Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6Hn3aFZts208jCw3AULJ2Qzv7AI.asa
File:                     6Hn3aFZts208jCw3AULJ2Qzv7AI.asa (raw, json)
Hash identifier:          an5d2CbIfSeEukxiX0iSsoXwwbGboQ9fNCMf5E9Jnrs=
Subject key identifier:   E8:79:F7:68:56:6D:B3:6D:3C:8C:2C:37:01:42:C9:D9:0C:EF:EC:02
Certificate issuer:       /CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
Certificate serial:       019F6E30E841274F89F843FA15BFC4A90386
Authority key identifier: EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6Hn3aFZts208jCw3AULJ2Qzv7AI.asa
Signing time:             Fri 17 Jul 2026 03:48:46 +0000
ASPA not before:          Fri 17 Jul 2026 03:48:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205794
Providers:                AS: 835
                          AS: 3204
                          AS: 20473
                          AS: 31898
                          AS: 34927
                          AS: 35661
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:6e:30:e8:41:27:4f:89:f8:43:fa:15:bf:c4:a9:03:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
        Validity
            Not Before: Jul 17 03:48:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e879f768566db36d3c8c2c370142c9d90cefec02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:27:0f:47:31:e1:e3:2f:2c:b1:67:ca:b2:
                    46:4e:fb:3b:26:a7:f6:6e:6c:19:49:c5:06:ac:93:
                    81:91:90:80:6f:d5:b1:e0:80:44:32:5d:48:33:e5:
                    48:dc:0a:0d:ed:7c:2a:20:47:91:4a:14:85:66:49:
                    0d:3e:c4:ca:98:5d:e4:1f:22:8d:2a:34:9c:d6:84:
                    20:5e:1d:f3:ea:9a:98:d8:90:6a:f1:24:66:7d:25:
                    ff:e0:44:cc:be:b7:e9:28:3f:77:63:66:ef:0e:85:
                    07:51:4f:b7:44:8a:78:5e:5c:ed:b3:91:8d:ab:5a:
                    57:7a:63:31:e8:38:a5:59:46:62:21:6e:65:2e:c5:
                    01:8f:d6:96:af:09:21:bb:22:a4:22:ae:07:1d:14:
                    6f:76:c9:94:ac:a5:30:9c:fc:5c:60:ac:69:58:70:
                    e0:d0:bd:7d:33:fa:79:94:df:50:00:30:43:a8:6d:
                    5b:2b:c0:20:7a:b1:1a:b8:3e:73:17:08:ea:7e:75:
                    46:7c:eb:99:61:9e:1d:ba:2e:9c:85:de:d9:04:b1:
                    55:f7:2d:15:b8:eb:8a:07:4d:f3:4d:9c:b0:2e:be:
                    87:6d:7d:8a:82:c2:53:dc:fa:66:17:a3:e8:b3:d5:
                    2a:83:ee:85:3c:e2:02:3d:e2:c7:ec:80:58:3d:e2:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:F7:68:56:6D:B3:6D:3C:8C:2C:37:01:42:C9:D9:0C:EF:EC:02
            X509v3 Authority Key Identifier:
                keyid:EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6Hn3aFZts208jCw3AULJ2Qzv7AI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205794

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:20:6c:73:3f:cb:c0:03:79:43:95:07:84:22:24:25:e2:
         0a:47:9c:13:38:59:f5:79:e0:09:46:28:c3:7c:51:04:10:ad:
         6b:7c:c1:96:6e:36:6e:25:23:5f:8e:71:75:c5:9c:bf:8b:5c:
         d9:2d:d4:08:01:bc:ff:61:07:80:8e:c4:19:8e:43:1a:12:6e:
         99:3b:cd:62:5c:75:95:19:8e:56:99:54:04:cb:d2:a6:49:84:
         2b:41:e1:b6:93:c3:19:29:23:c3:55:57:ed:f8:dc:6c:c3:de:
         64:7d:bc:32:5e:39:7f:bd:1b:0b:7b:32:7e:72:2f:6c:bb:90:
         bd:91:a8:86:da:04:b4:36:b8:22:e5:b6:09:b1:07:cd:f0:85:
         f0:8f:dd:61:19:f3:80:78:55:af:92:49:83:f9:93:bb:cc:a6:
         92:88:ab:bc:c0:4a:36:8c:aa:de:74:21:cf:df:81:c7:3d:45:
         5e:1e:97:c2:66:ee:96:f1:53:13:df:b9:11:d5:ba:6a:67:6a:
         02:94:04:55:ee:ad:78:af:30:34:3d:88:e3:9e:24:bb:55:a2:
         84:94:c5:90:e7:b1:89:78:a3:1b:68:58:11:0d:7c:54:c1:72:
         e6:7d:8d:c9:f5:af:de:30:08:4a:37:21:a0:f3:18:61:c4:bc:
         c1:84:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:35 2026 by rpki-client