Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa
File:                     Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa (raw, json)
Hash identifier:          vilGb0G2dWsSUB/y/NcWpZIkxcNLagnLK2paHPZtJZk=
Subject key identifier:   22:4D:8E:68:82:EA:84:27:5F:36:AF:B4:E8:8E:02:AB:46:36:D9:C4
Certificate issuer:       /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial:       01A06232532BC1E3DE0F937FFB43243D304A
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa
Signing time:             Wed 02 Sep 2026 12:57:40 +0000
ASPA not before:          Wed 02 Sep 2026 12:57:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206238
Providers:                AS: 5405
                          AS: 49127
                          AS: 200020
                          AS: 207375
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:62:32:53:2b:c1:e3:de:0f:93:7f:fb:43:24:3d:30:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
        Validity
            Not Before: Sep  2 12:57:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=224d8e6882ea84275f36afb4e88e02ab4636d9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:cb:e6:4d:0d:b4:e1:01:0f:89:fd:08:f7:
                    91:9f:81:0d:17:35:1f:81:a8:d9:f8:2c:bf:c9:96:
                    e3:7f:78:64:e7:4f:f0:fe:3a:ee:30:3c:cd:99:84:
                    7a:32:4f:ec:6d:4a:d7:c6:d8:56:6a:e3:73:69:f4:
                    4b:9d:c7:bc:f5:5d:c0:07:22:e3:24:ad:42:b6:e8:
                    97:b3:9f:e1:ae:cb:ad:31:2f:0c:8c:ca:74:44:1d:
                    0c:47:f1:56:ac:40:40:8c:b1:aa:11:f0:4c:50:09:
                    35:c8:89:db:b8:c1:58:01:e6:02:ee:7a:b1:0c:c5:
                    7a:c6:34:ff:f3:78:2d:b1:74:9b:7a:0f:6a:30:a1:
                    a8:e0:22:98:3f:05:a9:06:56:ab:4c:a0:2a:e4:5c:
                    08:5e:60:ff:9a:d7:46:48:95:a8:06:9c:b5:d4:d0:
                    c8:8e:07:9f:f7:51:9d:d7:89:76:6e:8b:6c:0c:fc:
                    88:f5:ec:b4:29:e3:86:f3:10:a4:d3:bc:d4:01:21:
                    58:0f:89:ad:ac:06:17:ad:85:8a:2d:b3:e3:d5:23:
                    18:82:9b:2c:66:77:04:ed:94:8a:67:83:5a:5d:bc:
                    e3:0c:b7:5f:27:2e:27:47:8e:50:1a:73:29:61:70:
                    91:e2:68:e2:ec:1e:7b:93:d1:00:bb:87:5f:b7:2a:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:8E:68:82:EA:84:27:5F:36:AF:B4:E8:8E:02:AB:46:36:D9:C4
            X509v3 Authority Key Identifier:
                keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206238

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:19:3b:dc:e0:09:4d:32:17:d3:42:c3:e2:d3:84:d9:b3:
         58:86:a3:77:2a:a3:09:2b:39:21:32:37:3b:35:44:c6:8b:66:
         73:6a:44:a0:db:ce:33:2c:0f:b3:da:20:14:70:19:f1:a6:87:
         0a:eb:3a:7a:53:a9:28:67:d9:86:c2:6b:71:de:bd:83:ed:0b:
         bf:b6:9d:98:ab:0d:b3:86:d3:6a:1d:34:7e:eb:58:79:cb:af:
         bd:96:1d:12:11:e3:ce:dd:bd:1d:f4:de:0e:de:b6:7d:47:c4:
         79:27:de:3f:a4:8a:89:06:4b:7a:09:e4:2d:e8:d4:ec:81:23:
         8f:3c:26:63:f1:de:2b:7d:04:3a:2f:bb:45:6c:5a:6c:40:84:
         ab:7d:86:97:79:d7:49:8d:1d:dc:60:6c:1f:1e:e8:b3:35:a0:
         94:ed:2c:05:60:4d:ce:f1:b0:ff:1b:8e:22:f7:f7:08:94:d0:
         9b:8b:8f:74:57:ad:0b:4f:7f:ef:74:57:83:c5:83:4a:6e:bf:
         81:b4:a5:d8:a3:86:f8:e3:da:d8:57:bb:36:6d:d1:fa:b7:99:
         34:b0:d1:ac:45:78:99:11:37:15:d4:f6:6d:8e:46:48:bd:81:
         3e:7a:1c:ee:a4:de:86:a6:0d:91:c9:99:06:38:be:c9:19:d9:
         50:02:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:38 2026 by rpki-client