Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/6Ck2mqzrg7hAtqhKHPxxI4yqhOw.asa
File:                     6Ck2mqzrg7hAtqhKHPxxI4yqhOw.asa (raw, json)
Hash identifier:          ceWTZE+Ei7+++I1SoKaRXO2gKyR+uMgeSyMmFEHdhE4=
Subject key identifier:   E8:29:36:9A:AC:EB:83:B8:40:B6:A8:4A:1C:FC:71:23:8C:AA:84:EC
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       01A08673BDF887B6EE31C11864639488C4E3
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/6Ck2mqzrg7hAtqhKHPxxI4yqhOw.asa
Signing time:             Wed 09 Sep 2026 13:55:27 +0000
ASPA not before:          Wed 09 Sep 2026 13:55:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8265
Providers:                AS: 6453
                          AS: 6939
                          AS: 51569
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:73:bd:f8:87:b6:ee:31:c1:18:64:63:94:88:c4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Sep  9 13:55:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e829369aaceb83b840b6a84a1cfc71238caa84ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:4a:26:7a:4e:33:1f:9e:bb:06:c2:07:9a:
                    cb:5e:d0:a4:65:eb:0a:94:ef:70:8d:36:e6:c0:96:
                    88:96:fb:df:42:77:b9:a7:a6:3a:6e:7f:b2:61:8f:
                    5e:72:f2:e8:db:9a:30:c3:58:96:cb:2c:6a:84:11:
                    de:2e:5f:57:74:e9:5d:f2:5d:61:e9:96:02:6f:2e:
                    1f:10:4a:d5:88:4c:9f:d0:7e:b1:8f:c1:9b:97:5e:
                    26:02:f2:f1:8f:e0:8e:c2:f4:72:3e:58:2e:4e:09:
                    8a:6c:f6:f9:6f:34:bb:c4:8e:28:1d:f8:ad:10:1d:
                    dd:8b:f6:76:6d:92:9b:fc:bf:85:8f:c7:b6:33:55:
                    36:af:cf:9e:f2:3a:e8:14:7c:87:24:10:01:fe:6a:
                    1e:b9:51:d2:c8:1e:ce:0a:7c:b5:3e:1e:b1:a9:e8:
                    bc:78:7c:76:c7:12:1e:f5:6c:3b:e2:78:29:f1:67:
                    0d:78:01:15:5e:0e:29:70:d0:00:ab:99:e5:fb:60:
                    85:ba:d4:13:e6:fe:aa:9b:f9:af:2d:b7:31:ff:98:
                    ec:53:79:e2:72:f9:5e:f7:66:81:fe:ba:d6:84:a6:
                    a2:7f:ba:48:51:df:25:40:14:2d:02:60:9c:c4:82:
                    06:32:7a:f5:a7:84:13:1d:d9:94:61:1e:97:de:0a:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:36:9A:AC:EB:83:B8:40:B6:A8:4A:1C:FC:71:23:8C:AA:84:EC
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/6Ck2mqzrg7hAtqhKHPxxI4yqhOw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8265

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:7c:c7:81:20:34:c8:59:11:62:54:2c:41:05:3d:a3:29:
         8b:0e:97:89:66:e2:a6:0b:d1:c7:28:db:f7:18:9b:40:32:86:
         74:02:48:e1:ce:b4:f1:5f:f9:ed:10:10:a2:b1:0b:b5:f2:13:
         0b:cb:81:fa:b0:9b:cc:38:05:49:88:a7:1d:4d:a6:c9:09:32:
         ab:28:d8:ab:9d:17:e7:c6:cd:fc:7b:bd:26:b5:fd:49:22:81:
         9a:0a:bc:64:66:db:dc:ab:64:21:cd:18:42:53:9b:b2:b7:33:
         e7:81:c6:74:64:e2:bc:68:78:b8:0e:e6:e3:90:b7:bd:a1:40:
         ad:83:12:9f:55:3e:04:d8:3d:76:71:ad:96:15:1f:b1:e6:3c:
         75:9e:35:93:b3:f8:55:05:60:f3:a2:31:6c:7e:45:b7:57:cd:
         fe:29:d1:4b:f0:6c:b4:31:b5:b6:8f:3d:4e:b9:e7:50:7c:50:
         af:e3:55:e5:a0:74:01:ad:ed:8c:e1:05:e5:e7:89:f4:66:5e:
         14:5a:81:59:af:a6:d4:49:e7:2c:26:e0:c5:6a:94:d9:36:5b:
         bf:22:92:30:7e:f7:91:95:39:6f:91:b0:b0:64:92:40:e7:ff:
         07:03:65:58:ff:de:83:68:e7:7d:71:b7:b7:0f:e8:9f:0f:64:
         3c:76:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:38:16 2026 by rpki-client