Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/aPEEK06EfNCr0cJb7givHCwtEak.asa
File:                     aPEEK06EfNCr0cJb7givHCwtEak.asa (raw, json)
Hash identifier:          CDA1BkxbdJE6exxZg3QehIOpHFkCW71hNld89351GsI=
Subject key identifier:   68:F1:04:2B:4E:84:7C:D0:AB:D1:C2:5B:EE:08:AF:1C:2C:2D:11:A9
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       01A1AB81AADA6A470ED016099E47385C397D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/aPEEK06EfNCr0cJb7givHCwtEak.asa
Signing time:             Thu 05 Nov 2026 11:39:24 +0000
ASPA not before:          Thu 05 Nov 2026 11:39:24 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62246
Providers:                AS: 174
                          AS: 3204
                          AS: 5580
                          AS: 6204
                          AS: 6939
                          AS: 16276
                          AS: 17433
                          AS: 27523
                          AS: 44324
                          AS: 49304
                          AS: 51087
                          AS: 53808
                          AS: 58807
                          AS: 199310
                          AS: 211392
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Nov 2026 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:81:aa:da:6a:47:0e:d0:16:09:9e:47:38:5c:39:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Nov  5 11:39:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68f1042b4e847cd0abd1c25bee08af1c2c2d11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:bb:94:5f:b8:c1:a5:47:65:a8:a0:f3:36:
                    fc:15:d0:f9:f9:12:08:0e:59:ad:ce:e8:bd:75:98:
                    2e:40:2e:8f:76:13:11:a4:43:5f:1a:57:28:d9:e0:
                    5e:af:e6:aa:5b:1f:37:39:70:c1:21:6d:6f:ca:96:
                    33:cc:d8:29:7f:a1:4b:ec:94:60:c7:44:6c:5c:95:
                    90:13:7c:e6:8f:0e:e5:f5:2c:ba:0b:a0:f4:10:44:
                    be:60:88:7f:03:c1:61:92:98:f5:83:65:bd:12:2d:
                    bf:76:f0:df:27:e6:72:34:a4:f6:59:47:cc:e8:91:
                    08:84:23:44:56:98:8e:ed:cc:a1:bb:d2:25:96:27:
                    85:ee:b2:28:83:e0:ed:bf:fc:c2:05:e0:0c:b5:12:
                    29:21:df:75:1d:85:a6:b3:8d:0b:d0:03:94:a1:b5:
                    e1:16:af:e0:99:2f:c8:d4:d5:9c:a5:32:a8:b3:61:
                    59:20:be:03:0c:da:b9:2d:49:7d:6a:93:f6:7a:a3:
                    46:05:b3:23:ec:1f:e8:dd:45:63:aa:5f:29:62:b5:
                    dd:42:28:3b:95:72:9f:f2:f1:bf:11:63:3d:ba:32:
                    75:9a:32:08:65:7a:a7:6d:07:29:0c:cf:d5:eb:67:
                    d0:ee:58:f8:d2:b0:ea:73:0b:99:d7:a6:a5:eb:ed:
                    76:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:04:2B:4E:84:7C:D0:AB:D1:C2:5B:EE:08:AF:1C:2C:2D:11:A9
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/aPEEK06EfNCr0cJb7givHCwtEak.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62246

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:4c:c7:15:ca:5d:61:dd:6d:f0:0e:bb:8f:8a:c6:87:55:
         41:c2:dc:b5:fa:ba:87:7e:a7:be:6c:9f:3a:2c:61:47:1d:fa:
         35:59:fa:36:3c:ba:fa:b5:d6:14:1b:8d:03:ce:88:3b:f0:35:
         8a:02:7b:7b:e7:47:58:a4:ba:19:57:ed:a2:a3:96:81:ad:fe:
         78:c7:c4:98:ee:ac:ad:7b:a6:df:17:a4:4a:22:d4:71:ad:3b:
         53:07:82:c3:8a:97:76:9d:23:58:a5:c1:95:89:6c:72:1f:99:
         d2:45:5a:ee:4e:15:fa:51:5f:13:28:92:69:03:93:8f:2d:22:
         4a:29:46:bd:ad:3c:b1:cf:34:19:fe:ac:4c:a5:dc:7c:08:fd:
         74:38:0b:67:a5:7a:54:a9:62:52:d5:2d:16:ee:10:7a:02:e2:
         cd:9b:1e:00:1a:8c:6b:c1:e5:92:db:bf:68:a6:86:dc:00:15:
         7f:a8:fe:de:e1:ba:13:ef:35:71:ee:89:3d:7f:65:ea:81:ea:
         af:81:8f:df:db:2e:f0:ec:58:1b:0e:11:f0:4a:92:55:6f:0a:
         3f:67:17:dd:92:46:5c:15:84:12:88:e3:9d:e6:28:25:ee:fe:
         8d:f0:19:43:a2:8b:23:8c:fd:ab:27:e6:c4:29:60:b6:f5:b2:
         a2:a2:51:ec
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaGrgaraakcO0BYJnkc4XDl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjYxMTA1MTEzOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGYxMDQyYjRlODQ3Y2QwYWJkMWMyNWJlZTA4YWYxYzJjMmQxMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLa7lF+4waVHZaig8zb8FdD5+RII
Dlmtzui9dZguQC6PdhMRpENfGlco2eBer+aqWx83OXDBIW1vypYzzNgpf6FL7JRg
x0RsXJWQE3zmjw7l9Sy6C6D0EES+YIh/A8Fhkpj1g2W9Ei2/dvDfJ+ZyNKT2WUfM
6JEIhCNEVpiO7cyhu9IllieF7rIog+Dtv/zCBeAMtRIpId91HYWms40L0AOUobXh
Fq/gmS/I1NWcpTKos2FZIL4DDNq5LUl9apP2eqNGBbMj7B/o3UVjql8pYrXdQig7
lXKf8vG/EWM9ujJ1mjIIZXqnbQcpDM/V62fQ7lj40rDqcwuZ16al6+12VQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGjxBCtOhHzQq9HCW+4IrxwsLRGpMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvYVBFRUswNkVmTkNyMGNKYjdnaXZIQ3d0RWFrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzJjANBgkqhkiG
9w0BAQsFAAOCAQEAZ3pMxxXKXWHdbfAOu4+KxodVQcLctfq6h36nvmyfOixhRx36
NVn6Njy6+rXWFBuNA86IO/A1igJ7e+dHWKS6GVftoqOWga3+eMfEmO6srXum3xek
SiLUca07UweCw4qXdp0jWKXBlYlsch+Z0kVa7k4V+lFfEyiSaQOTjy0iSilGva08
sc80Gf6sTKXcfAj9dDgLZ6V6VKliUtUtFu4QegLizZseABqMa8Hlktu/aKaG3AAV
f6j+3uG6E+81ce6JPX9l6oHqr4GP39su8OxYGw4R8EqSVW8KP2cX3ZJGXBWEEojj
neYoJe7+jfAZQ6KLI4z9qyfmxClgtvWyoqJR7A==
-----END CERTIFICATE-----
Generated at Mon Nov 9 07:19:54 2026 by rpki-client