Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/6Knyv_aZPSpzV0y4pAOgwSnT504.asa
File:                     6Knyv_aZPSpzV0y4pAOgwSnT504.asa (raw, json)
Hash identifier:          Xmc6kkx/Dd66Fa+jLP3+SD3yOmeeWtNJD9sDb/VMiBs=
Subject key identifier:   E8:A9:F2:BF:F6:99:3D:2A:73:57:4C:B8:A4:03:A0:C1:29:D3:E7:4E
Certificate issuer:       /CN=2ff93b84818cd255818a1ee9059f102d7f01f7db
Certificate serial:       01A1ABBF012E7CB66826065980E5AC0AA0F6
Authority key identifier: 2F:F9:3B:84:81:8C:D2:55:81:8A:1E:E9:05:9F:10:2D:7F:01:F7:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/6Knyv_aZPSpzV0y4pAOgwSnT504.asa
Signing time:             Thu 05 Nov 2026 12:46:23 +0000
ASPA not before:          Thu 05 Nov 2026 12:46:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198679
Providers:                AS: 20473
                          AS: 41051
                          AS: 47272
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:bf:01:2e:7c:b6:68:26:06:59:80:e5:ac:0a:a0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff93b84818cd255818a1ee9059f102d7f01f7db
        Validity
            Not Before: Nov  5 12:46:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8a9f2bff6993d2a73574cb8a403a0c129d3e74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:24:7b:47:45:e1:e2:f2:f0:03:a4:ed:50:
                    6b:c0:f7:ad:7d:bb:94:14:b6:a6:b1:35:97:56:7a:
                    60:90:df:02:0f:1c:4c:dd:11:c8:54:75:c3:52:72:
                    c4:1b:ba:ba:ec:10:fe:a7:4b:57:39:f6:99:b4:4a:
                    e1:8b:28:ce:cc:ab:09:56:12:ab:6c:96:f6:71:94:
                    a0:99:bb:39:2c:88:38:2c:cd:d6:2b:a1:d8:cf:d8:
                    aa:37:d2:0c:c0:7d:c1:1f:b1:08:b9:9f:c3:de:a0:
                    40:df:33:94:22:d6:32:2e:5d:07:50:26:f2:bb:f6:
                    9d:02:86:5e:de:64:04:86:fa:54:d5:25:a1:79:a9:
                    18:f5:a6:9d:b6:a1:fe:6e:2a:da:7c:28:31:34:fe:
                    19:b7:55:53:5a:51:f1:e9:90:c3:0a:09:95:9d:d7:
                    98:f3:a7:e1:f5:13:71:97:9e:dd:bf:f9:b4:45:04:
                    e4:12:b6:ea:1d:5d:28:ca:79:98:cd:5f:f2:35:1c:
                    36:c2:00:80:f2:ba:10:da:c7:4d:5a:01:fc:96:7f:
                    65:a7:c1:1f:bb:8c:d3:36:16:8e:aa:5e:0b:25:7b:
                    26:4f:9c:1a:5b:57:50:b1:f0:e3:c1:b0:c2:2c:4b:
                    1e:22:41:23:75:c6:a8:37:b3:b9:26:26:79:94:e0:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:F2:BF:F6:99:3D:2A:73:57:4C:B8:A4:03:A0:C1:29:D3:E7:4E
            X509v3 Authority Key Identifier:
                keyid:2F:F9:3B:84:81:8C:D2:55:81:8A:1E:E9:05:9F:10:2D:7F:01:F7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_k7hIGM0lWBih7pBZ8QLX8B99s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/6Knyv_aZPSpzV0y4pAOgwSnT504.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf0ace-070c-4c82-9fd8-13491c8e4cbd/1/L_k7hIGM0lWBih7pBZ8QLX8B99s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198679

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:ef:24:13:ef:a0:25:37:48:ef:b5:a0:d4:37:3f:5c:da:
         0a:ee:54:97:fb:62:77:fc:c0:26:a4:c9:0a:62:7b:76:74:36:
         ca:0b:b4:e0:fe:46:0e:2c:8f:45:5d:f8:bc:b2:88:b8:de:23:
         7c:c9:4a:67:73:c7:4d:cb:dc:1a:05:12:7a:9e:91:79:18:51:
         3a:3c:6d:ec:15:8b:a6:2e:14:f4:22:21:4f:8b:fe:a0:4f:df:
         8f:98:a1:6d:d5:b0:0c:54:02:e7:2b:4e:3b:22:14:52:cd:92:
         77:5c:4b:c2:81:44:1d:b5:65:3d:5f:ab:b9:cb:d7:87:ed:37:
         dc:cf:fc:53:4c:e5:a2:c6:ca:15:0b:4f:d6:18:e1:12:48:08:
         c6:31:21:7f:8d:4f:3c:a2:41:47:46:3e:d9:38:eb:cf:b4:4b:
         23:3a:48:a3:8a:63:1a:ed:1e:b0:f5:81:0d:13:09:4d:1e:14:
         0d:48:8c:f0:4e:9b:57:3d:cb:5a:bc:8e:e1:15:7c:60:4b:fe:
         cf:ff:20:1d:75:f1:a1:be:e2:a6:01:79:50:17:87:6f:1d:37:
         66:9f:2f:de:4f:a5:85:28:7f:a1:34:fb:32:19:ba:54:c7:e0:
         fa:48:c9:15:1d:30:8f:33:01:26:fb:1e:bc:b5:ce:bc:ba:2d:
         ef:4e:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:12:07 2026 by rpki-client