Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/yGHgKnnRgZQfLZZryJTtkxnPBts.asa
File:                     yGHgKnnRgZQfLZZryJTtkxnPBts.asa (raw, json)
Hash identifier:          3uBuYI8nvjohNIXwybxUkQIqzN/3gMmXBNXd4LvFjsE=
Subject key identifier:   C8:61:E0:2A:79:D1:81:94:1F:2D:96:6B:C8:94:ED:93:19:CF:06:DB
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019EACA4F236418AE503224B7A1B716064E2
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/yGHgKnnRgZQfLZZryJTtkxnPBts.asa
Signing time:             Tue 09 Jun 2026 13:49:11 +0000
ASPA not before:          Tue 09 Jun 2026 13:49:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206604
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 34927
                          AS: 201279
                          AS: 201541
                          AS: 211509
                          AS: 212895
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:a4:f2:36:41:8a:e5:03:22:4b:7a:1b:71:60:64:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Jun  9 13:49:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c861e02a79d181941f2d966bc894ed9319cf06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:82:e4:7e:70:db:d7:0a:64:66:1a:3f:86:
                    59:13:86:bb:80:a7:74:a7:46:ec:01:f5:d2:3c:9c:
                    93:0b:21:ac:46:55:07:29:96:0a:30:e6:ad:04:92:
                    e4:85:18:8c:02:fe:f7:3f:f4:38:2e:60:ee:3c:c6:
                    7b:38:36:c4:6c:a0:6c:37:ef:d5:c1:01:54:35:ad:
                    e6:74:6d:24:93:b3:75:9b:aa:d6:72:9d:c7:a3:bd:
                    be:7f:a5:cf:0e:48:49:f9:22:35:35:46:79:2a:c0:
                    c9:76:a2:13:fb:e9:1c:a2:1d:68:b9:35:d4:ed:8b:
                    42:15:66:fe:73:c4:33:f4:d0:e2:7c:62:32:45:75:
                    e4:7d:05:b3:84:54:30:82:30:77:e6:4b:1b:87:7b:
                    07:97:66:85:1c:9b:39:3a:dc:bf:cc:9c:39:7a:7b:
                    5f:ef:ff:7a:8c:8f:34:2e:04:ba:b1:8f:4e:98:db:
                    bd:b0:be:92:2b:bd:9b:a9:76:cf:86:00:c2:68:69:
                    41:f9:8a:52:fa:29:3a:a5:29:b3:30:65:3b:c2:a9:
                    f0:33:4f:5b:77:7c:28:ff:c2:14:23:d8:9b:9d:a7:
                    ac:fd:65:a3:81:ba:26:81:c6:45:89:53:f2:a7:37:
                    3d:2a:29:b8:bc:0d:a4:d5:9d:23:63:68:b4:2e:10:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:E0:2A:79:D1:81:94:1F:2D:96:6B:C8:94:ED:93:19:CF:06:DB
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/yGHgKnnRgZQfLZZryJTtkxnPBts.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         b2:e5:bb:e4:cb:3e:dd:72:0f:8a:c9:23:55:75:fb:79:21:8e:
         49:8d:10:23:7e:17:ff:a0:71:e7:d5:a6:57:63:8d:2d:40:94:
         5b:52:e5:28:22:12:18:1c:49:86:02:7d:e8:90:e6:1a:1f:97:
         25:19:68:e7:fe:d1:67:1e:27:d7:ac:5d:28:53:a2:18:31:78:
         e7:61:b0:b1:8f:b0:ff:f9:fe:78:5f:3c:84:74:b3:1f:28:a1:
         5c:ef:43:98:88:0b:64:be:e0:f7:14:b8:f6:75:e2:d3:68:53:
         df:31:73:c8:fa:26:de:d0:fa:57:41:57:38:69:cf:7e:c1:4c:
         93:e7:1b:df:78:c9:9b:39:98:fb:29:44:3a:9f:94:41:31:24:
         ac:f5:ea:bf:a1:11:b5:3a:00:6c:87:82:58:ab:c6:3a:0f:63:
         d9:81:7d:c2:5d:d9:9e:9c:7f:a7:ec:b7:12:cd:6d:e8:61:8e:
         ba:a6:b8:d3:8b:6c:7b:0c:68:96:72:8b:cd:b2:4a:51:c1:9a:
         05:85:07:4d:ce:0c:20:2c:a6:c6:0c:a6:12:4e:3a:5e:93:e1:
         24:2b:01:d5:4b:95:20:9c:f9:9c:17:81:23:d0:90:87:09:1e:
         ac:53:a1:b9:e5:39:47:98:22:c3:85:ad:e2:95:86:91:c2:7c:
         87:bc:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:33 2026 by rpki-client