Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IvvxxS0ZVHvvnEFDyEfRS7De5aw.asa
File:                     IvvxxS0ZVHvvnEFDyEfRS7De5aw.asa (raw, json)
Hash identifier:          3v5Rz+iFEf4mNQ37sHeqB1br0vNVOOi7NR/YBjm0Rgw=
Subject key identifier:   22:FB:F1:C5:2D:19:54:7B:EF:9C:41:43:C8:47:D1:4B:B0:DE:E5:AC
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E41342A8F1EB6DB14935E741EB4F2A9B6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IvvxxS0ZVHvvnEFDyEfRS7De5aw.asa
Signing time:             Tue 19 May 2026 17:06:38 +0000
ASPA not before:          Tue 19 May 2026 17:06:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206085
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:2a:8f:1e:b6:db:14:93:5e:74:1e:b4:f2:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22fbf1c52d19547bef9c4143c847d14bb0dee5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:88:a6:60:5c:72:e8:c5:57:41:49:05:16:
                    ab:68:80:5f:d4:40:2f:ea:35:a9:65:95:57:5c:69:
                    5a:95:3e:38:2d:0f:16:65:69:0f:0e:6c:78:fb:08:
                    8a:ad:b9:3f:ba:6c:4d:35:e8:7d:19:48:b5:8c:98:
                    a2:75:b1:dd:f6:7e:96:9f:47:c3:8c:23:f3:3c:df:
                    d9:77:a4:1a:eb:d1:4e:00:3d:af:a3:8e:c9:65:a6:
                    c4:fc:98:9e:98:61:5b:4d:c3:e5:18:b9:80:59:a8:
                    90:a6:ce:9c:be:0b:ce:94:af:59:40:99:c0:99:88:
                    90:45:5f:36:29:b5:35:2b:50:f7:9a:e5:e7:08:ac:
                    84:0c:d7:86:2b:d0:f9:4c:73:c4:f6:c7:fe:fa:02:
                    2d:11:be:78:45:e3:db:d7:97:74:98:66:c8:63:95:
                    57:5d:f1:8c:56:5b:59:21:34:ec:1e:0d:2e:43:1d:
                    46:d4:10:c7:85:fd:0e:22:a9:f3:ea:94:a8:c9:ed:
                    51:25:a6:c0:04:87:78:6b:f4:c5:1f:41:14:cc:8b:
                    c0:6d:75:9a:c1:e4:c9:3d:3c:a0:50:ad:fd:1c:70:
                    4d:ac:9c:ee:43:40:03:89:f6:4f:fa:52:e6:d8:0e:
                    ed:ef:90:f2:77:39:57:88:4e:d4:17:f7:2e:64:e0:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:F1:C5:2D:19:54:7B:EF:9C:41:43:C8:47:D1:4B:B0:DE:E5:AC
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IvvxxS0ZVHvvnEFDyEfRS7De5aw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206085

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:64:8b:b2:09:7e:6c:37:1d:4d:8b:3c:7f:3a:cf:e0:7a:
         4d:a2:0c:07:76:1a:b8:72:dd:cb:b5:5d:bf:bf:71:5a:c1:09:
         c6:9f:2c:8e:b3:dd:df:35:ee:02:d0:fc:64:b9:70:9f:e2:44:
         a5:e7:5d:a6:fe:69:ed:87:17:76:49:28:2f:8e:97:f3:8d:37:
         96:3a:e6:0d:d2:17:35:2f:fb:28:d2:9e:72:76:9e:7b:4e:5c:
         f3:bd:1a:ff:bb:cf:e8:15:10:89:e4:e2:39:68:f1:9b:60:4e:
         d3:1a:f1:3f:1f:21:c5:c6:d9:be:5b:18:3d:23:e2:e6:d4:fd:
         7d:e7:db:2f:5c:a7:d0:ba:5d:8c:20:ca:bd:9d:05:e6:9f:55:
         ac:38:60:10:72:ee:24:5c:41:64:20:e9:05:24:7d:b0:6d:59:
         c6:29:89:36:7b:d2:fb:f0:21:3a:15:74:af:40:22:21:a0:52:
         f1:58:21:3f:c6:a5:1a:dd:53:d9:96:53:0c:4f:d5:d0:01:0b:
         9b:06:aa:54:9c:21:19:74:cf:78:9d:31:94:c7:3e:2e:5f:81:
         69:0c:54:ab:36:95:c8:7d:86:a3:cd:97:71:c1:1c:a2:cf:43:
         6f:5d:86:8e:63:e6:22:b4:97:a8:7d:87:07:c0:d1:31:9a:77:
         20:2a:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:52 2026 by rpki-client