Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/6ePeykhqaQhVL-QnCvoOTxD9Ros.asa
File:                     6ePeykhqaQhVL-QnCvoOTxD9Ros.asa (raw, json)
Hash identifier:          GVmazDbc6zY4gYDN2IdTWE16Nznjm0Wh9YlHlJskz1o=
Subject key identifier:   E9:E3:DE:CA:48:6A:69:08:55:2F:E4:27:0A:FA:0E:4F:10:FD:46:8B
Certificate issuer:       /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial:       019D1A2ADC083DA628C1D7F313DB81FE1F8C
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/6ePeykhqaQhVL-QnCvoOTxD9Ros.asa
Signing time:             Mon 23 Mar 2026 10:08:29 +0000
ASPA not before:          Mon 23 Mar 2026 10:08:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208226
Providers:                AS: 60068
                          AS: 62000
                          AS: 203446
                          AS: 212477
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:2a:dc:08:3d:a6:28:c1:d7:f3:13:db:81:fe:1f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
        Validity
            Not Before: Mar 23 10:08:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9e3deca486a6908552fe4270afa0e4f10fd468b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:1e:f0:6b:1b:ef:89:f9:2e:f4:3e:8f:00:
                    5b:8f:07:3d:1a:87:5b:87:db:5e:88:ea:2d:18:16:
                    b4:7b:e3:c9:24:a1:14:f8:91:ed:ea:d9:81:8c:ae:
                    82:10:02:ae:5e:ab:6f:7a:9f:94:48:d3:3d:13:da:
                    85:d5:5e:e2:d0:b0:39:35:92:ee:6e:ea:16:9b:11:
                    ee:0e:02:cb:27:28:22:05:b9:4f:b6:3c:db:8a:eb:
                    fd:2e:77:20:71:65:a3:d8:9b:a0:1f:3c:e3:34:4b:
                    02:bb:e3:43:f3:12:bf:fe:14:bd:ac:39:4d:ae:09:
                    dc:7e:52:8b:4a:7a:60:b0:6d:99:3c:aa:33:6f:77:
                    92:ad:b6:02:39:99:c5:2a:e1:3d:64:9c:b9:94:af:
                    a3:08:17:19:1d:0f:64:27:6c:4e:34:13:03:b0:b5:
                    60:a7:5b:db:26:04:30:8f:05:df:d5:1f:46:f8:87:
                    27:da:44:c8:ff:97:ca:bb:86:ea:46:9d:f6:88:17:
                    7c:6d:81:24:66:42:9d:46:f6:ef:7f:ed:12:eb:fc:
                    92:c0:06:13:59:1e:2b:fa:90:a4:8c:80:33:bc:da:
                    8c:c0:ce:f3:47:62:45:34:ec:11:78:11:d8:ed:da:
                    6d:ad:d4:ab:b4:1a:05:a5:53:73:56:1e:bd:05:e1:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E3:DE:CA:48:6A:69:08:55:2F:E4:27:0A:FA:0E:4F:10:FD:46:8B
            X509v3 Authority Key Identifier:
                keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/6ePeykhqaQhVL-QnCvoOTxD9Ros.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208226

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:48:51:da:95:5f:f5:25:3f:86:9a:cc:38:2f:c0:21:60:
         99:7f:bd:52:a2:05:b0:c8:78:d0:f5:3b:7c:3e:d8:f5:91:46:
         8f:40:15:5b:5c:f6:8f:1d:96:84:d2:ab:b8:62:c7:f3:83:2d:
         08:72:6b:5d:6b:7b:30:04:bd:34:17:2b:d0:9e:10:e7:33:54:
         13:1e:22:82:98:07:1a:28:5e:dc:da:d6:bf:fd:07:55:d4:48:
         3c:3b:65:96:1b:61:53:76:e4:82:fb:15:f1:90:9b:4e:57:4d:
         78:8f:5f:d5:32:21:25:b1:82:06:61:90:a4:91:87:b7:61:c8:
         82:20:f8:08:a0:d9:0d:71:7f:16:c0:f0:c0:a5:e8:15:73:fb:
         b7:4b:d2:d4:81:da:fa:3f:8d:90:14:44:a8:57:0b:99:86:fe:
         e4:24:d8:ce:07:65:7c:9b:5d:b0:15:c6:bb:aa:79:eb:d8:a2:
         90:4e:7d:6f:ad:71:f2:13:3e:f5:13:84:81:7a:bb:0b:84:f9:
         04:ce:97:51:35:b7:89:2b:82:8e:47:99:5e:d9:c7:15:56:c8:
         4b:25:9b:76:27:ec:be:42:d4:86:0b:49:62:59:c2:89:6d:81:
         63:4d:ee:9f:ab:3d:52:48:8d:59:4e:91:b9:54:d1:b9:dc:fe:
         46:0a:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:35 2026 by rpki-client