Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/N6tUblFN-1HV7lsRU2EFtCwaeNE.asa
File:                     N6tUblFN-1HV7lsRU2EFtCwaeNE.asa (raw, json)
Hash identifier:          9ZVkDuY/90ktsWjqUXyZRzAt4pwzST1/JpHAMlgGX0c=
Subject key identifier:   37:AB:54:6E:51:4D:FB:51:D5:EE:5B:11:53:61:05:B4:2C:1A:78:D1
Certificate issuer:       /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial:       019EB888C01DF20A27DC2783C4D475F42913
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/N6tUblFN-1HV7lsRU2EFtCwaeNE.asa
Signing time:             Thu 11 Jun 2026 21:13:50 +0000
ASPA not before:          Thu 11 Jun 2026 21:13:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206246
Providers:                AS: 1299
                          AS: 9002
                          AS: 13030
                          AS: 46427
                          AS: 64289
                          AS: 214565
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:88:c0:1d:f2:0a:27:dc:27:83:c4:d4:75:f4:29:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
        Validity
            Not Before: Jun 11 21:13:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37ab546e514dfb51d5ee5b11536105b42c1a78d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:70:27:c5:21:28:0a:75:15:4d:ce:45:b0:
                    59:d9:54:d0:09:c5:50:77:66:7a:86:05:81:0d:ff:
                    42:94:6b:57:eb:ee:82:8f:7a:9e:e1:88:a8:46:a2:
                    5c:be:7c:10:a9:e8:a6:6f:7a:7e:8c:62:c4:d5:8c:
                    a5:a7:ee:99:0e:fe:01:2d:c2:fe:66:ff:bc:d7:f6:
                    8b:40:e7:49:f3:fb:24:59:dc:15:f5:43:5c:81:df:
                    19:19:59:22:0e:da:e1:dc:64:da:27:16:cd:96:04:
                    91:9f:44:4b:a6:c6:fa:30:e2:6a:da:41:51:8f:9b:
                    0b:98:8b:57:fc:50:41:f3:89:33:6e:27:db:f7:46:
                    ca:61:0c:88:fc:c4:6f:53:94:d6:d5:a2:72:d4:ef:
                    25:73:2e:41:96:e7:a1:d7:55:2a:b5:46:6a:89:8c:
                    41:3a:15:36:e6:48:83:b6:ee:de:b2:27:36:d2:ca:
                    73:57:02:65:ff:85:55:d5:77:7b:78:f5:2a:5a:de:
                    35:0d:7b:42:57:7d:bb:20:2c:55:5a:e2:c8:91:37:
                    33:9b:91:a3:55:35:1c:6a:a4:c9:37:19:ec:cb:7c:
                    d1:f7:57:6a:7e:f0:65:00:11:bc:26:72:23:3c:80:
                    db:9a:a8:ac:33:7e:68:0e:30:4d:81:22:97:07:cb:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:54:6E:51:4D:FB:51:D5:EE:5B:11:53:61:05:B4:2C:1A:78:D1
            X509v3 Authority Key Identifier:
                keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/N6tUblFN-1HV7lsRU2EFtCwaeNE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206246

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:b2:52:3c:7c:6a:a2:81:31:3b:26:e1:19:e7:8c:1a:2a:
         6a:f2:f4:c9:54:a8:f5:25:e7:e6:84:87:01:e2:45:21:49:0f:
         48:4a:50:73:e2:f1:af:bf:86:55:26:7f:74:1f:7c:08:91:4a:
         65:9c:91:cc:7e:2e:ae:ae:ff:16:19:1a:9f:d8:fe:d3:ce:9d:
         0a:33:58:9b:4a:09:1d:e0:99:c7:68:36:8d:ab:bc:57:ed:9b:
         1e:ff:59:15:5e:99:a4:33:29:9a:10:b1:82:d1:15:67:48:01:
         5d:c3:c9:9e:f7:8e:3b:9b:2d:7f:bc:cc:1f:24:26:31:d5:f9:
         7a:ca:c9:0b:ad:78:09:7a:16:e8:88:43:47:22:ab:a6:92:03:
         cb:07:fc:98:20:7b:1b:2a:9f:1d:e4:01:c7:ff:40:0a:80:67:
         c2:fe:00:78:87:b8:e8:8b:9d:36:f4:c2:63:c7:3b:d7:b2:4e:
         8d:58:52:e7:93:a8:f9:5e:f7:a6:f7:9b:64:ff:47:3f:53:c8:
         75:60:7f:0f:ec:39:f9:3a:da:21:19:3f:b0:4f:69:e9:0c:53:
         a8:2e:71:7a:4c:2a:60:30:80:ce:41:d8:ab:6b:0e:43:3a:06:
         aa:80:ce:ee:6d:45:e2:c0:ec:31:c1:c7:41:d7:63:8a:8d:fc:
         fc:94:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:29 2026 by rpki-client