Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/G6JiPbE3nBUJ-N33dcdxsZPvW8k.asa
File:                     G6JiPbE3nBUJ-N33dcdxsZPvW8k.asa (raw, json)
Hash identifier:          o69/deUsCiKQfW+g/VUCRajyYStgs58JVZMRBNHEFBU=
Subject key identifier:   1B:A2:62:3D:B1:37:9C:15:09:F8:DD:F7:75:C7:71:B1:93:EF:5B:C9
Certificate issuer:       /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial:       01A084BF09F2F693FB70682912021F08F932
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/G6JiPbE3nBUJ-N33dcdxsZPvW8k.asa
Signing time:             Wed 09 Sep 2026 05:58:27 +0000
ASPA not before:          Wed 09 Sep 2026 05:58:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47292
Providers:                AS: 1299
                          AS: 6797
                          AS: 31027
                          AS: 205491
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:84:bf:09:f2:f6:93:fb:70:68:29:12:02:1f:08:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
        Validity
            Not Before: Sep  9 05:58:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ba2623db1379c1509f8ddf775c771b193ef5bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:b8:93:ae:bc:ae:f6:b5:fd:98:31:aa:b2:
                    18:90:5d:26:a9:84:6f:81:bb:bc:40:54:d9:e8:2d:
                    55:7f:42:04:b9:69:bc:b7:51:4b:22:65:da:f1:40:
                    b4:d8:67:30:20:6b:cc:ea:05:83:43:5c:a5:50:26:
                    f8:de:5d:e2:f8:44:af:4a:a7:1a:9e:50:01:e0:cf:
                    3c:50:68:5b:ce:f3:03:2f:55:94:62:7f:88:50:54:
                    c8:52:13:bc:39:ab:f0:6f:00:85:db:43:e6:26:07:
                    16:71:6a:0a:c1:d2:26:07:95:af:c2:e5:71:cb:ac:
                    be:74:b0:32:fb:1d:3d:ed:b7:57:27:a6:21:ae:b8:
                    02:10:3f:bc:26:ce:64:67:a1:b5:69:a7:51:dd:83:
                    e7:d7:21:a2:85:45:47:d1:56:23:7d:fe:03:b9:6c:
                    96:d0:7c:f8:25:d8:d5:5e:88:45:e8:2e:d0:04:97:
                    df:de:2c:09:46:fb:32:cb:fd:9a:18:91:0b:81:de:
                    d4:83:9f:b2:28:8f:a1:ce:70:0b:8e:94:ea:a1:ae:
                    8f:0c:05:b7:2f:8d:b1:c6:63:41:52:cd:65:3e:df:
                    62:e9:c1:58:ec:cd:9d:cf:62:c9:15:25:d5:f7:48:
                    34:53:87:1d:bf:64:18:a4:3c:ca:82:2d:5e:51:80:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:62:3D:B1:37:9C:15:09:F8:DD:F7:75:C7:71:B1:93:EF:5B:C9
            X509v3 Authority Key Identifier:
                keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/G6JiPbE3nBUJ-N33dcdxsZPvW8k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47292

    Signature Algorithm: sha256WithRSAEncryption
         62:70:9f:52:a4:15:b4:06:fc:07:75:26:fa:5d:ec:a4:01:2e:
         d7:da:63:33:b9:bd:47:03:e5:d7:3d:28:80:95:a1:84:a8:1c:
         db:da:51:45:90:7f:15:ec:0a:18:d4:e3:f3:75:8c:67:86:96:
         e4:fb:b0:f4:97:4d:a1:46:b0:8e:39:60:8a:f9:1c:9c:6c:92:
         ce:ea:07:70:e5:08:63:a3:6b:e1:dd:fd:4e:b7:ae:f5:91:fc:
         0d:13:95:2b:a2:1f:03:c3:0a:7b:f1:a2:74:3c:cb:3b:90:80:
         1b:2b:f9:f7:c7:8a:bb:57:3a:e3:7f:52:de:1c:d1:70:26:4b:
         02:cc:78:95:c7:1d:7b:9a:e7:1b:97:16:af:a4:9b:8b:75:39:
         38:89:f5:bc:c7:a1:53:d7:e7:97:ef:9c:d2:48:6c:e0:2b:df:
         0a:5e:1b:15:ae:cf:08:10:3d:5f:f1:2e:27:47:2d:7d:23:6a:
         c1:27:40:b0:37:bd:a2:7b:c7:53:33:97:3d:69:e3:28:9b:fb:
         f2:88:a1:6f:1e:59:c4:2c:45:d4:a8:14:f6:3b:9d:2d:3c:6b:
         7c:72:55:90:02:11:5b:5e:6c:06:e7:e6:c4:90:6a:9a:31:95:
         d7:9d:70:16:cc:c9:0e:2f:b7:b4:fc:af:46:fe:b4:5e:92:d0:
         ab:c1:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:12 2026 by rpki-client