Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa
File:                     B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa (raw, json)
Hash identifier:          IUK/NTcpKX9eob9IkswUCrgL3y+vjVpnJDlPYvd3igU=
Subject key identifier:   07:72:BA:40:B9:0B:2C:DE:49:01:01:6B:32:FA:FB:CC:74:A9:DA:21
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019CAA020D2AA4D3BB0A47DA14A8C81A8944
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa
Signing time:             Sun 01 Mar 2026 15:26:26 +0000
ASPA not before:          Sun 01 Mar 2026 15:26:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206005
Providers:                AS: 44901
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:02:0d:2a:a4:d3:bb:0a:47:da:14:a8:c8:1a:89:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Mar  1 15:26:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0772ba40b90b2cde4901016b32fafbcc74a9da21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:bd:0d:16:79:ea:8d:b5:f2:b8:62:3c:e4:
                    a0:f9:f2:88:eb:ae:06:16:0e:84:7d:18:52:0f:cb:
                    c2:d3:a8:17:c8:95:01:d7:59:76:b0:bc:2a:dc:18:
                    fe:77:88:32:58:5e:77:50:93:c0:70:06:82:b4:d2:
                    d9:47:46:d5:20:f4:d4:05:a8:1d:4b:be:cb:db:b6:
                    70:39:30:a8:30:c5:84:a0:a8:cb:c2:6a:b4:1a:c9:
                    2c:ec:89:04:0d:61:a4:82:31:c9:7d:c8:53:40:05:
                    f1:e7:d8:b8:6e:1a:aa:b3:ba:60:9d:95:32:d0:d4:
                    f6:83:0a:34:b4:b0:8d:52:a7:a4:af:41:ec:3a:f8:
                    7d:f0:ec:3e:74:d5:43:bb:ec:3c:b9:31:82:ae:b0:
                    f9:ca:e2:f9:ef:70:68:19:d2:78:55:20:6c:8f:d8:
                    55:7c:3a:f4:b4:7a:30:0d:99:46:38:41:ae:e0:44:
                    14:1b:26:d0:aa:73:58:13:71:da:cb:64:87:5f:20:
                    55:99:af:46:be:c1:66:c1:52:23:81:02:a9:c4:b1:
                    5b:3c:bf:8f:e6:6f:3f:e1:45:4e:16:0a:5a:3a:45:
                    9d:ad:aa:45:75:85:22:8b:43:7c:22:e4:9d:cd:0a:
                    d9:e4:ee:f8:0c:6c:0f:d5:03:5a:c4:96:fa:f1:c6:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:72:BA:40:B9:0B:2C:DE:49:01:01:6B:32:FA:FB:CC:74:A9:DA:21
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/B3K6QLkLLN5JAQFrMvr7zHSp2iE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206005

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:a2:14:2f:a0:42:ce:eb:3a:3f:77:8e:6f:c0:17:af:dc:
         a4:20:51:7d:77:85:7b:75:07:bd:09:cb:89:a6:d1:5e:93:2c:
         a3:e9:f7:f2:9d:e0:aa:81:0b:8f:d6:b6:7a:41:30:37:6f:38:
         d4:f6:a6:79:d0:58:f6:4f:12:a7:46:58:c1:8e:e8:4d:1f:2d:
         8b:f1:db:e1:d5:81:81:ab:93:6c:54:6a:7e:6c:3e:d6:b5:0d:
         e9:0f:e3:01:56:15:be:2c:22:79:79:eb:6c:9f:b2:48:13:4b:
         b5:18:f8:bb:b1:d6:ca:60:7c:cc:fd:67:2f:11:f3:f8:c9:d2:
         33:b7:65:fb:e3:c3:e5:57:33:dd:71:14:d6:94:1b:6f:77:a5:
         2e:e7:d3:bb:9b:ad:b7:2e:78:7b:ed:db:13:fa:aa:a5:8d:f2:
         8f:a6:03:04:40:e6:42:54:d9:bd:ed:14:8c:0d:c9:b7:a1:20:
         1a:04:5b:5a:41:85:6c:bd:c8:96:ac:2b:7a:28:c1:23:37:42:
         3b:9e:bb:68:c6:99:8b:be:5d:6d:7c:a8:66:9c:6e:29:32:84:
         84:02:8e:82:e1:c5:95:76:21:b8:04:3f:eb:b3:94:92:4b:8d:
         12:b3:a0:c6:38:28:1e:48:f3:c5:68:a4:6d:2e:a3:ed:4f:cf:
         c7:ec:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:12 2026 by rpki-client