Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/1CzgwJKpK4Y-ytE3Jk75BVJFCaw.asa
File:                     1CzgwJKpK4Y-ytE3Jk75BVJFCaw.asa (raw, json)
Hash identifier:          kqjlBAFenkfED4XnrpwrUl0VNz5Mjci/dgiqz07rJas=
Subject key identifier:   D4:2C:E0:C0:92:A9:2B:86:3E:CA:D1:37:26:4E:F9:05:52:45:09:AC
Certificate issuer:       /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial:       019D975F551F07E9A40D30466066E434741E
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/1CzgwJKpK4Y-ytE3Jk75BVJFCaw.asa
Signing time:             Thu 16 Apr 2026 17:38:20 +0000
ASPA not before:          Thu 16 Apr 2026 17:38:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206058
Providers:                AS: 34927
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:5f:55:1f:07:e9:a4:0d:30:46:60:66:e4:34:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
        Validity
            Not Before: Apr 16 17:38:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d42ce0c092a92b863ecad137264ef905524509ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:1d:e7:5f:52:38:65:0d:9d:77:a0:a0:9b:
                    84:4f:c9:b6:d5:6a:d4:25:5a:c2:08:a4:d3:7b:ad:
                    e2:a4:b4:61:af:38:70:fe:89:a6:51:a6:bb:bd:96:
                    32:37:a8:46:84:2a:bd:41:ae:7f:27:67:ba:94:41:
                    a6:cc:ef:2f:ef:d9:39:12:e8:d1:91:4a:3b:49:9b:
                    48:f2:39:a9:3f:02:0e:56:ec:77:3c:25:51:ff:0c:
                    2a:6e:97:ba:1f:0d:f9:92:da:cc:a7:48:77:8e:7b:
                    d8:11:ad:19:29:e1:49:b9:25:46:8e:a8:c7:ee:4e:
                    c8:da:95:08:63:85:97:81:5f:8f:4d:57:27:b8:ac:
                    da:4c:79:63:26:37:ca:df:27:42:bb:46:40:67:49:
                    84:7a:18:33:df:fc:17:66:8a:24:63:fc:e0:02:df:
                    0f:2f:31:ec:bf:db:b4:02:d8:39:a0:9a:b0:d6:d3:
                    2e:a2:35:a6:0d:67:82:9f:75:55:31:34:c3:92:a3:
                    17:88:76:c1:1d:51:3c:03:9d:99:ae:87:6f:38:98:
                    92:aa:26:d4:d8:bc:72:ef:2b:99:de:9d:2a:46:72:
                    8f:c9:b2:ba:c0:b0:cb:00:e6:15:a5:64:63:a2:87:
                    f7:fc:e4:28:db:39:f3:2b:99:2a:ae:f8:d3:5a:e7:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:E0:C0:92:A9:2B:86:3E:CA:D1:37:26:4E:F9:05:52:45:09:AC
            X509v3 Authority Key Identifier:
                keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/1CzgwJKpK4Y-ytE3Jk75BVJFCaw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206058

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:8d:1d:bc:0b:e2:8c:dc:21:80:87:7c:4c:0f:8c:13:93:
         13:93:34:ae:f3:eb:f8:78:e3:7a:cd:c7:77:2d:c2:b1:bc:a4:
         b9:4f:18:b6:34:5f:a8:90:aa:44:e9:80:82:91:53:e1:48:67:
         d9:ad:da:84:5c:96:6b:b3:8d:f7:99:fd:cb:87:a2:a8:f8:37:
         35:31:a7:c7:fb:20:ac:40:a0:5e:cb:5d:0f:24:0c:e9:33:e4:
         0e:dd:5d:87:16:75:77:69:86:b1:3e:15:f4:91:93:37:4a:d5:
         cc:83:17:e2:93:24:c4:cf:c1:15:67:60:b4:89:94:34:cd:82:
         90:ef:e6:7f:88:a3:d9:d6:ad:fc:d3:ba:0d:d5:1e:1e:3c:9d:
         f6:9e:02:8e:45:f0:c3:50:01:67:eb:c8:62:34:6c:7d:a6:e5:
         b2:4e:8e:d0:0e:35:81:eb:60:f5:20:1e:aa:77:76:3b:9f:c3:
         ed:e6:2e:17:f3:29:19:2e:24:b2:7a:58:79:4f:3b:66:a2:9f:
         aa:b8:87:c5:17:ed:b3:25:bc:ec:6e:af:27:81:f4:e3:53:58:
         ff:07:65:9b:ba:ea:43:4a:af:aa:8e:2a:42:41:e5:84:e8:e2:
         7b:79:db:64:24:3a:cd:8e:cf:56:1e:6b:80:69:14:ea:15:22:
         ef:3f:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:01 2026 by rpki-client