Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/1-9i6h4lZSk4A_dDWJdbNpRdRToU.asa
File:                     1-9i6h4lZSk4A_dDWJdbNpRdRToU.asa (raw, json)
Hash identifier:          ESFox6xFaIn2rqUCGFL8o0d5/GCIwNCLGi8smMw88gI=
Subject key identifier:   FB:D8:BA:87:89:59:4A:4E:00:FD:D0:D6:25:D6:CD:A5:17:51:4E:85
Certificate issuer:       /CN=6fe142f6be009a070c7d7e277851e05862765286
Certificate serial:       019F40CDE814D13CF6801A995765477505B4
Authority key identifier: 6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/1-9i6h4lZSk4A_dDWJdbNpRdRToU.asa
Signing time:             Wed 08 Jul 2026 08:17:43 +0000
ASPA not before:          Wed 08 Jul 2026 08:17:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35676
Providers:                AS: 174
                          AS: 5511
                          AS: 198949
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:40:cd:e8:14:d1:3c:f6:80:1a:99:57:65:47:75:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe142f6be009a070c7d7e277851e05862765286
        Validity
            Not Before: Jul  8 08:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbd8ba8789594a4e00fdd0d625d6cda517514e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:b6:3e:38:af:5f:e1:67:8f:21:8d:84:e6:
                    de:c9:b1:69:2a:3f:e0:f3:30:df:74:69:10:a3:0c:
                    3f:de:1c:4e:ab:61:26:44:1b:f6:ac:c1:8a:c3:f6:
                    ea:de:3f:96:ee:b7:2f:f3:08:fb:b3:56:41:92:66:
                    f0:99:39:14:3b:46:3e:66:6b:91:2a:a9:9e:d2:71:
                    2e:bb:8d:52:d9:da:d2:f8:63:cf:bb:7b:3a:17:c6:
                    82:21:aa:99:5d:28:1a:2f:fa:f9:41:e0:35:ae:22:
                    89:79:f4:c4:bd:d4:5e:83:2d:9a:91:89:89:56:d8:
                    a2:d6:bf:fa:5f:91:ca:44:10:72:e4:65:05:92:ef:
                    e2:3f:63:ce:80:53:b6:a6:01:05:5f:26:0f:54:37:
                    9c:66:4d:db:70:68:e2:9a:7a:d6:ec:41:8d:76:ef:
                    3c:d5:4d:b5:fb:74:32:f3:b2:9a:d6:c7:88:7f:24:
                    e8:7e:09:8a:2f:d1:fa:46:4b:77:b8:ed:1e:6b:0e:
                    a1:83:5b:d0:fd:b4:25:34:d5:3d:12:9f:77:11:34:
                    20:3d:18:c0:a5:aa:4a:17:f9:6f:57:48:dd:15:b8:
                    ef:77:c4:0d:da:37:60:ae:a3:78:9b:34:3c:ad:29:
                    23:e8:d2:f5:81:00:f1:0a:c8:3b:54:80:46:e8:0d:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:BA:87:89:59:4A:4E:00:FD:D0:D6:25:D6:CD:A5:17:51:4E:85
            X509v3 Authority Key Identifier:
                keyid:6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/1-9i6h4lZSk4A_dDWJdbNpRdRToU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35676

    Signature Algorithm: sha256WithRSAEncryption
         6b:02:9c:90:c5:7d:bf:c6:1e:af:03:52:f9:30:a0:28:fc:b3:
         fb:d8:0a:28:8e:c0:92:e8:28:63:5e:f8:9b:75:c8:ad:c4:49:
         18:b4:42:e1:89:26:8b:9f:43:fe:95:ec:d2:73:09:57:b7:d0:
         1c:0c:f3:24:02:52:c3:30:9c:d0:76:c7:fd:1a:4a:fa:7e:1b:
         e4:d2:91:10:2b:53:86:96:07:1e:ec:3c:f0:94:d4:f8:09:43:
         3b:6d:00:85:1b:80:5d:98:fb:06:c1:10:31:48:57:e1:e8:09:
         53:ec:e0:89:cc:ba:31:a0:2a:a6:6e:ad:75:97:22:67:aa:e1:
         91:d1:51:83:49:8c:89:ea:ab:33:07:56:65:2a:dc:bd:16:8d:
         c1:93:5c:50:78:1c:04:c7:4c:23:1c:68:4d:18:2e:b1:b6:cd:
         e3:62:36:a8:6c:3c:8f:e3:d6:12:57:ae:0c:f2:b4:0f:8b:9a:
         7b:56:c1:38:cd:8f:aa:fe:78:ea:59:d0:05:4b:a8:0f:91:ac:
         1c:25:98:f1:75:7f:46:77:fb:c5:90:86:e0:8d:a6:1d:23:51:
         57:c1:45:a8:e9:87:a8:e2:67:3f:06:a1:69:b7:3f:18:5b:08:
         8a:d2:b3:c2:c8:31:56:bf:50:66:1c:53:a4:fd:82:5e:82:45:
         ca:1b:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:58 2026 by rpki-client