Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa
File:                     a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa (raw, json)
Hash identifier:          D+pL1VBjgTGvw1aRBbIgd1AS87Lk8R9yQobPy565ppg=
Subject key identifier:   6B:8C:35:38:2A:E6:4E:34:EA:D7:15:E0:14:C1:7B:84:81:CF:7F:1C
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019F19013E1ABD1ECBD1395E4AD7422121F7
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa
Signing time:             Tue 30 Jun 2026 14:48:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208492
Providers:                AS: 206345
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3e:1a:bd:1e:cb:d1:39:5e:4a:d7:42:21:21:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Jun 30 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b8c35382ae64e34ead715e014c17b8481cf7f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:2d:22:e1:d9:93:b2:d7:d5:7a:79:39:4a:
                    44:81:f2:69:bf:73:0f:f2:7a:b7:6e:dc:0e:57:70:
                    51:a5:1a:94:17:b5:0f:c5:07:35:f4:a7:bf:5d:a5:
                    90:7f:2d:94:5f:ce:28:6a:25:83:36:d2:7c:be:83:
                    a6:07:33:26:ed:ef:b5:26:95:ff:84:5c:38:16:5e:
                    3b:b4:9a:fa:62:71:65:f4:a8:3b:0b:61:29:01:8a:
                    23:73:7b:a3:90:72:04:fa:29:8c:c1:44:8f:0c:8f:
                    2e:db:16:f4:f6:de:a3:3d:13:5b:e1:a4:20:28:34:
                    24:c9:f6:a1:62:3a:11:5f:3f:52:ad:72:ad:c3:90:
                    77:0e:99:92:ed:43:98:85:9b:fd:56:93:54:c4:fd:
                    34:51:b1:86:83:88:81:77:58:c8:f8:e1:8e:bd:ec:
                    7c:e7:92:9b:97:4d:68:b8:c8:55:b9:91:61:8f:83:
                    66:34:5e:fd:98:ea:7e:55:2e:7b:c2:2a:08:e5:35:
                    61:b5:11:1e:90:5e:82:c2:ad:86:3b:8f:c8:82:4d:
                    04:03:a3:70:90:a5:e7:2e:46:dc:bd:33:d9:96:fb:
                    62:94:fe:f7:88:0f:49:02:db:c4:6b:c5:55:55:28:
                    85:6a:e1:f1:16:9e:c4:12:d1:5e:00:f2:61:b0:7b:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:35:38:2A:E6:4E:34:EA:D7:15:E0:14:C1:7B:84:81:CF:7F:1C
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208492

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:50:4c:c2:e7:8d:b5:5d:7e:e0:6a:25:b9:27:9d:29:96:
         8d:56:40:19:c7:3f:fe:f8:66:04:83:48:9c:29:77:d6:89:86:
         89:50:db:47:92:79:4f:06:be:e0:a7:7e:a4:f2:f1:94:95:dd:
         4d:e7:f9:1c:d3:bc:f5:61:cd:5b:28:f6:55:e2:bd:a4:5c:e3:
         fb:1c:d2:14:c3:b3:86:00:af:86:d6:dd:2e:65:4a:32:60:15:
         a4:8f:72:ca:28:7f:03:4b:4e:5c:70:ae:21:41:9d:6b:d6:ba:
         2d:40:91:99:b0:fb:a7:2b:e5:a3:5c:e4:2d:e1:8e:87:c3:26:
         98:fc:a3:bd:22:f2:94:2c:86:25:98:87:f3:b7:f2:b5:85:c3:
         bd:df:93:8d:d1:05:5f:f8:8d:54:55:34:ce:9d:05:8d:21:7e:
         8c:2b:a2:de:ab:93:b0:3d:67:79:2f:3c:6f:ba:bf:c8:b3:f9:
         f5:60:8d:1a:41:40:85:c5:51:01:8c:2e:d6:14:6a:29:54:17:
         74:21:6a:e3:ce:48:9a:e4:23:11:97:2b:7a:f2:41:9a:d1:42:
         e8:7a:92:4c:bc:6a:84:5e:8b:b6:33:e1:89:7b:52:36:ff:48:
         7c:1c:db:9f:e5:65:44:36:10:b8:bf:c8:48:2a:9c:5a:88:49:
         11:15:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:22 2026 by rpki-client