Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa
File:                     fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa (raw, json)
Hash identifier:          mjIlqPcdqEqZv1LLEdjujFp2APfTOPyNRkl6rj99vbo=
Subject key identifier:   7C:70:88:90:32:3F:B7:20:26:99:6D:46:3A:8E:0E:0A:68:2B:58:E4
Certificate issuer:       /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial:       019DFEC565A68FD69AA578F3EB4B59E3B528
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa
Signing time:             Wed 06 May 2026 19:30:42 +0000
ASPA not before:          Wed 06 May 2026 19:30:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206586
Providers:                AS: 20473
                          AS: 41051
                          AS: 204464
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fe:c5:65:a6:8f:d6:9a:a5:78:f3:eb:4b:59:e3:b5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
        Validity
            Not Before: May  6 19:30:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c708890323fb72026996d463a8e0e0a682b58e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:b5:ee:17:5b:39:b7:4d:69:62:d9:04:5a:
                    d9:96:81:73:bd:44:26:d9:1d:cb:cb:9c:0e:63:a8:
                    1c:5a:24:1b:1e:ff:0f:e9:9e:b3:8f:4f:a1:47:50:
                    c1:98:98:41:4e:19:35:20:cc:64:3b:e8:86:3d:4b:
                    36:97:32:3b:2f:88:7e:0b:46:f4:c4:b3:dc:6c:55:
                    b2:5c:66:3e:a7:5a:8d:35:09:6c:68:25:1e:d0:8a:
                    09:fb:ae:a1:9a:da:e9:ab:f6:ff:eb:2f:bd:b9:10:
                    b3:72:f2:98:4f:1b:8e:b7:b2:e5:92:5a:93:3d:eb:
                    ce:35:de:2c:e0:4f:11:45:bc:f0:c4:49:e0:6e:75:
                    d0:a9:e2:22:7d:07:5d:8f:13:dc:7a:46:70:9b:4b:
                    89:98:b1:11:5d:4a:01:95:94:af:90:61:da:57:cf:
                    e2:ec:ac:ca:34:8e:1b:4e:93:e9:59:99:cd:76:12:
                    28:83:c8:e7:a4:b2:29:84:70:d4:a2:d9:5d:63:1f:
                    6f:76:22:19:35:f8:2e:ec:5b:6b:36:b6:5d:f5:fe:
                    6d:40:db:47:aa:2c:17:af:3a:d3:61:13:62:9b:fb:
                    9f:c7:70:5b:cc:8e:c0:f9:52:95:54:14:e9:9f:e0:
                    c3:e1:a3:a8:20:54:d4:66:95:90:b5:de:cb:9f:90:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:70:88:90:32:3F:B7:20:26:99:6D:46:3A:8E:0E:0A:68:2B:58:E4
            X509v3 Authority Key Identifier:
                keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/fHCIkDI_tyAmmW1GOo4OCmgrWOQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206586

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:af:a9:5b:db:0d:34:79:c7:62:15:3d:72:15:54:9a:01:
         3f:70:78:89:e3:29:10:49:ee:3d:f7:c8:0a:ca:0e:ff:ad:25:
         b1:ad:01:b5:80:35:58:34:68:66:c7:19:86:05:22:db:7c:de:
         ab:bf:96:5b:a4:81:21:75:80:e3:d2:9c:ae:91:10:8b:99:19:
         83:c2:49:f8:6a:01:d8:2f:d3:30:bc:b9:df:42:c1:31:1e:da:
         80:11:00:e2:97:8f:95:1d:ae:2d:6d:9a:69:f1:96:5d:62:05:
         8c:96:f4:34:3e:2e:b8:92:59:7e:b3:71:db:c1:3e:76:bc:ae:
         b4:2d:54:02:81:52:6b:bc:bb:7f:10:e6:19:9c:42:fa:69:5b:
         b9:ee:d7:89:5d:de:5a:67:37:80:8c:64:fa:4a:14:6d:e5:de:
         32:83:d7:16:bb:55:08:ca:83:4f:04:5f:b2:c8:3d:95:9c:13:
         26:79:ad:d1:d7:2f:ec:76:bc:bc:0a:f1:1f:02:84:5b:74:89:
         23:1f:bf:9a:94:f6:99:3d:81:59:e2:39:05:04:a4:05:d8:87:
         bd:04:6b:a8:e4:e3:96:3e:fa:5c:75:4c:f2:cb:d0:dd:ae:b6:
         de:28:c8:99:f5:32:df:3c:e0:1b:d6:61:cc:8a:ef:35:c1:6c:
         05:c8:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:27 2026 by rpki-client