Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/CFyJX9XkKYmp8ro1qPWOf4oXUKo.asa
File:                     CFyJX9XkKYmp8ro1qPWOf4oXUKo.asa (raw, json)
Hash identifier:          LlHlqb7DkM8Mb1clldUSsTjEXtfpFdBGmD75HXT4Vsk=
Subject key identifier:   08:5C:89:5F:D5:E4:29:89:A9:F2:BA:35:A8:F5:8E:7F:8A:17:50:AA
Certificate issuer:       /CN=6fe142f6be009a070c7d7e277851e05862765286
Certificate serial:       019F236839C4EDACEF456F17719019B17EFF
Authority key identifier: 6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/CFyJX9XkKYmp8ro1qPWOf4oXUKo.asa
Signing time:             Thu 02 Jul 2026 15:17:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216353
Providers:                AS: 174
                          AS: 3215
                          AS: 5511
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:39:c4:ed:ac:ef:45:6f:17:71:90:19:b1:7e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe142f6be009a070c7d7e277851e05862765286
        Validity
            Not Before: Jul  2 15:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=085c895fd5e42989a9f2ba35a8f58e7f8a1750aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:b7:42:8c:f4:41:e5:c5:35:e4:0a:bf:ba:
                    2a:8e:96:33:40:ec:3c:8b:90:81:6c:17:eb:f6:7f:
                    69:6d:93:f8:c5:7c:7a:31:be:db:d8:e6:52:f8:f3:
                    65:58:7a:28:6b:71:97:d0:f7:2c:6f:2b:98:ca:eb:
                    ce:d0:ea:bb:8a:fc:e3:d0:dd:bd:69:a5:7a:96:21:
                    4e:05:67:d0:46:ba:5e:68:29:41:59:96:f0:9e:e0:
                    74:2f:ae:c3:d7:a5:1e:81:55:52:c8:60:9b:96:f3:
                    fe:fb:bd:96:04:b8:11:90:10:b5:6c:2f:09:b3:63:
                    0a:fb:b9:59:8a:65:80:3c:82:02:ab:33:6a:07:95:
                    23:f3:af:1e:e4:f1:df:6e:af:9c:1c:2c:47:38:f3:
                    91:02:c5:30:3e:54:ff:7c:75:d4:c5:5a:6b:59:7e:
                    14:3b:c9:f0:ef:db:1f:b4:d5:41:ad:a6:a1:84:4f:
                    88:f2:21:c5:ce:e2:72:58:91:ea:66:7e:13:8e:4f:
                    f4:40:81:22:bd:a9:8a:94:30:91:d3:46:fd:3a:43:
                    06:66:0a:01:7f:8f:22:f6:5d:60:b9:30:a8:c0:f7:
                    ef:2c:3b:c5:39:93:9a:1f:b6:03:48:fe:14:e5:85:
                    d1:8f:ea:41:2e:1f:12:ca:d8:c1:7e:b0:86:40:0d:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:89:5F:D5:E4:29:89:A9:F2:BA:35:A8:F5:8E:7F:8A:17:50:AA
            X509v3 Authority Key Identifier:
                keyid:6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/CFyJX9XkKYmp8ro1qPWOf4oXUKo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216353

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:ea:6c:7a:45:dd:55:6f:9d:43:75:59:6f:4b:15:b0:37:
         2c:d6:fc:f3:dc:de:0e:5e:94:c7:11:16:52:79:78:be:d0:ba:
         85:15:59:5b:53:44:1c:73:32:22:7b:cd:39:59:61:04:4a:73:
         61:85:bf:46:47:f1:35:8c:95:0b:0b:a6:31:13:7d:25:44:fd:
         da:61:d8:82:d1:07:7e:da:00:ef:4a:0b:4f:14:6e:30:24:5d:
         f1:d2:48:51:07:02:d0:9d:e1:74:da:6a:52:0e:6c:fc:4e:d9:
         bb:51:61:8f:97:44:a0:8e:58:65:3e:24:36:a2:11:59:76:49:
         43:18:27:9a:46:37:6f:2a:55:5e:4f:a6:7f:a2:1d:2a:83:6b:
         cc:0f:f5:06:1b:79:25:d7:5e:80:11:19:8e:b9:47:95:74:6e:
         4c:b8:db:c2:d1:60:bd:da:60:09:dc:2c:20:5e:ed:13:14:20:
         c3:a9:55:00:cb:ba:02:bd:10:48:91:34:89:ba:ca:99:01:c1:
         d1:80:13:9b:04:7b:34:23:d8:16:f6:23:c6:98:97:05:90:76:
         6e:55:4b:2a:02:2e:e1:20:af:d2:e2:e4:be:52:3c:10:19:37:
         7e:6c:f6:4b:65:89:82:26:8f:0f:bc:2d:4b:67:cc:6a:0d:f7:
         4d:e2:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:30 2026 by rpki-client