Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/zrKXyDB5KIGu9jSU2Ln5_ZOjrDA.asa
File:                     zrKXyDB5KIGu9jSU2Ln5_ZOjrDA.asa (raw, json)
Hash identifier:          b1Gxe7i+E+LsBFBBErsacO58baGZs9KPGIPt1suvc04=
Subject key identifier:   CE:B2:97:C8:30:79:28:81:AE:F6:34:94:D8:B9:F9:FD:93:A3:AC:30
Certificate issuer:       /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial:       019C389ED11A75957464677DC47311F68FD7
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/zrKXyDB5KIGu9jSU2Ln5_ZOjrDA.asa
Signing time:             Sat 07 Feb 2026 15:00:58 +0000
ASPA not before:          Sat 07 Feb 2026 15:00:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207303
Providers:                AS: 34927
                          AS: 44324
                          AS: 151194
                          AS: 153376
                          AS: 154185
                          AS: 198025
                          AS: 203031
                          AS: 203168
                          AS: 204539
                          AS: 210352
                          AS: 210440
                          AS: 213605
                          AS: 214439
                          AS: 214933
                          AS: 214955
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:9e:d1:1a:75:95:74:64:67:7d:c4:73:11:f6:8f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Validity
            Not Before: Feb  7 15:00:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ceb297c830792881aef63494d8b9f9fd93a3ac30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:62:c9:52:a2:e0:96:fa:17:fb:14:67:1a:
                    0b:9e:25:a7:ca:a8:61:73:57:de:c5:28:27:bc:c5:
                    bb:c4:14:ad:f6:44:eb:44:38:6e:8a:2a:ee:fd:77:
                    21:c4:bf:f0:46:12:b0:19:0f:2c:ba:fd:63:16:e0:
                    fd:25:e9:10:ef:45:3f:ec:f6:bb:07:d2:97:f0:db:
                    b4:a5:6a:86:29:d3:76:7d:5c:e6:1b:5e:20:db:f1:
                    8a:6b:bb:46:b8:b1:1b:c3:05:75:6b:fb:90:d2:19:
                    b9:dc:a0:2a:8b:83:81:8c:a8:39:d9:6e:52:80:59:
                    3e:9b:fe:86:b7:15:9e:a4:af:d3:bf:73:f2:a4:8a:
                    51:38:da:2a:31:36:95:20:f0:b7:1a:cc:fe:a9:61:
                    be:9f:eb:a7:64:dd:b0:fe:5c:64:90:00:b6:46:13:
                    13:91:74:3c:e4:ae:56:bf:43:f5:74:5e:7c:aa:7f:
                    d9:29:19:1e:ba:c7:53:5c:00:b5:5f:44:b9:e3:fa:
                    9d:2a:56:08:49:b9:e0:42:f1:aa:f3:18:d5:c2:94:
                    40:80:12:19:c8:6c:7f:fa:af:c5:c0:63:28:db:61:
                    c3:20:3d:9d:68:16:75:37:49:77:84:85:6f:b9:98:
                    39:87:e5:0f:c9:7a:d0:a2:cc:c2:89:e5:d9:98:ea:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:97:C8:30:79:28:81:AE:F6:34:94:D8:B9:F9:FD:93:A3:AC:30
            X509v3 Authority Key Identifier:
                keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/zrKXyDB5KIGu9jSU2Ln5_ZOjrDA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207303

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:2e:22:08:7e:a8:ff:09:ff:c2:11:8d:1d:fb:29:b2:57:
         90:07:29:70:af:2b:cc:57:8e:5e:2c:e2:f5:ea:d1:3c:a9:6b:
         25:78:fa:0b:43:17:7a:d3:f7:1f:fc:db:83:84:77:73:7a:16:
         13:16:18:60:b8:91:e4:1b:70:13:5a:a0:c0:71:c7:1e:a7:8c:
         44:5e:32:9a:20:fa:2b:08:92:f7:ab:3d:f4:90:ea:16:d2:de:
         d4:0d:7d:1d:e8:fc:2f:82:2d:a5:89:71:2e:9d:34:1e:1e:b1:
         c7:fe:3d:63:68:63:bc:9a:0a:fa:17:63:0e:c1:fa:2f:aa:11:
         85:0f:b2:54:d3:99:12:d6:8f:12:5c:6d:d7:78:72:40:f1:11:
         14:fd:6e:35:ef:71:d2:5d:75:72:89:3d:34:eb:a5:22:11:dc:
         c4:54:93:ef:d5:46:b4:e9:62:91:59:33:01:12:df:46:ed:e8:
         16:44:75:83:e5:a8:3f:88:c1:99:54:5a:21:32:cd:7d:58:25:
         2e:2f:21:3e:a1:21:72:5f:c2:ce:ed:a0:3d:cb:1c:d6:26:68:
         5d:07:3e:d8:dc:97:3f:07:0d:81:32:65:cb:90:1b:45:87:f6:
         26:19:21:53:40:d3:55:e7:1d:17:f9:9a:ed:28:9b:20:69:71:
         3b:4d:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:10 2026 by rpki-client