Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6RLqS0VIgIsN3V0yM0B0QaujAag.asa
File:                     6RLqS0VIgIsN3V0yM0B0QaujAag.asa (raw, json)
Hash identifier:          uUr/vp85N4XS3S8eyQsn/vKnyBqXe73xryosUfkTWdI=
Subject key identifier:   E9:12:EA:4B:45:48:80:8B:0D:DD:5D:32:33:40:74:41:AB:A3:01:A8
Certificate issuer:       /CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
Certificate serial:       019CFBA968B483AE623B8E74D3EFE8E486FA
Authority key identifier: E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6RLqS0VIgIsN3V0yM0B0QaujAag.asa
Signing time:             Tue 17 Mar 2026 11:58:29 +0000
ASPA not before:          Tue 17 Mar 2026 11:58:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200213
Providers:                AS: 62610
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fb:a9:68:b4:83:ae:62:3b:8e:74:d3:ef:e8:e4:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
        Validity
            Not Before: Mar 17 11:58:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e912ea4b4548808b0ddd5d3233407441aba301a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:77:c7:93:d1:25:d6:90:4c:2b:62:95:d8:
                    17:c5:60:4d:1a:c0:15:b5:ab:a8:00:5a:51:01:b3:
                    37:bf:e7:47:cc:56:3d:d1:c9:a4:14:11:98:66:ad:
                    1b:93:d5:1d:ae:ed:53:62:63:f2:b9:e4:21:37:71:
                    2d:5c:64:35:50:e6:bc:c6:0c:83:24:68:bf:9e:8c:
                    3f:2e:b1:b5:2e:c2:05:ee:93:4f:1d:41:af:96:17:
                    3b:75:0a:05:28:27:02:13:ba:49:40:5f:d5:d6:d9:
                    55:73:14:5e:fb:57:9e:20:6c:ab:2a:79:dd:8b:f7:
                    8d:32:f5:28:1d:e4:a1:69:8d:76:a4:10:92:84:35:
                    a3:75:1d:a6:af:5f:0f:6c:fe:ee:35:f8:56:1c:24:
                    65:41:0f:b7:20:93:19:d4:b2:97:4d:67:83:b3:b0:
                    44:56:91:b7:7e:5d:08:2c:47:8e:f0:b7:9c:1a:2f:
                    be:6b:99:b9:55:de:eb:40:12:10:9b:cd:90:fa:43:
                    81:cc:83:0d:6e:fb:08:1b:b7:79:e7:72:57:53:ea:
                    34:1f:7a:cf:80:e6:01:26:f0:b8:86:d1:2e:a4:24:
                    98:b7:57:68:e0:c5:bb:25:12:79:b9:c2:7f:d4:46:
                    69:6e:49:9f:df:3a:c9:45:f2:7a:f9:86:64:62:9f:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:EA:4B:45:48:80:8B:0D:DD:5D:32:33:40:74:41:AB:A3:01:A8
            X509v3 Authority Key Identifier:
                keyid:E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6RLqS0VIgIsN3V0yM0B0QaujAag.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200213

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:16:41:4e:44:8d:fb:a0:1f:ad:85:e1:8a:4f:ff:68:cf:
         57:69:84:37:ca:73:8d:86:1d:f3:5c:78:c5:d2:07:2a:4a:a1:
         60:1f:4f:f7:76:46:29:a6:dd:ac:8f:fd:f5:4c:41:ee:4c:92:
         37:9a:54:9d:98:57:55:16:28:8e:f2:eb:d1:82:0b:8e:71:83:
         00:09:c3:1b:fb:9d:79:4a:34:ad:b3:90:2d:d8:79:f6:70:82:
         cd:11:53:2c:08:76:7c:ce:3d:15:4e:bf:af:33:24:fa:e9:f8:
         9e:76:1c:33:c2:13:00:44:dd:97:3d:4b:4c:00:de:88:ed:4a:
         44:4a:1e:18:47:6c:af:18:a5:96:49:92:0e:c7:95:ec:a3:73:
         47:f8:db:19:25:86:a0:3d:f3:40:c0:fc:61:1d:1a:87:65:cc:
         2b:c1:84:2c:8e:3e:da:f8:ce:bd:b3:7d:86:f1:ea:51:33:cd:
         d7:5b:b3:f9:91:f5:0a:3a:21:da:fa:59:94:98:33:46:3a:dd:
         1c:a3:cd:bc:f1:e4:0e:70:36:fd:77:33:89:ad:53:16:bc:84:
         17:6f:a5:ad:a8:9c:70:83:6a:97:b7:d4:87:54:a8:f5:3e:76:
         ec:44:d4:6c:5d:8c:52:29:c3:6c:95:4c:23:6b:4a:fa:0a:89:
         32:6d:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:03 2026 by rpki-client