Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/v6LodvYpOGGUhWjXnG4-LMGPe68.asa
File:                     v6LodvYpOGGUhWjXnG4-LMGPe68.asa (raw, json)
Hash identifier:          Hf1wgRy5JTLjGpN4VTbA8OHkeD4wSqOV5xdGmFiUEDE=
Subject key identifier:   BF:A2:E8:76:F6:29:38:61:94:85:68:D7:9C:6E:3E:2C:C1:8F:7B:AF
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       019C8A1B8B96690A2253A836589A95FE6EC8
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/v6LodvYpOGGUhWjXnG4-LMGPe68.asa
Signing time:             Mon 23 Feb 2026 10:46:26 +0000
ASPA not before:          Mon 23 Feb 2026 10:46:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6881
Providers:                AS: 6939
                          AS: 15685
                          AS: 25512
                          AS: 29208
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8a:1b:8b:96:69:0a:22:53:a8:36:58:9a:95:fe:6e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Feb 23 10:46:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfa2e876f6293861948568d79c6e3e2cc18f7baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:07:4c:c0:65:04:cb:40:f5:20:94:32:5d:
                    75:a0:1d:66:dd:f4:7e:09:91:ff:33:28:8a:a5:81:
                    31:83:5a:53:3d:fb:25:86:7d:cf:cd:b2:11:8c:b9:
                    e4:08:c1:24:17:77:32:97:a1:d6:49:78:39:24:63:
                    c7:4e:14:6f:bf:56:98:d3:12:d6:99:22:ae:e5:4a:
                    3b:9b:ab:98:3f:71:84:62:d9:c4:41:d3:61:b2:49:
                    e5:0f:da:cb:b1:0a:e7:93:49:64:f3:b8:c8:0d:c5:
                    7c:8b:b3:3e:98:ac:9d:28:8e:57:a6:43:69:00:52:
                    de:a1:bd:ca:a6:85:ec:a0:59:80:59:70:da:9c:8a:
                    c9:d9:73:62:e4:20:9f:7d:5b:e0:ac:f9:f7:f3:1f:
                    52:7d:00:c0:55:ed:1d:26:2c:45:1d:a4:eb:36:d3:
                    1a:29:73:1c:3b:37:a0:47:67:32:da:ea:0b:de:af:
                    8e:bc:26:5f:9b:db:b2:ac:24:57:17:d6:5d:2a:73:
                    c0:be:e5:a9:00:f0:c6:52:8a:71:85:4e:de:f9:d9:
                    f6:d9:26:2b:55:ff:a1:2c:60:9b:d0:ab:21:dd:1a:
                    df:c4:88:4c:ee:8c:20:e2:db:3a:e6:58:3d:0e:e4:
                    3e:2c:7e:3b:4d:b5:03:04:10:2c:db:4c:eb:cb:da:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A2:E8:76:F6:29:38:61:94:85:68:D7:9C:6E:3E:2C:C1:8F:7B:AF
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/v6LodvYpOGGUhWjXnG4-LMGPe68.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6881

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:d5:25:81:98:24:7b:7a:47:c4:04:2d:a8:69:de:a3:6d:
         5f:04:96:9c:1d:06:dd:47:3d:29:64:f1:9d:fa:63:a9:7f:89:
         87:d3:53:e2:78:89:be:3b:10:0a:51:ce:26:1d:cc:f2:d7:ec:
         ac:11:09:db:9b:d1:e2:41:2e:64:56:dd:29:97:41:8f:3e:c1:
         3b:93:4f:6a:e0:c9:6e:18:94:ef:64:f7:20:25:28:25:4d:5d:
         61:4e:68:32:ab:3b:d6:9a:ee:fa:6a:1e:24:02:b2:10:3f:54:
         ec:59:b2:14:b7:cc:d4:22:15:bb:9c:c1:f1:9b:ec:ce:68:96:
         fa:a4:06:ac:76:1f:06:14:e3:54:27:a4:12:0d:71:0e:c5:57:
         39:c4:69:98:1c:d7:af:dc:b5:6a:a6:dc:b4:17:8d:73:fc:c6:
         ec:07:ab:13:e0:a3:f6:a2:91:fd:64:c9:94:c9:bd:92:c5:43:
         f9:8e:03:d2:a1:92:1d:83:ee:8f:0a:72:40:0b:f8:0e:c0:55:
         97:4d:a3:1a:38:40:db:11:aa:5b:e5:48:96:06:64:ea:27:6a:
         0f:2b:c8:e8:55:d2:0d:39:21:15:43:22:18:62:b4:35:68:d5:
         72:c2:05:63:13:21:52:cf:2d:0c:72:6f:02:d1:ea:9d:75:a2:
         f4:85:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:25 2026 by rpki-client