Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/4VOCUsw7Y40UgbzApQcOiQghh0c.asa
File:                     4VOCUsw7Y40UgbzApQcOiQghh0c.asa (raw, json)
Hash identifier:          wgcHLIZ/e9HZMfsKgU29etydv3IUR1af9ZeHfuj+i64=
Subject key identifier:   E1:53:82:52:CC:3B:63:8D:14:81:BC:C0:A5:07:0E:89:08:21:87:47
Certificate issuer:       /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial:       019EA67D4D6E3FFBAA44B36D7972E585EC33
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/4VOCUsw7Y40UgbzApQcOiQghh0c.asa
Signing time:             Mon 08 Jun 2026 09:08:09 +0000
ASPA not before:          Mon 08 Jun 2026 09:08:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206075
Providers:                AS: 3257
                          AS: 3399
                          AS: 6939
                          AS: 212477
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a6:7d:4d:6e:3f:fb:aa:44:b3:6d:79:72:e5:85:ec:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
        Validity
            Not Before: Jun  8 09:08:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e1538252cc3b638d1481bcc0a5070e8908218747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:5b:e7:10:34:7b:79:7b:bb:ca:f7:98:a6:
                    87:a4:be:95:67:5e:fa:88:5e:8d:75:61:e6:a1:72:
                    f1:ca:7e:83:d9:57:7a:b1:7a:8d:7d:cc:bd:34:d9:
                    c4:fa:32:99:ea:f3:97:34:d3:3d:81:bf:7f:6f:b6:
                    79:2c:3d:01:92:f5:8c:c6:e6:cf:14:1b:e7:0b:a8:
                    c2:83:a4:50:df:b1:96:6a:5d:c7:ee:bf:cb:63:ac:
                    3e:97:d1:60:ad:f3:84:2a:69:37:c0:a0:34:bf:dd:
                    85:88:b7:b5:21:e4:0f:68:18:13:03:9c:3a:a7:9d:
                    1b:b7:9b:6f:9e:9f:6c:c0:e6:b3:5e:7e:79:1a:84:
                    b7:3e:d8:70:43:2d:c0:ac:4f:8f:f4:21:70:63:19:
                    aa:ee:32:6d:75:ec:89:3c:71:62:70:d7:5d:c4:6b:
                    22:fc:12:5f:01:30:9e:9f:f0:f8:5b:7b:c8:f8:e7:
                    ff:05:55:bd:8d:5b:67:de:2d:2a:c3:3f:5c:a3:a2:
                    76:7e:01:e0:ae:9e:29:6a:f5:d0:18:17:70:58:60:
                    9a:27:f6:43:8c:79:31:d4:bf:b6:74:e0:83:5d:15:
                    b3:45:6e:b0:95:c4:78:00:82:e9:fd:fe:13:5d:53:
                    cf:1f:87:81:37:8b:3f:52:e7:84:5c:36:8e:a3:eb:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:53:82:52:CC:3B:63:8D:14:81:BC:C0:A5:07:0E:89:08:21:87:47
            X509v3 Authority Key Identifier:
                keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/4VOCUsw7Y40UgbzApQcOiQghh0c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206075

    Signature Algorithm: sha256WithRSAEncryption
         96:97:32:c7:a9:51:9d:34:88:b4:50:d8:bb:69:4f:aa:76:57:
         48:fd:08:df:02:b8:a4:3d:43:44:99:15:5f:d1:6e:c4:6b:cb:
         c1:e4:1b:f5:66:b3:84:14:67:07:c8:07:19:25:71:c3:0a:25:
         59:53:32:7a:76:b0:c4:4f:ee:3c:37:69:50:b2:02:6b:07:e0:
         f6:d9:62:cf:93:54:af:22:69:37:35:a5:53:7d:8e:73:2f:64:
         3c:69:b0:52:76:f3:97:8d:e1:b0:8b:19:bc:71:b6:dc:36:cb:
         9b:61:5f:57:52:0f:d4:a0:a5:02:70:cd:40:03:f0:4c:68:a7:
         72:18:51:a9:84:65:9f:cb:de:bf:45:33:ec:ec:fb:1a:fc:b1:
         27:5c:4f:4c:a3:fb:c4:e5:91:b9:92:80:97:d8:53:1b:f9:bb:
         b7:3a:56:a3:e8:3a:0e:77:dc:bf:22:f8:87:38:67:d4:60:c4:
         88:67:7a:e5:ab:32:0f:b8:0f:85:89:4f:31:fe:fb:85:30:ea:
         5b:2d:78:52:23:10:09:9a:8c:22:89:9f:ef:b4:f0:c8:4f:bb:
         3f:f1:d6:51:0b:61:1d:a8:79:98:46:7a:71:b8:bd:2a:65:f7:
         99:a6:f8:35:2d:a2:bb:f3:b7:b2:0e:e4:4d:4f:f3:60:a5:0b:
         3d:4b:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:01 2026 by rpki-client