Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/fBgH-X9sjiK9Jb6mD4j1R6rtlVU.asa
File:                     fBgH-X9sjiK9Jb6mD4j1R6rtlVU.asa (raw, json)
Hash identifier:          +DpogEba03kzob9maFaF5Bs4g2eZjGkNt4XqRcDsOu8=
Subject key identifier:   7C:18:07:F9:7F:6C:8E:22:BD:25:BE:A6:0F:88:F5:47:AA:ED:95:55
Certificate issuer:       /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial:       01A0850673C77A08ED8C7FC6DAA060B8AE1A
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/fBgH-X9sjiK9Jb6mD4j1R6rtlVU.asa
Signing time:             Wed 09 Sep 2026 07:16:27 +0000
ASPA not before:          Wed 09 Sep 2026 07:16:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219529
Providers:                AS: 6939
                          AS: 33755
                          AS: 52025
                          AS: 199746
                          AS: 201398
                          AS: 205941
                          AS: 211358
                          AS: 214205
                          AS: 215296
                          AS: 215685
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:06:73:c7:7a:08:ed:8c:7f:c6:da:a0:60:b8:ae:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
        Validity
            Not Before: Sep  9 07:16:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c1807f97f6c8e22bd25bea60f88f547aaed9555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:57:18:e3:0e:ea:aa:10:35:83:86:53:31:
                    9a:ac:46:e1:31:a4:46:c4:82:73:bd:9f:b9:ff:ee:
                    02:a9:ef:9e:25:2d:58:64:1e:75:37:f1:1c:c6:6b:
                    74:fe:64:b5:d0:f4:90:99:2e:96:61:fe:9e:21:0f:
                    00:7f:a9:e7:44:da:82:5d:c1:94:4b:95:0f:a0:76:
                    eb:c9:c1:3b:86:fc:05:0a:7e:4d:cb:9e:16:e2:a4:
                    a3:ca:96:73:07:c1:cd:0d:49:0b:b2:5b:3e:3b:02:
                    05:84:fc:a1:0e:bd:d4:ab:f9:f9:48:8b:79:77:a7:
                    6c:e9:9f:99:54:74:43:82:01:7d:44:92:6f:5d:a0:
                    3d:6d:72:51:63:3d:4e:a6:42:87:ce:e6:9e:39:01:
                    4b:c7:6e:70:18:e1:2a:59:e1:67:b5:db:c9:f2:2c:
                    3b:55:97:18:39:e8:d0:fe:6a:5d:83:12:ff:1d:5d:
                    4c:7f:18:86:28:7c:3e:e9:19:98:20:10:df:a4:11:
                    17:56:17:f8:8a:3a:fd:3b:e8:6a:55:de:e0:68:e2:
                    9d:ed:b9:59:aa:a8:71:90:35:34:3e:cb:c9:0c:6c:
                    be:5c:3f:90:c0:fb:f8:70:02:41:f2:e5:0a:b7:d8:
                    96:b8:4f:1f:b3:41:f5:00:11:a4:28:ed:63:1e:d9:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:07:F9:7F:6C:8E:22:BD:25:BE:A6:0F:88:F5:47:AA:ED:95:55
            X509v3 Authority Key Identifier:
                keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/fBgH-X9sjiK9Jb6mD4j1R6rtlVU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219529

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:6b:bd:14:1a:65:62:68:4e:d9:05:fd:0d:6c:28:d1:bd:
         8b:20:be:b8:b1:75:08:5c:bf:7e:40:be:e3:41:0f:fb:74:c4:
         47:57:37:02:32:47:06:c1:44:cf:5a:b1:d2:98:26:32:93:20:
         f2:23:d5:d7:bb:d4:86:75:4a:d4:25:81:60:36:a9:1b:d5:85:
         0d:67:53:46:93:1f:f8:30:21:75:ed:76:a2:3e:b9:4c:ae:26:
         c3:eb:0b:40:3b:56:d7:ba:68:88:28:52:2a:c4:2f:8b:84:47:
         9f:e4:82:ec:fa:11:c0:b9:18:d3:02:28:5b:3b:c0:3a:b9:23:
         e6:2d:0f:bb:d7:fa:f6:af:f0:03:d6:87:5d:51:d3:6a:e8:c4:
         71:67:ea:14:30:13:e4:54:a6:fb:d7:2b:d5:6d:a9:63:36:cc:
         e5:30:c8:de:a6:0b:7c:e2:96:6e:fa:59:aa:72:e9:9d:28:28:
         6e:e6:2a:6d:eb:d2:f1:aa:16:6e:a7:a8:23:34:29:49:b2:cc:
         fa:57:68:95:77:52:75:09:8b:39:64:3d:56:c4:2f:1a:26:37:
         27:0c:8f:f8:02:5d:5c:1c:23:25:63:08:c7:5b:18:9e:d4:ef:
         93:5c:63:a8:ef:d4:ef:48:f7:28:dc:9e:24:04:53:0b:cf:15:
         f1:db:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:22:28 2026 by rpki-client