Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bmpb5Epfjp7qlk8lJihVunQXpxA.asa
File:                     bmpb5Epfjp7qlk8lJihVunQXpxA.asa (raw, json)
Hash identifier:          SYuXCEC4O4cAKrgeRKkjlk46E70Wupd65GUzvKa4IzE=
Subject key identifier:   6E:6A:5B:E4:4A:5F:8E:9E:EA:96:4F:25:26:28:55:BA:74:17:A7:10
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019D92590282DB6EE389B9C12AA3F716B9C8
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bmpb5Epfjp7qlk8lJihVunQXpxA.asa
Signing time:             Wed 15 Apr 2026 18:13:19 +0000
ASPA not before:          Wed 15 Apr 2026 18:13:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216096
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 5494
                          AS: 6939
                          AS: 7720
                          AS: 8330
                          AS: 8550
                          AS: 8714
                          AS: 21700
                          AS: 21738
                          AS: 31561
                          AS: 34307
                          AS: 34872
                          AS: 34927
                          AS: 40542
                          AS: 44382
                          AS: 44901
                          AS: 47498
                          AS: 50952
                          AS: 51722
                          AS: 52025
                          AS: 57369
                          AS: 58057
                          AS: 59678
                          AS: 61138
                          AS: 62768
                          AS: 150784
                          AS: 202409
                          AS: 206221
                          AS: 207176
                          AS: 209643
                          AS: 212895
                          AS: 214354
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:92:59:02:82:db:6e:e3:89:b9:c1:2a:a3:f7:16:b9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Apr 15 18:13:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e6a5be44a5f8e9eea964f25262855ba7417a710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:5a:11:db:68:34:e9:cf:47:bf:cf:b6:f5:
                    e2:9f:af:ca:32:36:12:b6:b0:17:18:41:59:23:fa:
                    14:a4:7d:3f:63:44:ba:5a:60:2c:ab:23:ae:41:76:
                    20:49:a9:8b:00:7b:34:8e:85:d7:1c:74:ec:be:53:
                    36:94:bb:79:ca:6c:46:de:b0:4a:5d:07:35:16:65:
                    4f:de:66:04:8d:ba:cc:0d:1a:52:e3:ec:1c:3d:74:
                    9e:d0:51:f9:53:dc:0c:8e:c0:15:5b:d1:f2:89:00:
                    37:79:f0:5f:69:05:b2:62:5b:34:82:73:53:e7:1a:
                    74:a0:52:3f:7e:f0:07:fd:a0:7e:55:ad:aa:f5:db:
                    c0:e7:d9:04:31:5b:da:95:0a:4c:d0:4e:bb:2b:52:
                    1f:c3:3a:92:ae:c5:b1:f3:0e:ac:60:eb:bd:85:42:
                    b8:9a:db:04:ab:d6:10:47:48:e5:06:be:dd:c6:f7:
                    e1:c6:7d:24:82:42:d4:7a:49:a2:ff:7a:c4:a5:9b:
                    2e:e8:fb:5c:19:ca:51:51:12:3b:57:79:ee:69:e5:
                    5c:55:f0:e2:e2:3c:86:6b:5b:2d:5d:7c:85:27:19:
                    f8:42:11:1f:31:59:d7:32:71:54:85:26:cb:34:79:
                    98:75:2f:86:48:87:ea:0f:b1:2a:76:ef:47:99:77:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:5B:E4:4A:5F:8E:9E:EA:96:4F:25:26:28:55:BA:74:17:A7:10
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/bmpb5Epfjp7qlk8lJihVunQXpxA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216096

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:3d:4d:86:ec:96:d6:c9:66:3c:bf:5b:6d:bc:2e:07:4b:
         a2:b3:a3:69:2d:b6:13:84:30:92:09:e1:61:79:60:23:c5:75:
         e6:dc:96:bb:c5:67:6f:8c:68:07:4e:f0:05:f5:94:bf:8d:81:
         f3:76:7b:73:3d:c3:20:65:da:0c:40:c3:52:1d:97:8b:9c:b7:
         f0:ec:a7:c8:dc:ab:78:a1:55:da:cb:fd:d9:c9:a8:cf:11:18:
         e0:10:83:2d:dd:8d:09:11:85:f3:05:17:e1:3a:b1:b5:83:36:
         8b:99:34:9d:9d:09:0c:33:30:2f:cb:9b:78:60:b2:45:a5:e9:
         76:7b:b9:43:e8:ba:92:29:e3:06:26:08:5b:02:9e:0a:a3:47:
         6a:c6:0c:21:74:f7:3a:4e:c5:3a:e1:82:34:70:2a:8e:48:5f:
         e8:e1:94:b8:d7:e3:61:51:7d:f3:c8:56:36:e2:24:ad:42:42:
         ba:b5:ab:13:09:ef:34:e0:9d:fc:b6:40:cd:97:56:b8:25:1a:
         c3:c2:53:05:8e:e7:01:7c:2c:c8:30:cf:96:7c:3b:1f:b6:d8:
         81:33:19:59:bf:76:71:7f:75:19:84:89:1d:5f:64:43:e6:4b:
         51:45:7d:ea:15:b4:85:78:b6:f9:bf:f7:8c:2c:ad:9e:e2:f4:
         05:af:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:58 2026 by rpki-client