Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/m2bTLvcSMbxDIgrIorwexHNSf2U.asa
File:                     m2bTLvcSMbxDIgrIorwexHNSf2U.asa (raw, json)
Hash identifier:          0enEDyuXW5QOP/VltT6XXw4xWMFHd+HcPl/9Ynv8/gc=
Subject key identifier:   9B:66:D3:2E:F7:12:31:BC:43:22:0A:C8:A2:BC:1E:C4:73:52:7F:65
Certificate issuer:       /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial:       019F6B7486A0A436879B32BB01BA103B8B75
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/m2bTLvcSMbxDIgrIorwexHNSf2U.asa
Signing time:             Thu 16 Jul 2026 15:03:46 +0000
ASPA not before:          Thu 16 Jul 2026 15:03:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203868
Providers:                AS: 6939
                          AS: 8772
                          AS: 34927
                          AS: 41051
                          AS: 152368
                          AS: 205941
                          AS: 209533
                          AS: 210475
                          AS: 212895
                          AS: 214481
                          AS: 219331
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:6b:74:86:a0:a4:36:87:9b:32:bb:01:ba:10:3b:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
        Validity
            Not Before: Jul 16 15:03:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b66d32ef71231bc43220ac8a2bc1ec473527f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:d1:d9:33:0d:1f:c4:c3:23:82:64:ee:f5:
                    ed:1c:69:0b:fe:c9:94:2b:01:db:75:d2:8e:6c:bd:
                    33:79:9a:b7:ea:0f:80:28:b6:dd:83:69:a1:c6:c1:
                    59:1e:14:ec:78:91:7a:b6:1f:ff:01:64:68:ec:85:
                    7e:e7:cb:51:24:e0:52:ac:ad:38:75:71:e1:3e:0c:
                    30:d2:e3:47:42:cf:de:a6:24:03:7e:cd:50:d6:d7:
                    12:44:77:4b:46:2a:a2:4b:42:a7:e5:1f:ed:12:46:
                    28:27:aa:ba:f2:99:6c:1d:8d:b9:64:2c:7c:6e:17:
                    2b:80:df:ed:0a:0d:40:61:a7:f2:37:b1:6b:1d:af:
                    08:c1:d1:bf:40:4a:fe:fe:ce:d1:4f:d3:d0:6f:ec:
                    3f:65:ac:71:7e:c5:1d:f6:cf:0b:fc:b3:a7:01:bc:
                    79:f8:ad:81:aa:64:79:32:05:d6:59:c5:cd:14:99:
                    a3:0e:58:fc:dd:8e:f2:31:3e:5c:c5:ee:ba:6f:de:
                    3b:f9:e0:0d:86:2f:c2:ef:91:2c:46:29:a2:a6:7b:
                    11:a8:ef:d8:40:2d:01:6f:a6:ee:2e:60:aa:94:1e:
                    e2:a3:da:58:35:ad:e0:9a:29:d6:40:98:8f:54:a9:
                    f1:20:35:9b:9c:70:83:de:6f:41:ab:0b:00:c5:8a:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:D3:2E:F7:12:31:BC:43:22:0A:C8:A2:BC:1E:C4:73:52:7F:65
            X509v3 Authority Key Identifier:
                keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/m2bTLvcSMbxDIgrIorwexHNSf2U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203868

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:e0:01:9c:cb:89:9e:d8:13:10:06:d3:d6:ee:54:5f:db:
         00:2d:89:43:e1:97:93:e8:13:c9:7d:1b:7d:12:66:5c:49:ea:
         cb:e1:f4:ef:be:44:eb:27:9b:cc:9d:35:19:2a:11:4f:37:f8:
         c8:e6:ed:b1:77:c2:04:e9:89:3a:e6:04:c8:cc:ad:f3:3f:3a:
         04:d1:3f:8a:8b:87:6d:fa:ba:b1:27:f6:73:b5:8b:5a:e9:b9:
         bc:27:71:8d:88:0d:a4:75:30:34:c9:45:ff:ab:43:f5:ee:6f:
         f0:2d:72:40:35:9b:9f:21:ea:2d:04:41:3b:a4:86:c1:2f:a7:
         58:9a:50:da:0a:1a:bf:e7:1d:44:84:a3:c6:a5:fb:f7:7d:3f:
         10:96:ff:f0:d9:1d:d4:98:34:59:6d:ac:b0:f5:2b:3a:85:7e:
         34:72:f8:c1:18:fe:aa:eb:2c:9e:be:3a:93:3d:89:21:56:a0:
         13:86:8b:0c:ca:eb:3a:2b:f2:fe:9e:42:c6:4b:5d:f5:6c:6f:
         5a:df:96:99:3a:9a:09:e1:c0:b0:0c:b3:2a:f6:40:dd:22:dc:
         1a:30:f5:19:ba:bf:38:db:b3:6a:66:6a:6b:68:a6:48:c1:3f:
         04:5f:92:d7:d9:a2:69:10:cf:52:81:62:57:35:61:13:84:b2:
         9c:3b:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:52 2026 by rpki-client