Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/6RH4Xhf3454zmP7SfNkGXBdyqVs.asa
File:                     6RH4Xhf3454zmP7SfNkGXBdyqVs.asa (raw, json)
Hash identifier:          aTVDJZG9k3QRu4E3b31eQbxAuvRrjFaFwYD4QvfkoTc=
Subject key identifier:   E9:11:F8:5E:17:F7:E3:9E:33:98:FE:D2:7C:D9:06:5C:17:72:A9:5B
Certificate issuer:       /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial:       019CC476348F2EA3E5D4A639D73F66F3CF11
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/6RH4Xhf3454zmP7SfNkGXBdyqVs.asa
Signing time:             Fri 06 Mar 2026 18:43:26 +0000
ASPA not before:          Fri 06 Mar 2026 18:43:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206420
Providers:                AS: 207187
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:76:34:8f:2e:a3:e5:d4:a6:39:d7:3f:66:f3:cf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
        Validity
            Not Before: Mar  6 18:43:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e911f85e17f7e39e3398fed27cd9065c1772a95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dc:6c:f7:a8:a3:d2:7f:e3:7d:0b:bd:b8:04:
                    72:7b:09:2a:ab:dc:aa:53:98:65:df:3b:8b:f4:47:
                    52:e7:84:95:ad:50:16:30:e8:5e:a4:9b:a7:e2:77:
                    24:10:82:f7:e3:c2:a5:df:7a:e7:ad:c7:e9:0d:d5:
                    ed:7e:d3:37:b2:53:f9:3c:ec:c7:d7:fb:75:90:c0:
                    d2:d5:6a:e7:34:5d:64:6c:f3:f2:98:32:43:61:8e:
                    2c:86:66:e2:ff:81:11:45:ed:4f:76:16:60:8a:eb:
                    52:69:ed:fe:aa:29:50:84:24:3a:ce:a7:6f:c1:58:
                    f3:75:ae:00:f9:1f:89:ad:00:ad:b8:36:37:48:92:
                    73:94:26:c9:4f:77:6d:ba:c9:59:c5:82:e2:34:19:
                    50:00:4a:8e:2d:ca:0a:3f:c8:36:5a:34:ad:e4:46:
                    23:35:39:90:da:a6:10:94:a5:1c:b5:81:ae:9c:1c:
                    6d:9c:23:05:55:2a:bb:9e:07:ff:ef:4a:d1:81:7e:
                    4f:0d:35:1a:9f:10:3a:9f:e1:19:da:22:42:12:f0:
                    8d:44:4b:1b:f5:fc:b7:79:41:85:ce:b8:36:ff:5e:
                    ee:c1:80:25:0c:77:63:4a:e6:a2:1f:28:89:48:2e:
                    aa:25:d5:6c:a4:6e:c2:68:ad:17:7d:34:27:f3:c6:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:11:F8:5E:17:F7:E3:9E:33:98:FE:D2:7C:D9:06:5C:17:72:A9:5B
            X509v3 Authority Key Identifier:
                keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/6RH4Xhf3454zmP7SfNkGXBdyqVs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206420

    Signature Algorithm: sha256WithRSAEncryption
         52:34:c0:66:0e:35:aa:d7:5e:a5:76:4d:eb:f6:69:45:13:bd:
         e4:e5:7f:db:bb:85:09:67:d6:63:16:ff:fc:8b:a8:06:ec:ba:
         2d:0d:a7:eb:4a:a9:52:b1:72:ee:5c:bc:79:02:93:a9:90:69:
         38:d4:53:5b:85:0c:da:aa:2e:c7:e5:e7:a8:99:d2:57:3b:61:
         3d:c6:e6:5c:eb:87:e9:c0:61:8f:32:6e:b8:b2:f5:c7:63:b6:
         8b:b1:fd:06:1f:c2:6c:96:ac:49:c5:80:08:d8:47:70:09:d7:
         6f:27:d1:f2:b5:bb:b0:c3:0d:35:09:bf:6d:c4:67:5f:17:83:
         6b:2a:78:d3:8a:3b:4b:cb:b3:e6:d5:17:97:1d:20:f3:bd:a6:
         ca:e1:8d:db:21:0e:5d:09:17:03:7f:71:b5:74:b1:e2:28:16:
         35:04:f6:d4:10:66:76:3d:56:cf:62:be:a4:5e:ea:ed:4a:31:
         cd:e4:42:6c:62:09:97:3d:9d:6a:ce:32:7d:7c:58:62:ba:fd:
         e2:d4:ef:84:e0:ab:67:e1:21:98:2f:e9:d7:48:be:e3:53:b1:
         b5:c4:a7:ec:8c:a7:d3:b5:c2:c7:6d:71:aa:b8:61:3c:4c:74:
         84:54:e9:64:71:8e:34:c0:57:ce:96:45:82:99:d5:aa:2d:50:
         c0:70:54:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:10:47 2026 by rpki-client