Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PI-abNqW-r8T2EwnUdXpTcNnOqY.asa
File:                     PI-abNqW-r8T2EwnUdXpTcNnOqY.asa (raw, json)
Hash identifier:          bLm0GFK+w/2dnMNCRnozaQUjZK54KSmr/ttlnw0gYk4=
Subject key identifier:   3C:8F:9A:6C:DA:96:FA:BF:13:D8:4C:27:51:D5:E9:4D:C3:67:3A:A6
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E41342BA62611DC626A949398BEC201FB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PI-abNqW-r8T2EwnUdXpTcNnOqY.asa
Signing time:             Tue 19 May 2026 17:06:38 +0000
ASPA not before:          Tue 19 May 2026 17:06:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206847
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:2b:a6:26:11:dc:62:6a:94:93:98:be:c2:01:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c8f9a6cda96fabf13d84c2751d5e94dc3673aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:39:46:51:58:e2:3f:01:e7:04:9d:c2:8f:
                    6a:16:33:95:34:02:ff:03:60:bb:f9:51:08:a3:c2:
                    f0:14:0a:9e:b2:b7:74:f4:f6:3e:27:70:bf:5c:4e:
                    d7:54:b1:43:ee:4a:ae:d3:98:27:50:0e:2a:2d:6c:
                    66:ab:7a:8e:2d:f2:36:1c:71:f1:0a:7c:67:27:af:
                    82:1d:14:31:d4:99:2e:a3:a7:01:da:85:a3:0a:96:
                    93:a5:23:6c:6c:69:39:d2:f6:e0:5e:88:ef:28:37:
                    56:b7:75:70:af:82:7d:a3:0c:79:8d:17:d6:0d:02:
                    cd:29:26:7c:13:d8:e9:fe:5e:f8:49:bc:fa:73:6c:
                    9c:4b:8c:0f:45:a2:6b:ec:3f:b0:46:b2:18:8b:d6:
                    80:83:69:66:57:3b:d4:92:cc:6c:57:c9:f1:4b:12:
                    7e:0f:dc:85:10:1e:df:58:91:5f:e6:0c:8d:40:0b:
                    24:6a:fe:8c:67:f7:ab:e0:da:90:b8:77:34:43:ad:
                    1b:9d:04:34:34:59:94:fd:44:a3:98:53:44:cd:cf:
                    93:89:a8:08:57:41:33:95:c6:4d:49:75:0e:10:43:
                    8c:c0:d4:d9:13:d0:d1:ba:51:23:b1:69:11:32:7e:
                    8b:fe:63:1a:6d:6e:8f:18:b9:3c:db:26:c8:75:81:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8F:9A:6C:DA:96:FA:BF:13:D8:4C:27:51:D5:E9:4D:C3:67:3A:A6
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PI-abNqW-r8T2EwnUdXpTcNnOqY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206847

    Signature Algorithm: sha256WithRSAEncryption
         65:88:ec:19:4c:70:0f:64:49:8a:e8:f3:14:bb:99:cf:e9:f0:
         87:ff:08:54:b5:60:b4:d7:4f:98:f9:9d:0a:48:79:92:b9:21:
         5f:82:bd:37:d7:9e:41:85:72:a7:a1:5e:c4:8e:ad:b2:17:46:
         2e:dd:27:d9:b6:2d:10:c7:cc:a4:39:fa:0d:e0:05:59:2c:06:
         12:60:04:f8:5c:68:50:07:af:ae:e8:0a:05:37:64:59:c7:4a:
         54:f1:f7:3f:ab:05:2a:7b:2b:9a:58:f1:ee:bd:2c:93:48:5f:
         e1:cc:3d:68:f6:3c:6e:f4:5b:9a:54:df:9d:c5:a9:f4:cf:dc:
         02:81:44:80:d5:1b:5e:2f:87:89:78:de:a7:92:36:71:e4:5e:
         9b:dc:a2:e1:48:b0:19:9b:2d:43:3c:26:e4:35:82:9c:36:5d:
         0e:c7:e9:f6:96:cf:83:b4:c8:7a:a5:33:52:de:72:c7:6f:62:
         7f:87:3b:df:2c:e1:54:4c:5b:7d:c4:2a:f3:c3:ac:d1:4a:a7:
         82:50:46:f1:59:b7:de:69:3d:45:13:88:69:88:81:3a:55:a1:
         b3:3a:f3:a6:23:c9:ac:73:6a:c8:b2:70:3c:fd:32:be:8c:d4:
         b0:32:5c:dd:10:fd:e5:a7:54:58:87:13:38:b9:0d:95:d0:81:
         22:08:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:55 2026 by rpki-client