Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/Fqi5GgJzBuBU-O3Svwls2oA58e0.asa
File:                     Fqi5GgJzBuBU-O3Svwls2oA58e0.asa (raw, json)
Hash identifier:          aVFzS1UCWhMVB1SwHJ+JRLsU/2I8DVI5pdRtjMd5wcs=
Subject key identifier:   16:A8:B9:1A:02:73:06:E0:54:F8:ED:D2:BF:09:6C:DA:80:39:F1:ED
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       01A080792EDF9A6DEA1C0A57A245A35F5547
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/Fqi5GgJzBuBU-O3Svwls2oA58e0.asa
Signing time:             Tue 08 Sep 2026 10:03:40 +0000
ASPA not before:          Tue 08 Sep 2026 10:03:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206271
Providers:                AS: 44620
                          AS: 60707
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:80:79:2e:df:9a:6d:ea:1c:0a:57:a2:45:a3:5f:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Sep  8 10:03:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16a8b91a027306e054f8edd2bf096cda8039f1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:10:24:d6:27:f5:aa:71:3d:8e:0a:26:59:
                    90:b7:a8:d4:e8:53:5f:d7:74:6e:da:0e:d8:47:a3:
                    7c:6a:5c:15:c8:6c:86:66:69:e5:41:75:b1:02:9a:
                    c1:cd:cc:00:9f:8d:24:bf:fe:c0:a3:1b:f9:17:d0:
                    cf:cd:74:77:40:e3:a3:c3:08:ef:10:37:6c:ea:fe:
                    d3:a1:b9:6f:89:24:63:9f:e0:b7:0b:76:b0:8b:60:
                    97:5b:8c:7f:53:68:e9:61:85:21:e3:b7:f9:4a:17:
                    f9:dc:16:58:1c:27:ce:2c:f0:e3:d8:62:34:c9:c9:
                    4b:4e:35:dc:34:9b:de:c7:2a:21:ec:2a:e5:c7:9b:
                    be:fd:f3:16:44:bc:37:bb:9b:7f:b7:fd:c1:cf:45:
                    fb:90:21:79:fb:cb:15:0e:1f:c2:52:a8:03:6f:0b:
                    82:12:a0:1c:ae:8e:61:0c:35:19:28:73:67:00:50:
                    1e:3a:19:d2:f8:28:1c:ce:e2:bd:c3:85:c8:4b:db:
                    eb:e2:d2:95:5b:1c:4f:a7:cd:1f:52:28:b6:e9:e0:
                    b9:e3:99:46:1e:10:c1:eb:cd:08:29:04:f2:db:5e:
                    7b:71:f1:c8:83:59:46:03:0c:c3:a4:75:63:ab:b7:
                    dc:94:9e:c8:39:67:ae:ad:24:49:d2:97:dc:1e:b9:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:B9:1A:02:73:06:E0:54:F8:ED:D2:BF:09:6C:DA:80:39:F1:ED
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/Fqi5GgJzBuBU-O3Svwls2oA58e0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206271

    Signature Algorithm: sha256WithRSAEncryption
         35:1b:48:29:0a:56:36:50:15:be:37:ad:95:99:76:6b:5f:80:
         a1:f6:25:93:26:0d:dc:a9:22:33:92:33:9b:51:61:2c:62:85:
         04:64:b8:94:aa:16:6a:89:0f:02:b2:9d:0b:70:ce:4f:3c:23:
         eb:14:c2:50:fb:a9:dd:f0:3b:4f:c2:9d:4a:db:8b:56:28:a0:
         4c:3a:5d:7c:a5:69:18:79:31:84:4f:16:75:a1:06:2a:e1:b8:
         ce:4f:90:5c:c7:17:41:5c:d8:2b:e7:05:0a:74:9e:7e:5d:08:
         9e:17:78:31:d3:d8:55:3b:9c:49:e2:7b:cd:94:dd:4a:42:6e:
         1e:5a:dc:81:19:b8:74:c3:50:67:9b:f7:bb:fd:78:da:b9:9b:
         db:ee:cf:0d:1b:18:f1:7d:71:3a:70:e6:dc:44:11:3d:05:89:
         5a:bb:10:02:f7:56:fa:64:ce:df:6b:90:81:c5:2f:65:72:d3:
         22:98:5e:7e:83:85:3a:05:36:3e:b7:ad:47:30:20:d5:28:b0:
         bc:75:01:a8:d4:2f:b2:52:0e:3e:ca:11:fb:d6:fa:0a:a8:b7:
         b7:b5:aa:b6:ab:fd:f8:b3:fe:83:15:98:bb:62:49:4c:2e:ce:
         07:c7:49:0b:ab:01:f9:33:bf:0f:bf:a2:6e:50:c7:60:32:a6:
         aa:f5:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:33 2026 by rpki-client