:24:3C:D1:66:18:AE:55:A9:AE:28:64:72:99:20:1E
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019EBA74B66AF8C00DB1F4E724756A72B594
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kp0drfMkPNFmGK5Vqa4oZHKZIB4.asa
Signing time:             Fri 12 Jun 2026 06:11:11 +0000
ASPA not before:          Fri 12 Jun 2026 06:11:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62246
Providers:                AS: 174
                          AS: 3204
                          AS: 6204
                          AS: 6939
                          AS: 16276
                          AS: 17433
                          AS: 27523
                          AS: 44324
                          AS: 49304
                          AS: 51087
                          AS: 53808
                          AS: 58807
                          AS: 211392
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:74:b6:6a:f8:c0:0d:b1:f4:e7:24:75:6a:72:b5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Jun 12 06:11:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=929d1dadf3243cd16618ae55a9ae28647299201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:da:59:f0:29:04:78:27:bc:fc:60:d8:11:
                    56:6e:e7:9c:db:cd:b6:1c:4b:59:13:18:85:81:ff:
                    6b:ba:0c:e5:fd:4c:e7:82:c4:d0:1a:c9:a7:44:a3:
                    73:8c:9c:75:42:e9:9a:09:8a:0b:95:78:95:7c:65:
                    5c:ae:16:d0:f6:ef:eb:58:65:69:86:7d:80:a7:fa:
                    c8:91:b5:6a:c1:a5:80:59:22:a7:98:29:57:34:47:
                    fc:47:c0:7c:b9:40:51:55:51:d5:a3:e3:68:b2:57:
                    af:02:db:e2:47:5e:05:1f:74:f3:9a:55:97:66:88:
                    87:e2:46:91:08:49:e6:9f:93:46:d6:75:cc:5d:8c:
                    d2:22:10:18:42:dc:5d:a0:74:9e:8f:10:3f:73:33:
                    e1:b1:8d:d8:d0:6c:3b:52:4f:30:dd:50:e1:27:ad:
                    ab:ec:5e:62:99:2c:e8:5b:37:68:13:13:8a:74:e7:
                    ac:85:c3:c6:3a:af:97:d4:d0:06:b8:ff:30:09:3a:
                    d2:b3:d5:88:14:b4:d6:f0:43:3a:9d:6a:06:bc:4b:
                    9d:fa:b3:f4:b9:f2:7a:44:01:a6:1a:2f:3b:1f:07:
                    56:0c:d6:1f:dd:82:71:4e:7f:9c:64:15:67:a6:a2:
                    f9:19:9c:e1:f7:97:f5:73:87:d7:99:c6:26:f6:c0:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:1D:AD:F3:24:3C:D1:66:18:AE:55:A9:AE:28:64:72:99:20:1E
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kp0drfMkPNFmGK5Vqa4oZHKZIB4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62246

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:85:cd:9a:63:0a:97:f2:7b:33:b8:46:91:48:6d:20:62:
         2e:ba:9d:b3:23:ec:7d:d5:44:24:ae:f1:e6:11:4d:0f:7f:12:
         46:ee:18:79:93:93:4e:d4:78:6b:59:a2:e4:c9:4d:1f:c9:35:
         fe:c5:1e:5a:c7:6f:80:c1:49:01:66:84:51:ef:fa:4b:be:a5:
         3f:8e:af:7f:41:26:41:ea:a0:65:39:94:07:0f:a5:72:e9:8b:
         b9:44:d7:03:fd:f4:30:0f:9b:52:07:00:9b:ea:38:8a:2f:46:
         7a:c4:0f:45:90:ef:81:6a:c8:fb:4d:0c:72:96:f2:7a:4e:39:
         28:0b:63:00:09:8c:66:be:ed:b5:70:90:93:e5:38:ac:2f:68:
         e7:5f:cb:95:14:b3:3e:92:4a:cc:e2:70:6e:f3:03:b6:3c:e5:
         0e:38:fe:6b:5a:0e:3e:3f:bc:03:42:ea:f6:5d:41:9b:af:f2:
         62:83:c3:f6:1c:14:55:00:be:85:41:ce:1a:58:32:42:73:07:
         5f:06:7d:e6:d2:5d:a0:ac:4f:c4:2a:01:c6:5d:94:88:9d:d4:
         e3:f4:ce:51:24:f5:73:4d:77:99:52:7d:ea:cb:ae:b6:86:78:
         f4:29:04:1b:e3:75:ac:a7:c8:ef:7a:b8:9f:df:66:94:84:e0:
         d3:ed:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:52 2026 by rpki-client