Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/FS2C_VBFEf7kIZToH4XE2QHA6Zc.asa
File:                     FS2C_VBFEf7kIZToH4XE2QHA6Zc.asa (raw, json)
Hash identifier:          NdI6POHmcq6BNISvr8+tGOmcLG26WCMefRYxUjDZKeM=
Subject key identifier:   15:2D:82:FD:50:45:11:FE:E4:21:94:E8:1F:85:C4:D9:01:C0:E9:97
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       019FD7C44DACF35F7BA7BEB659EF80B3FA8B
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/FS2C_VBFEf7kIZToH4XE2QHA6Zc.asa
Signing time:             Thu 06 Aug 2026 15:49:54 +0000
ASPA not before:          Thu 06 Aug 2026 15:49:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206271
Providers:                AS: 44620
                          AS: 60707
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d7:c4:4d:ac:f3:5f:7b:a7:be:b6:59:ef:80:b3:fa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Aug  6 15:49:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=152d82fd504511fee42194e81f85c4d901c0e997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:3d:36:ae:44:0c:2b:d5:b7:16:29:ab:14:
                    1a:dd:a3:13:27:16:c4:11:38:4f:59:0f:6c:f2:f5:
                    95:ec:eb:8e:f2:dd:6a:d2:5c:c9:07:62:05:0e:64:
                    9e:92:55:22:33:97:35:0e:8e:91:85:80:ad:b7:a2:
                    73:98:78:92:17:23:fc:81:b2:66:1c:4a:07:cd:59:
                    7e:31:10:fb:35:65:67:5f:6f:79:27:8e:c3:f8:fe:
                    16:8a:87:85:72:6c:14:99:b5:c9:2c:8d:3d:ab:d2:
                    06:ce:79:63:3b:57:fd:96:f1:a3:35:74:66:b8:1b:
                    21:c3:ef:c4:d7:6c:7b:21:be:a4:1e:c0:19:97:c5:
                    b4:8c:2f:6a:1f:4c:d0:7c:bb:64:6c:7f:67:83:d4:
                    3a:f3:67:d1:7b:87:19:04:3a:3b:7f:55:6b:30:65:
                    e8:52:88:9e:b1:f9:95:ca:e4:bf:7b:58:e1:77:f7:
                    2a:05:4a:55:4a:9d:20:67:36:4a:0a:e5:da:f2:b7:
                    08:56:9f:d0:73:8d:75:e6:57:10:c5:51:e2:ab:0a:
                    13:aa:1b:42:b8:d8:54:df:0f:db:48:47:f5:e4:5a:
                    65:6b:8c:8e:4c:b3:ee:4d:a6:ff:78:a5:89:38:62:
                    82:d6:d3:54:75:1c:ed:4d:7c:3e:8d:51:69:6e:42:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2D:82:FD:50:45:11:FE:E4:21:94:E8:1F:85:C4:D9:01:C0:E9:97
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/FS2C_VBFEf7kIZToH4XE2QHA6Zc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206271

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:79:57:66:92:bf:9e:cc:c6:39:bd:01:33:e4:a7:94:ca:
         30:26:77:65:8e:05:83:5b:ae:42:04:22:13:a3:ef:8d:2b:83:
         7a:5b:90:75:d4:94:c7:c7:c8:22:94:90:97:a8:3b:bd:29:35:
         64:38:14:16:07:bc:c6:6d:5e:ca:18:bc:be:78:aa:1c:21:e1:
         60:90:50:bd:8e:c4:f3:21:35:1f:2f:65:50:79:5d:85:9e:a9:
         ae:a4:43:17:0b:03:3b:9a:52:ce:bb:82:0f:b0:f5:c7:86:a3:
         06:7d:13:5d:b5:d7:ae:ba:73:21:97:ab:c0:94:41:28:f0:ab:
         1a:ae:a5:8c:d9:63:4b:dd:99:83:6f:a0:1b:5d:7b:de:fd:05:
         08:78:b6:03:b5:6e:f6:84:b8:06:bc:dd:5b:11:85:68:21:e3:
         13:00:e2:98:27:b6:c3:a7:79:b1:bc:87:9b:7f:59:26:e7:96:
         0f:80:8d:b2:5c:1c:12:da:3e:ca:96:62:72:ca:a3:0d:8a:64:
         a5:34:77:51:80:b9:b4:1d:76:48:da:77:9e:48:bd:f7:6c:5e:
         1c:cb:1f:c0:39:48:db:fa:86:96:33:e8:eb:1e:09:a6:c1:c2:
         7f:a4:ce:07:be:81:bb:a3:83:96:1f:3b:cb:7b:76:73:4a:4d:
         57:0d:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:31 2026 by rpki-client