Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VwG9H-H3BKxa182EuYMKOfW-pDY.asa
File:                     VwG9H-H3BKxa182EuYMKOfW-pDY.asa (raw, json)
Hash identifier:          VucV4WG0cObsmaD2Gcwxp4U13EVpmlKVeoHtemnYiqI=
Subject key identifier:   57:01:BD:1F:E1:F7:04:AC:5A:D7:CD:84:B9:83:0A:39:F5:BE:A4:36
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       019F19015ADB1C6D3A3BB22BDA20806D25BD
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VwG9H-H3BKxa182EuYMKOfW-pDY.asa
Signing time:             Tue 30 Jun 2026 14:49:06 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206260
Providers:                AS: 2116
                          AS: 34087
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:5a:db:1c:6d:3a:3b:b2:2b:da:20:80:6d:25:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Jun 30 14:49:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5701bd1fe1f704ac5ad7cd84b9830a39f5bea436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:46:82:c2:30:74:34:03:9b:c9:2c:3e:9e:
                    cc:ca:88:67:7c:4d:ce:34:bd:2f:c2:01:df:68:9f:
                    69:88:e6:14:56:51:96:2a:f4:d0:90:d6:c6:85:61:
                    f6:c5:4e:eb:1b:dc:39:95:6e:1b:e7:2d:79:fd:3e:
                    78:ae:2d:da:fa:3e:48:f7:a9:42:5a:5d:f9:86:24:
                    9b:22:8d:fe:98:ef:b6:27:8e:2f:33:a8:94:34:b0:
                    dd:58:cb:54:32:8b:b1:05:4c:7d:86:72:54:70:44:
                    08:e9:ed:2d:f0:1a:58:85:1d:d5:40:83:73:ce:13:
                    7f:ea:a7:e5:d3:f0:81:b2:5f:3d:2e:ad:e1:35:db:
                    e9:41:85:b4:a6:7b:e7:62:22:83:66:14:ec:c8:3b:
                    2a:78:27:e3:7d:b3:d8:ab:ac:de:65:1e:52:18:9a:
                    03:ab:72:e9:3e:0b:e0:96:d5:7a:21:67:88:b3:d5:
                    68:3a:4d:90:d1:4c:5c:ab:ec:73:0e:2b:ec:fe:e2:
                    18:17:39:8f:65:77:ea:34:dc:6f:09:80:b2:5d:2e:
                    df:2e:04:07:4c:b1:15:2e:ee:3b:d7:8a:35:74:3b:
                    e9:96:79:da:13:3c:a4:f8:84:72:e5:1c:21:1e:0d:
                    62:eb:0e:ab:0f:6b:7f:6e:87:1f:2a:e9:9c:84:dd:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:01:BD:1F:E1:F7:04:AC:5A:D7:CD:84:B9:83:0A:39:F5:BE:A4:36
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VwG9H-H3BKxa182EuYMKOfW-pDY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206260

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:16:67:0d:1f:8f:64:ac:2f:b8:07:6c:29:15:a8:d7:41:
         e2:65:73:03:0d:5b:57:90:6a:1f:bf:0c:f1:3a:88:0b:a9:cd:
         8f:a5:01:2e:ae:b9:a5:47:56:10:c4:ef:df:a7:b5:f1:11:74:
         43:16:c1:01:47:1e:d3:0a:f8:74:d0:97:65:34:dc:03:38:33:
         16:f4:3e:f1:bf:48:29:09:cd:c5:5e:25:ec:b7:bc:88:03:1e:
         9f:5f:cc:16:17:b9:b7:aa:55:b2:07:43:65:1d:c4:f1:23:5d:
         c6:ca:cd:4f:9d:0c:7b:62:98:db:83:13:98:8a:46:62:1d:09:
         62:a7:1f:e1:0c:79:75:55:bd:40:93:2c:a4:55:e4:15:55:c2:
         05:0d:9a:75:d1:64:92:16:68:35:eb:01:f7:63:12:d2:b7:57:
         1d:c5:93:41:07:9f:d7:35:70:dc:57:d5:24:e8:9c:cf:bd:08:
         21:19:d7:83:ee:4a:28:3d:dc:47:36:5c:18:e2:d1:de:5f:c0:
         8f:af:85:0a:9e:48:f4:2f:bd:d3:4f:bb:6d:ef:c7:d5:ae:8d:
         d7:ed:dd:a0:38:74:b3:33:f2:a6:c6:e3:aa:45:fb:6b:29:c0:
         67:58:cc:b1:dd:78:e0:22:b0:bf:29:87:0e:d1:2c:95:2e:b6:
         ab:14:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:21 2026 by rpki-client