Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/m68keB3eEWupefhfdu1EojbXUx0.asa
File:                     m68keB3eEWupefhfdu1EojbXUx0.asa (raw, json)
Hash identifier:          d7/89Ia5AzHYOhT/NLGxHC2wfpCLvAL8r4vSmbnqhi4=
Subject key identifier:   9B:AF:24:78:1D:DE:11:6B:A9:79:F8:5F:76:ED:44:A2:36:D7:53:1D
Certificate issuer:       /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial:       019F1901619D7F18C571CFF7488C85AE7213
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/m68keB3eEWupefhfdu1EojbXUx0.asa
Signing time:             Tue 30 Jun 2026 14:49:08 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196874
Providers:                AS: 12874
                          AS: 212841
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:61:9d:7f:18:c5:71:cf:f7:48:8c:85:ae:72:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
        Validity
            Not Before: Jun 30 14:49:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9baf24781dde116ba979f85f76ed44a236d7531d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:10:72:fd:f7:65:70:8b:f7:0b:8d:98:c0:
                    ce:1e:eb:1e:9e:3f:0b:23:7a:45:a8:37:d1:b6:12:
                    70:62:87:62:c7:54:44:c3:f5:0f:1d:8d:5c:34:91:
                    b7:3b:13:dd:00:2f:a5:04:63:40:c3:02:b5:ec:1a:
                    bb:c9:68:23:0f:8f:17:bf:d5:c3:85:9f:ad:5e:2d:
                    51:fb:8c:54:63:74:b6:95:a5:a8:fe:2f:a4:0c:0a:
                    ca:c7:00:32:21:b6:04:6f:8c:4b:c7:19:e8:f7:8f:
                    63:77:f8:99:f4:d4:ef:ce:aa:37:bc:4e:a4:2a:7d:
                    3c:77:1a:f1:cb:7c:50:96:6e:c2:ad:23:ed:a6:fe:
                    da:48:d8:d6:4c:ba:62:cf:a0:21:cf:cf:27:ac:03:
                    1e:91:a7:62:47:5c:94:6a:62:68:9b:d4:62:bd:9c:
                    78:a1:08:2e:e6:94:4c:47:88:01:fd:47:19:b1:d4:
                    44:dd:69:8f:8d:bc:b9:db:f6:8a:e4:98:7a:9d:8c:
                    2e:b7:37:40:86:1c:72:e1:c5:48:19:7f:f4:f7:fe:
                    52:36:59:a8:dc:ce:c8:2e:92:47:b7:13:ff:7d:c2:
                    a0:88:e9:27:2a:69:f3:26:02:c2:25:84:da:e7:ad:
                    3f:75:98:57:e5:48:97:ab:f3:96:9c:39:a0:e0:92:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:24:78:1D:DE:11:6B:A9:79:F8:5F:76:ED:44:A2:36:D7:53:1D
            X509v3 Authority Key Identifier:
                keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/m68keB3eEWupefhfdu1EojbXUx0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196874

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:ad:99:4b:04:3e:19:ca:e9:57:25:26:b5:e4:10:5b:bb:
         ec:cf:d2:71:e4:9f:2e:55:53:f4:0b:24:b9:7a:ea:6f:c8:33:
         58:e0:ad:29:33:e3:50:0f:f4:4f:54:7c:e1:63:e8:ea:99:04:
         59:7e:f3:a0:ee:73:9c:3c:34:09:9a:25:28:da:9a:e9:3f:b6:
         77:41:9f:77:d5:c9:ce:67:54:97:dd:23:e5:f7:0d:4e:14:31:
         2c:ae:40:77:58:3a:3e:6d:0b:34:22:ee:45:46:38:54:57:92:
         30:a4:8a:b7:2d:55:06:e9:dd:7d:6e:fc:76:12:24:db:3a:75:
         9d:7e:2c:81:b9:30:58:32:8e:d4:bd:88:a4:02:26:ee:74:ce:
         23:1c:a6:24:de:2b:8b:99:ec:49:4c:e0:56:b9:4c:d6:2f:70:
         82:eb:e7:fa:5b:d1:87:c5:c2:9a:ad:3d:70:27:a7:5a:60:30:
         da:4b:41:d3:d1:30:c1:dc:23:13:95:e0:fe:3c:20:cd:1b:50:
         39:8d:20:6b:de:31:fc:05:7d:4c:d5:53:71:99:f4:df:c4:8a:
         94:66:f5:b5:bf:42:e5:af:a0:b0:d0:89:29:01:c7:3f:3e:01:
         d5:fc:7c:3f:a5:2d:c0:a7:a9:18:59:cd:aa:27:e4:c0:e2:d5:
         e4:09:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client