Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/bCZQoK2YLtwUJGjxy3j11PobeZw.asa
File:                     bCZQoK2YLtwUJGjxy3j11PobeZw.asa (raw, json)
Hash identifier:          F9DWsBUaERTE9gYe3FuAb57vA/WNhRTktWa/IJeua1k=
Subject key identifier:   6C:26:50:A0:AD:98:2E:DC:14:24:68:F1:CB:78:F5:D4:FA:1B:79:9C
Certificate issuer:       /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial:       019FA80BD1469AAF1A8B659499ED4094969D
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/bCZQoK2YLtwUJGjxy3j11PobeZw.asa
Signing time:             Tue 28 Jul 2026 09:26:14 +0000
ASPA not before:          Tue 28 Jul 2026 09:26:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219529
Providers:                AS: 33755
                          AS: 199829
                          AS: 201279
                          AS: 201541
                          AS: 214205
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:0b:d1:46:9a:af:1a:8b:65:94:99:ed:40:94:96:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
        Validity
            Not Before: Jul 28 09:26:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c2650a0ad982edc142468f1cb78f5d4fa1b799c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:b9:cb:06:b8:33:00:53:5f:87:c7:e8:9e:
                    44:dc:77:5a:b5:a9:f6:f1:50:42:30:f4:ca:68:18:
                    b0:fc:9b:0e:44:8e:ec:d0:e5:88:56:90:9e:00:bf:
                    2d:a6:b5:48:2a:df:cf:b8:3f:c5:ed:27:7b:c4:a1:
                    3c:43:a8:5f:ec:f6:bb:a9:8f:da:0f:4d:ae:7b:06:
                    09:83:3f:ee:f3:6d:b8:c6:c2:14:95:c2:92:2e:d7:
                    87:d6:d7:76:a5:5c:ac:a8:92:f6:69:f1:cd:08:6f:
                    07:6b:39:44:f1:9e:f3:59:02:4e:22:37:a3:70:b1:
                    96:fc:dd:17:13:2d:36:49:46:26:24:cd:c5:fd:44:
                    8a:97:3d:5e:ea:2c:18:31:00:7e:e9:6b:5b:5a:d1:
                    46:e5:fe:ac:65:30:6d:78:eb:76:9c:b9:8b:af:f0:
                    7b:96:08:73:19:71:89:e1:dd:d4:81:f0:62:c1:96:
                    4e:aa:db:d9:9a:9b:f6:76:6e:54:a0:8f:6c:cc:70:
                    9c:40:0c:eb:03:a9:50:8e:d8:ba:eb:8e:20:45:40:
                    64:95:5f:8b:17:dd:9e:90:76:a5:13:f1:22:f6:d1:
                    28:fc:3d:b5:1d:a5:98:75:7d:f9:2a:ee:0b:db:e2:
                    c4:c8:30:ef:9a:10:a5:b8:91:c7:a1:fb:17:4a:d8:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:50:A0:AD:98:2E:DC:14:24:68:F1:CB:78:F5:D4:FA:1B:79:9C
            X509v3 Authority Key Identifier:
                keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/bCZQoK2YLtwUJGjxy3j11PobeZw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219529

    Signature Algorithm: sha256WithRSAEncryption
         68:05:fa:94:8f:6d:dd:69:7e:5b:bd:bb:59:72:37:c8:46:d1:
         20:9a:84:cd:a9:19:26:9b:62:7e:c7:4a:d5:65:f4:b8:6a:a1:
         27:df:85:06:e0:cf:ce:b7:0c:c6:fa:5c:b6:e0:3d:5d:63:6a:
         7c:78:e4:e9:55:0a:cc:31:51:11:4d:6d:6b:cc:9f:75:ea:61:
         6d:a0:e9:c2:d1:4c:15:83:2a:7c:25:b2:86:f1:20:dc:71:c3:
         f9:83:76:a0:01:d9:a0:9a:10:cb:02:b6:d3:84:d7:07:e6:f6:
         41:f2:53:a4:e2:2d:27:24:8d:3f:7e:e7:28:ff:81:0c:78:a8:
         52:d7:1d:b6:12:a3:dd:26:68:79:65:4b:58:44:42:18:af:fa:
         a4:6a:4e:18:df:50:d5:9e:26:15:3a:88:e0:84:0b:16:9f:ec:
         79:c1:c9:78:78:02:80:5a:aa:e3:ba:1e:4d:84:69:e6:60:d0:
         22:e1:a9:8d:c5:26:8e:2d:20:67:4d:24:00:1c:be:c1:57:7b:
         9f:33:4f:ed:91:d6:16:3e:77:40:44:22:ed:06:7a:4d:bf:4d:
         71:9e:7b:31:45:59:4c:1a:b2:31:21:33:33:01:13:5b:dd:13:
         5a:c1:cd:bf:30:6e:18:5c:5b:0b:5c:53:f0:c5:37:26:e8:0e:
         77:76:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:20 2026 by rpki-client