Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vbCuqXxqV0_nKcCGcRIuAoe4EHs.asa
File:                     vbCuqXxqV0_nKcCGcRIuAoe4EHs.asa (raw, json)
Hash identifier:          dXEXNQ/ezmp7w/NRZ6210pdKeEnyF+wMpVIO5khBeuc=
Subject key identifier:   BD:B0:AE:A9:7C:6A:57:4F:E7:29:C0:86:71:12:2E:02:87:B8:10:7B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       01A0D1E817B33BD0FE344DBD04187F58C7A0
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vbCuqXxqV0_nKcCGcRIuAoe4EHs.asa
Signing time:             Thu 24 Sep 2026 05:34:03 +0000
ASPA not before:          Thu 24 Sep 2026 05:34:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            20804
Providers:                AS: 6453
                          AS: 6461
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:e8:17:b3:3b:d0:fe:34:4d:bd:04:18:7f:58:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Sep 24 05:34:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdb0aea97c6a574fe729c08671122e0287b8107b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:3f:72:c1:b3:78:be:b4:05:78:b0:b7:97:
                    b4:8e:5a:30:22:33:11:31:76:66:3d:f2:45:e9:e1:
                    45:d0:5c:45:1d:ec:a7:e9:f0:fe:8f:7b:54:66:ac:
                    6d:ad:8d:47:0f:05:01:b0:9a:26:d1:67:fe:44:eb:
                    db:e4:84:c0:07:fe:67:6c:fd:39:ae:34:f5:99:7a:
                    ce:bc:6c:73:02:30:a5:3b:b7:96:87:85:00:5a:19:
                    49:59:36:c5:76:dc:17:87:d9:96:66:4f:c8:ff:2c:
                    ec:e4:21:67:70:1e:d2:66:01:40:05:5f:0b:49:1e:
                    69:2d:6c:54:f8:c9:81:50:4e:7c:e3:45:32:0d:a5:
                    ba:cc:7a:b4:fb:a2:79:c7:5d:18:2d:a5:37:52:3a:
                    d5:fb:0f:f9:23:ef:25:f1:5b:63:01:24:00:75:76:
                    40:d7:b5:56:9e:ea:ef:8e:32:12:9d:7e:22:44:19:
                    ba:06:92:de:0f:ef:85:d0:9f:3e:be:23:6c:52:67:
                    4b:ea:ef:fe:a8:c5:e0:6c:d1:3e:99:74:dc:ea:f9:
                    05:08:c2:ac:60:32:8d:30:27:66:8e:3e:80:1b:8f:
                    b6:b1:e0:7f:cf:28:89:16:39:db:28:7e:5f:9e:fe:
                    ff:0d:13:bb:c6:87:98:02:1a:72:5f:79:af:1c:22:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:AE:A9:7C:6A:57:4F:E7:29:C0:86:71:12:2E:02:87:B8:10:7B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vbCuqXxqV0_nKcCGcRIuAoe4EHs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20804

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:04:70:6e:b2:cb:9a:ab:74:41:8d:3e:5e:67:fb:f0:77:
         8d:e4:a4:8c:b7:d7:e6:9f:71:4e:61:9c:b6:ee:37:27:42:3d:
         53:1a:9b:a0:41:8a:88:6d:ed:6c:55:51:fb:6a:3e:6e:1a:fd:
         1c:9f:b8:b2:d2:50:67:ec:f1:45:51:9e:c6:47:c4:bf:96:2c:
         46:a8:db:04:e5:d9:c1:d5:a0:44:93:ab:a6:c0:9b:17:ba:db:
         6a:52:ba:7c:46:a4:b8:35:f0:72:19:8a:2f:bd:7b:12:00:a0:
         d9:5a:f7:37:fb:ee:2d:96:0c:0c:5f:fc:cc:ef:28:dd:4e:82:
         62:7f:a4:7f:1f:99:c7:dd:c2:6e:85:a4:1b:4b:93:42:1d:3d:
         0d:a6:72:ee:72:aa:27:6f:1c:2e:4b:43:0e:00:92:dc:31:51:
         51:66:28:55:97:3e:97:df:6a:27:81:97:03:9b:6e:7c:72:4f:
         b0:56:11:a3:04:ec:13:d8:bc:55:e0:da:d2:03:ff:b8:fe:70:
         fd:a6:10:c8:5f:26:fb:e6:ae:34:91:29:1c:7a:b3:29:7f:6f:
         13:e5:63:27:72:c7:32:ab:ce:39:88:1a:69:40:2b:fb:3c:59:
         c9:44:c0:ff:cc:c6:c5:10:24:27:7d:ee:e9:9f:1f:f0:0e:9e:
         11:15:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:20:57 2026 by rpki-client