Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/6ktBmS6SHlobAW5cvJeOvutHtZs.asa
File:                     6ktBmS6SHlobAW5cvJeOvutHtZs.asa (raw, json)
Hash identifier:          7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=
Subject key identifier:   EA:4B:41:99:2E:92:1E:5A:1B:01:6E:5C:BC:97:8E:BE:EB:47:B5:9B
Certificate issuer:       /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial:       019E24952D2086709C9668DD4B0D53FEDA88
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/6ktBmS6SHlobAW5cvJeOvutHtZs.asa
Signing time:             Thu 14 May 2026 03:43:36 +0000
ASPA not before:          Thu 14 May 2026 03:43:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213653
Providers:                AS: 6762
                          AS: 8244
                          AS: 31263
                          AS: 50196
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:95:2d:20:86:70:9c:96:68:dd:4b:0d:53:fe:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
        Validity
            Not Before: May 14 03:43:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea4b41992e921e5a1b016e5cbc978ebeeb47b59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:87:7c:53:d0:71:54:ac:38:d9:65:25:e1:
                    70:87:88:79:88:ca:ca:f7:22:b9:0f:1f:4c:d7:98:
                    80:65:c1:c4:74:52:dd:eb:76:6e:c0:bd:02:44:13:
                    dd:0c:81:64:9b:ca:85:d9:68:0b:10:5a:ce:64:4b:
                    43:ce:ae:91:86:07:61:e0:64:8f:9a:e8:ae:a0:41:
                    bb:15:1c:99:3f:e5:6e:51:79:36:5c:63:e5:a4:75:
                    16:66:ca:c9:55:75:8a:2e:61:41:d8:eb:de:c5:6b:
                    85:28:09:3f:b7:d9:51:91:e0:f5:f2:a8:60:ed:12:
                    99:b2:72:9e:cc:08:b9:92:cf:d0:61:65:f4:b7:42:
                    fa:13:57:21:a5:b8:4a:a8:49:ad:32:cc:e2:6c:80:
                    d1:03:fe:95:f5:3a:ea:a9:ad:33:8a:05:c3:31:4c:
                    dc:2c:23:c3:82:0a:8d:81:96:d3:10:46:4c:87:9c:
                    0e:5d:48:3c:9f:12:14:8a:5c:f4:44:b9:b8:eb:99:
                    59:e7:7e:00:ad:b2:36:b9:91:3a:8a:ce:15:1f:80:
                    ec:02:82:2e:b5:97:2a:74:0f:0c:a0:ad:a7:f7:45:
                    cf:ce:0c:63:48:ef:33:ea:9e:42:d3:df:7c:45:27:
                    51:5b:9c:7d:ec:e7:7d:be:a0:9f:d7:c7:b2:e7:bc:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4B:41:99:2E:92:1E:5A:1B:01:6E:5C:BC:97:8E:BE:EB:47:B5:9B
            X509v3 Authority Key Identifier:
                keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/6ktBmS6SHlobAW5cvJeOvutHtZs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213653

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:da:49:68:9c:79:99:fe:30:05:d7:08:ae:77:4f:d0:7f:
         55:26:54:ed:43:fe:fc:05:69:b9:5f:28:ec:fc:a4:de:ce:a0:
         30:f3:d4:5d:ca:9e:ea:b0:6f:1d:c5:f6:15:b1:73:0f:19:2e:
         4b:33:2e:7c:99:1a:a1:47:03:45:c1:08:eb:34:f2:05:47:28:
         a4:19:d1:a9:ba:8f:79:e6:22:ad:8f:58:00:fd:c2:8a:5e:c2:
         48:21:3f:af:db:c2:94:45:09:e5:9d:eb:27:fb:2b:10:8f:88:
         55:da:ab:a7:74:71:85:d9:21:5b:46:aa:0a:12:f1:fa:d6:fe:
         05:a9:84:4f:25:c6:41:d0:90:3f:44:48:f3:1f:38:a6:f5:b3:
         ed:d0:f8:0b:97:bd:14:cb:6b:de:b2:71:0e:c8:5d:43:e5:04:
         9e:ab:e2:bd:2a:d7:61:b5:7a:3d:1d:89:b0:39:ca:b5:f3:59:
         b1:9a:5e:77:5e:f9:da:a4:4e:96:cc:0c:8e:c2:01:13:e1:68:
         e1:73:49:c2:a6:51:39:d3:f9:ad:e9:9b:aa:ff:89:b8:5f:da:
         ad:b0:d7:e1:92:08:38:95:29:7b:7a:53:c8:be:23:6a:9f:42:
         07:14:01:a0:13:56:b5:eb:32:b0:19:af:03:9c:39:be:c7:3f:
         9b:98:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:54 2026 by rpki-client