Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa
File:                     6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (raw, json)
Hash identifier:          bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=
Subject key identifier:   E9:90:91:7A:23:2D:FB:D3:B9:A9:39:47:7D:D4:69:D1:00:37:D9:9E
Certificate issuer:       /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial:       019CFA8BC52D04DA8526B77F7FDF6CF2792E
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa
Signing time:             Tue 17 Mar 2026 06:46:29 +0000
ASPA not before:          Tue 17 Mar 2026 06:46:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199631
Providers:                AS: 1299
                          AS: 6758
                          AS: 15805
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fa:8b:c5:2d:04:da:85:26:b7:7f:7f:df:6c:f2:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
        Validity
            Not Before: Mar 17 06:46:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e990917a232dfbd3b9a939477dd469d10037d99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:94:e0:ef:1b:e8:02:5e:25:65:e5:cf:c6:
                    b4:02:98:ab:c4:50:8d:0d:80:22:1c:0a:8d:8e:8b:
                    8c:d5:fc:dd:84:9c:1b:e9:d6:91:5f:14:d8:b4:49:
                    aa:88:4d:37:1a:31:bf:77:30:f1:e1:11:a7:8c:54:
                    66:83:95:56:3e:42:db:2d:03:94:d1:06:85:08:bc:
                    38:dd:6c:d2:27:f6:9e:53:c4:41:91:09:c0:d9:ff:
                    bd:c8:63:d7:99:64:a1:42:2e:35:58:5c:5e:b9:41:
                    a7:cd:c4:f8:a3:44:14:c5:f9:10:1b:90:85:63:49:
                    39:c6:c7:f9:69:cf:9d:10:47:17:3c:bb:c2:8c:db:
                    40:c2:e4:0c:6f:e0:cc:d5:9f:4b:53:62:aa:bd:3f:
                    3c:ff:6d:de:65:8e:ae:fe:f6:24:c7:22:fe:70:ed:
                    ba:fa:67:c3:78:86:5f:65:03:5e:de:65:ba:5a:08:
                    e2:6b:11:de:fd:ba:95:d2:27:6f:4a:ff:53:f6:63:
                    8a:35:48:65:bf:a4:01:70:0c:89:31:41:ab:55:cf:
                    e0:32:4a:3d:3c:eb:49:e9:64:7e:c8:d5:8b:e7:f4:
                    56:43:8a:49:51:05:c6:03:01:03:47:5f:7d:79:5a:
                    0f:33:a7:aa:5a:eb:ef:92:df:e8:ac:cc:86:69:4a:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:91:7A:23:2D:FB:D3:B9:A9:39:47:7D:D4:69:D1:00:37:D9:9E
            X509v3 Authority Key Identifier:
                keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199631

    Signature Algorithm: sha256WithRSAEncryption
         97:01:a1:00:8e:3d:72:8d:7c:64:56:0d:53:db:14:bd:3c:59:
         05:1e:05:f2:5b:8c:f1:b4:53:fd:02:bb:d6:80:af:c4:86:59:
         9b:65:f4:a1:2c:f6:af:c1:6e:e4:88:20:85:1d:09:cd:b3:68:
         be:17:7c:61:f9:05:01:28:a4:9a:62:50:df:21:62:76:96:a9:
         d8:06:76:26:10:24:74:ab:b6:bd:50:87:da:4a:84:ca:1b:6b:
         88:10:d4:c7:19:fb:f4:59:e7:9a:93:aa:fa:4c:55:86:b8:e3:
         9e:70:8e:9d:47:52:38:cc:cb:51:76:b1:0d:88:7a:0b:59:ed:
         31:a1:56:f5:dc:45:9e:58:ea:fb:d6:5e:9d:74:83:ae:0c:27:
         3e:05:a7:be:8e:02:35:39:07:3a:40:d2:d4:9f:8a:5a:65:c4:
         50:98:af:4f:61:79:bd:8e:b3:a5:19:84:6f:8d:8c:09:09:9a:
         89:08:f4:6a:25:65:26:be:17:cb:39:60:c9:8b:65:9c:63:e4:
         3d:a0:ac:2c:06:82:de:c9:5d:ec:90:9c:6e:5e:b3:44:8f:7d:
         d7:89:6c:a0:5b:ef:f6:a4:9b:d2:bd:5d:67:c1:63:2f:d3:3c:
         60:f9:32:79:c8:80:3a:cc:7f:58:fc:c7:9e:72:80:f1:90:aa:
         39:c9:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:13 2026 by rpki-client