Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa
File:                     AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa (raw, json)
Hash identifier:          y1Ag5qpmzSxVFKEJWy+4MLdDTnH6Pp80lG+LaPL+S8M=
Subject key identifier:   01:6C:AA:42:E3:B8:F0:4E:C4:68:B4:FA:44:7D:96:F1:B0:20:43:7B
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01A0B02EB9E6F518F8BDD6533361EE61AB7A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa
Signing time:             Thu 17 Sep 2026 16:24:07 +0000
ASPA not before:          Thu 17 Sep 2026 16:24:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6696
Providers:                AS: 1299
                          AS: 2914
                          AS: 5511
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:2e:b9:e6:f5:18:f8:bd:d6:53:33:61:ee:61:ab:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Sep 17 16:24:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=016caa42e3b8f04ec468b4fa447d96f1b020437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:7d:98:95:ad:c5:7a:79:f8:f7:1c:04:29:
                    7e:7b:b0:96:72:c7:ee:c2:ca:6f:f1:25:3a:7a:e6:
                    53:4e:87:9a:d0:81:e1:4e:52:3f:c3:6a:eb:b7:45:
                    dc:b9:1b:d6:81:ce:93:fa:d4:5c:ac:ce:d6:58:7b:
                    9a:30:e3:8e:4f:97:95:56:f3:4e:a8:fc:32:d6:16:
                    d4:0a:b0:0c:98:1e:19:3a:64:eb:ca:1b:86:f7:dd:
                    25:b3:9b:a8:4d:5e:2d:45:71:99:82:8a:46:92:cf:
                    06:96:6d:9e:4e:d1:fd:67:c7:50:4d:ce:51:69:57:
                    1b:83:f7:4c:54:46:cf:14:e7:6c:2f:d9:08:72:86:
                    50:c1:a4:8e:98:81:9c:89:dc:9a:c9:0d:01:84:5b:
                    9b:a9:18:d1:29:72:e2:c5:bf:87:c8:33:51:e5:ff:
                    70:e7:06:8b:93:74:f9:22:4c:25:f9:f1:53:ac:ba:
                    40:42:7e:a5:5d:31:ef:2f:65:64:bb:84:35:10:72:
                    94:d9:31:c4:75:d8:dd:eb:61:4c:66:a3:cd:47:fe:
                    3e:e6:30:b3:96:d4:fb:83:b2:35:92:9c:6b:7d:c8:
                    f2:80:3b:89:c8:29:8d:ad:06:63:e7:ae:dc:66:5a:
                    36:ca:d8:6b:5f:37:2d:14:f5:e8:b5:8b:24:6b:64:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:AA:42:E3:B8:F0:4E:C4:68:B4:FA:44:7D:96:F1:B0:20:43:7B
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/AWyqQuO48E7EaLT6RH2W8bAgQ3s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6696

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:2b:8f:16:b5:5d:a9:0a:c4:bc:19:a5:e5:a1:e3:d6:fb:
         7f:66:82:bd:d8:98:98:7c:6e:20:20:08:f0:41:b4:66:29:96:
         f8:67:91:1b:09:f8:a6:53:53:64:b6:cd:e1:8a:07:ca:9b:e3:
         65:1c:a7:bf:d2:a2:e6:fd:bb:f5:eb:3f:4d:01:ed:a2:a4:55:
         25:e9:f6:de:03:2b:49:d1:e3:69:67:c2:a3:0c:df:4f:1c:7c:
         85:2c:4e:90:40:94:6b:c1:2b:16:49:30:4d:ea:2b:62:c4:fb:
         82:be:d4:0a:7a:2a:6e:7d:f1:e7:e6:0e:6d:fb:b2:34:86:59:
         64:27:ae:02:01:ac:63:b8:dd:0a:81:b5:5e:f4:9c:69:eb:6c:
         bd:16:ab:bd:c3:54:d5:8e:3a:80:66:10:fd:5b:b8:d3:87:52:
         08:63:85:02:69:5d:7d:2b:9c:1c:3a:62:8c:18:2c:d1:99:60:
         a1:5b:45:c7:81:c3:38:6b:67:55:79:22:73:5f:81:3c:3e:6c:
         c0:8b:13:4f:13:45:f4:df:3d:30:d2:b5:e7:17:95:df:8f:3d:
         f4:a9:a5:2b:e4:71:c1:61:43:33:4a:7a:95:a6:a8:07:fd:e3:
         53:27:d4:07:71:eb:a7:ba:e3:65:98:fb:25:46:34:4c:c5:f7:
         99:d5:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:17 2026 by rpki-client