Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/bvcW9C77biAqAwCABs7ccm3YctM.asa
File:                     bvcW9C77biAqAwCABs7ccm3YctM.asa (raw, json)
Hash identifier:          amxmB2iLuW5f4DLf7tIdU00/H+pNIK2yozg2NDZwG0w=
Subject key identifier:   6E:F7:16:F4:2E:FB:6E:20:2A:03:00:80:06:CE:DC:72:6D:D8:72:D3
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       01A0D9C09E401AEBBFCEFB272FBC79D7EEFC
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/bvcW9C77biAqAwCABs7ccm3YctM.asa
Signing time:             Fri 25 Sep 2026 18:07:54 +0000
ASPA not before:          Fri 25 Sep 2026 18:07:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206260
Providers:                AS: 2116
                          AS: 6939
                          AS: 34087
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:c0:9e:40:1a:eb:bf:ce:fb:27:2f:bc:79:d7:ee:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Sep 25 18:07:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ef716f42efb6e202a03008006cedc726dd872d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:80:60:93:ca:cc:e3:2f:8d:fa:30:57:aa:
                    63:5d:24:1c:0d:db:d4:26:4f:dd:e1:31:d9:cf:47:
                    64:8b:e6:64:d4:e3:6b:dc:31:58:39:86:fd:2e:a6:
                    7f:6d:71:ac:e7:8c:ef:a5:28:85:2f:e0:c2:ed:5d:
                    56:85:f3:48:b9:ef:6f:f9:8c:7f:c7:48:da:25:d2:
                    f7:66:db:8f:b3:ed:93:ea:77:69:39:e4:cf:01:31:
                    aa:91:06:06:a2:82:59:fb:6f:50:c2:ea:b0:1d:7c:
                    3d:e4:84:f0:b4:c6:5b:ac:13:ad:43:e4:c3:80:c9:
                    d1:53:e6:ff:9a:93:42:a5:d1:b4:29:c6:ec:a4:07:
                    78:74:c9:70:57:de:73:58:18:53:c6:b0:55:f8:4f:
                    b1:ed:5f:a1:28:76:a9:9c:0a:cd:34:5c:2b:90:1f:
                    4b:59:11:7b:6e:c8:66:c5:63:fb:8c:8b:a7:d6:c3:
                    97:95:d6:b3:9f:92:1e:21:39:87:b0:a3:51:90:44:
                    a1:da:fc:a3:06:55:70:67:b8:8a:68:63:14:25:ff:
                    c0:38:3a:67:2e:ca:83:c1:fd:fc:95:92:d5:06:b8:
                    14:8a:ec:d8:91:07:18:1c:65:9a:f1:55:13:ef:26:
                    bd:f2:c4:30:b8:11:7a:b4:73:45:b3:38:8b:ec:8d:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F7:16:F4:2E:FB:6E:20:2A:03:00:80:06:CE:DC:72:6D:D8:72:D3
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/bvcW9C77biAqAwCABs7ccm3YctM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206260

    Signature Algorithm: sha256WithRSAEncryption
         60:68:d3:5e:cb:a4:f1:08:5b:46:da:a6:b3:c4:61:49:4b:66:
         77:cb:47:2c:73:f2:aa:bf:1f:c4:6d:2e:6d:4e:49:7c:07:37:
         6a:96:78:a9:24:f5:5e:30:df:9b:0b:18:cc:38:25:8d:30:f0:
         5e:5a:a3:b1:df:8d:8a:0a:44:21:f2:aa:80:84:df:c4:52:02:
         17:83:ce:3c:8c:18:4c:c6:21:5c:c3:19:4e:f6:83:bd:a9:36:
         76:1e:ea:b4:21:8b:f8:4f:9f:35:cd:83:98:8e:ed:cf:78:2a:
         1d:ea:d4:a8:70:80:86:78:fd:60:cf:4a:ff:c9:a8:6a:d6:d1:
         b7:0c:d4:ec:6d:dc:d5:fa:de:95:da:4b:c6:89:6c:12:0d:1c:
         23:66:5f:e0:00:63:dd:99:ad:91:88:b9:b4:46:76:fe:82:d5:
         94:16:2e:aa:41:00:e3:7b:6d:6a:60:0c:60:30:75:bf:28:74:
         21:32:ac:d7:5d:0b:a2:44:b7:02:51:06:75:69:c6:a0:67:7d:
         c3:d7:80:78:8c:94:43:27:19:0e:5e:eb:1f:17:9f:49:a5:77:
         ee:1f:59:5b:0f:e4:88:a6:8e:f4:37:68:83:b7:36:65:78:b5:
         62:88:79:28:f3:41:4f:45:77:55:a3:f5:a4:a1:d3:66:98:6a:
         a8:38:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:08:46 2026 by rpki-client