Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HW1lGQqAopXfs3QkPQXShtoWWtk.asa
File:                     HW1lGQqAopXfs3QkPQXShtoWWtk.asa (raw, json)
Hash identifier:          vRLbk2asoioIvIVPpaMYlGR5h95CR6x5vf8oNQ6hucw=
Subject key identifier:   1D:6D:65:19:0A:80:A2:95:DF:B3:74:24:3D:05:D2:86:DA:16:5A:D9
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E41342B549BF66F6424FF6881E6AC7F7F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HW1lGQqAopXfs3QkPQXShtoWWtk.asa
Signing time:             Tue 19 May 2026 17:06:38 +0000
ASPA not before:          Tue 19 May 2026 17:06:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206622
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:2b:54:9b:f6:6f:64:24:ff:68:81:e6:ac:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d6d65190a80a295dfb374243d05d286da165ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:df:c7:89:24:80:b6:ad:5d:7a:fe:e2:8f:
                    3d:78:ad:31:fd:a7:49:67:c2:3c:be:77:c2:73:be:
                    27:39:80:08:7c:af:75:c2:db:18:5c:33:04:29:d2:
                    f2:75:0f:a3:dd:e3:a1:cf:58:26:4e:97:55:3f:67:
                    0f:0d:6e:61:d3:98:47:b1:65:fd:08:68:2b:be:c3:
                    54:f5:30:a2:94:36:31:c6:1f:a9:ff:23:f5:dd:b7:
                    25:03:33:d8:4b:cb:a8:c5:96:56:78:ce:ca:fa:1d:
                    b6:3b:c0:c1:70:ec:59:c7:57:44:21:9b:d3:63:68:
                    90:01:5e:29:ed:79:03:eb:b4:88:4c:7a:dd:6f:d4:
                    b8:57:02:ad:b7:09:59:6c:60:84:b4:d6:0e:b3:69:
                    9b:f6:50:d3:98:2f:bf:dd:d3:5c:9b:76:f0:cc:5d:
                    a6:68:28:60:ae:76:10:d4:09:1c:be:06:04:29:0a:
                    15:a8:70:77:40:b6:93:1d:71:81:7e:d3:d1:2e:ce:
                    5c:36:ba:7e:43:8c:28:aa:54:94:0c:cc:6b:62:a1:
                    b8:d5:7a:0e:27:8c:4e:f6:ed:fe:a2:be:0c:34:26:
                    72:f2:f2:0b:63:9a:22:89:8b:b8:ac:88:0f:12:1f:
                    48:fc:ab:96:16:f9:2f:d4:a7:5d:b5:39:b9:30:ee:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6D:65:19:0A:80:A2:95:DF:B3:74:24:3D:05:D2:86:DA:16:5A:D9
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HW1lGQqAopXfs3QkPQXShtoWWtk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206622

    Signature Algorithm: sha256WithRSAEncryption
         8f:1f:a5:a2:2d:5c:fe:04:3d:e3:b0:b8:2e:36:fc:8f:d8:ae:
         b4:07:5d:ce:c2:6f:78:03:f2:aa:f0:b1:e1:65:55:c0:cf:79:
         cd:bc:a8:48:90:65:63:6d:c8:74:ae:2e:10:d0:8d:78:fc:3c:
         f0:79:5c:36:29:58:ff:52:bb:4f:25:8c:eb:29:10:da:9e:32:
         47:2f:7d:fe:35:e4:c0:08:ff:06:00:ff:0e:80:bb:59:0b:04:
         af:c2:d3:b9:d1:7d:14:30:59:39:71:7d:ef:81:ab:22:86:ab:
         85:af:d6:c6:7b:94:f9:58:05:c3:92:47:0d:59:cf:83:b0:59:
         87:27:fe:a4:91:50:3f:83:88:c3:b4:c8:50:4b:0a:45:54:52:
         af:7a:c9:fc:29:ab:e6:70:2d:62:c8:0b:f4:0e:eb:e6:a7:83:
         51:f3:73:3b:a4:a6:5c:10:14:39:df:79:df:25:d4:b1:e4:1e:
         fd:9b:9f:04:23:73:e9:ab:86:5b:17:84:39:d0:6e:c1:17:6c:
         51:34:84:57:60:d8:a6:3e:a6:82:c7:fe:be:a5:bc:96:68:0e:
         01:94:ca:ce:49:d7:da:e4:c6:91:b8:f4:6e:0b:54:4b:d2:ee:
         fc:e7:ea:2e:82:ca:cb:c8:2d:bd:71:b8:bd:99:88:7f:4f:af:
         72:d5:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:38 2026 by rpki-client