Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K16GDTT90dcYA0KDmYrgj9f7A3Q.asa
File:                     K16GDTT90dcYA0KDmYrgj9f7A3Q.asa (raw, json)
Hash identifier:          zufSbl9/0YAcbuUzVNel+GNv3HpWrqPG7X1707v8sjo=
Subject key identifier:   2B:5E:86:0D:34:FD:D1:D7:18:03:42:83:99:8A:E0:8F:D7:FB:03:74
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E413429680557E222F0BA67E77516A0CD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K16GDTT90dcYA0KDmYrgj9f7A3Q.asa
Signing time:             Tue 19 May 2026 17:06:37 +0000
ASPA not before:          Tue 19 May 2026 17:06:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206017
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:29:68:05:57:e2:22:f0:ba:67:e7:75:16:a0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2b5e860d34fdd1d718034283998ae08fd7fb0374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:66:ec:e6:4b:7f:7a:e9:72:88:7e:b9:07:
                    58:c1:fd:84:8c:78:97:ed:37:7d:74:a5:6e:6a:3b:
                    d7:c0:1f:44:5f:93:12:85:99:b7:f6:48:d0:ba:27:
                    d8:20:52:67:2c:a2:11:5a:c5:70:2a:bb:df:86:73:
                    4d:21:8e:dc:88:83:ff:0c:f1:41:fe:9b:f0:1b:5a:
                    59:73:a0:e3:ab:c8:33:36:33:38:7f:22:73:e9:0c:
                    cf:52:b9:b4:db:c2:5c:0c:62:07:e8:48:19:cf:2e:
                    b6:13:19:aa:4e:d0:3e:d5:11:53:61:88:46:62:7e:
                    6a:cc:af:7c:dc:73:bb:83:35:3a:d6:0d:08:e1:68:
                    ce:20:1a:43:5f:6e:af:0e:71:94:5b:60:b1:9a:c0:
                    1e:eb:b7:b6:a8:a1:bf:87:2d:dc:56:c7:aa:cd:11:
                    4b:df:90:ce:02:21:2d:04:49:75:72:30:e6:51:54:
                    07:c3:d6:15:ae:e8:77:0b:46:ab:ae:3d:02:06:f1:
                    76:ae:3f:21:7e:c5:37:44:6e:05:ce:9a:35:42:18:
                    70:a9:5e:d7:70:4b:84:28:56:80:d4:b9:9f:cd:45:
                    7a:1e:85:6f:6b:0b:ba:8d:e5:dc:e1:e3:a2:97:b6:
                    00:a7:ed:8b:8d:5d:28:55:2a:05:cf:54:c7:d5:3e:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:86:0D:34:FD:D1:D7:18:03:42:83:99:8A:E0:8F:D7:FB:03:74
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K16GDTT90dcYA0KDmYrgj9f7A3Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206017

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:10:2e:b5:66:c0:62:94:2c:72:1b:00:90:7d:f8:6e:2b:
         fb:1d:66:34:04:56:cd:b2:da:dd:d8:8b:2c:2c:11:4d:ed:fb:
         44:63:7e:3b:ab:7a:26:69:89:d1:c5:7d:ad:54:ac:b8:a0:ad:
         48:c5:97:b5:f2:90:55:ba:36:3f:36:8d:2e:f8:b4:7a:3a:ea:
         e4:bc:a0:57:1b:8e:f3:34:46:7a:ce:81:d9:29:f1:9e:7e:b3:
         2e:a5:ee:8e:f5:b8:62:4b:f7:51:64:98:1f:8f:ad:9b:3e:48:
         a4:b5:78:b2:ff:1d:79:a4:2f:34:71:12:a1:65:96:0a:72:f3:
         a3:69:77:e3:cb:d9:b3:5d:08:5e:11:9b:ef:34:64:65:f0:ac:
         82:2f:0c:ae:56:02:18:1a:be:7b:cf:02:a9:27:37:86:63:4d:
         f2:78:d1:ba:fb:28:b0:dd:3d:fe:8e:a8:44:9d:ac:1a:80:53:
         a7:fb:be:25:c4:2a:44:61:6c:c7:3a:65:14:ba:0f:f5:43:7f:
         9b:d6:65:76:87:ea:c9:f6:6e:8e:44:d3:d0:50:1a:38:ff:a7:
         0a:1c:4f:a2:dd:50:75:c1:2a:a0:05:32:42:31:89:ce:fb:77:
         d5:aa:5c:23:f3:3e:2c:16:7d:75:f5:bd:9f:0b:ae:a5:a0:af:
         1c:87:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:42 2026 by rpki-client