Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/KZelp-cIjfxwQfAfwP-qpWLMy5U.asa
File:                     KZelp-cIjfxwQfAfwP-qpWLMy5U.asa (raw, json)
Hash identifier:          zEq9WHZwvyy7MwDFzcPxwHiqaL0zhTnQYzzjSDeWXiQ=
Subject key identifier:   29:97:A5:A7:E7:08:8D:FC:70:41:F0:1F:C0:FF:AA:A5:62:CC:CB:95
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019CB4936E561C56649DCE847E5F2CC018F4
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/KZelp-cIjfxwQfAfwP-qpWLMy5U.asa
Signing time:             Tue 03 Mar 2026 16:41:26 +0000
ASPA not before:          Tue 03 Mar 2026 16:41:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206604
Providers:                AS: 8772
                          AS: 29632
                          AS: 201269
                          AS: 203534
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b4:93:6e:56:1c:56:64:9d:ce:84:7e:5f:2c:c0:18:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Mar  3 16:41:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2997a5a7e7088dfc7041f01fc0ffaaa562cccb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:4c:c7:8d:5e:f2:48:ed:eb:25:09:9b:8a:
                    22:b5:6d:36:30:f8:63:d1:0e:56:11:9c:89:24:44:
                    25:c9:73:46:47:27:54:42:1b:a4:a7:07:08:45:00:
                    68:b4:59:f5:65:84:b3:53:0f:12:54:8b:c8:96:d6:
                    72:a5:30:4d:09:4b:36:11:5b:6d:41:26:96:d8:47:
                    17:be:4b:3c:99:fe:4e:45:7e:78:2c:4b:32:42:bd:
                    a7:3b:2a:d6:cc:48:08:43:9f:8a:42:05:b1:5a:52:
                    7b:c9:44:93:77:f3:07:3e:6e:d5:72:50:82:23:51:
                    6a:c1:f6:93:f1:b5:2e:de:3b:c4:25:e2:99:1b:41:
                    4c:f5:91:bc:42:19:06:6b:57:ba:94:67:db:ee:11:
                    09:29:ff:16:84:8f:40:66:da:53:2c:ca:78:21:f9:
                    d0:4e:14:7d:62:3f:8f:cb:99:81:0d:dc:56:d8:54:
                    38:50:5f:0b:4d:fc:10:e7:07:8d:c8:b1:ac:e8:19:
                    2a:08:2b:f2:a2:5d:1b:ba:ca:94:ae:1c:29:4e:b5:
                    08:0b:9f:a7:3d:bb:89:02:94:fb:9d:8b:85:4c:98:
                    84:1b:bb:69:04:70:3e:74:08:da:46:dd:ef:f3:fc:
                    ff:4e:ae:c6:eb:f4:ea:88:95:4e:1f:09:a3:e7:7c:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:97:A5:A7:E7:08:8D:FC:70:41:F0:1F:C0:FF:AA:A5:62:CC:CB:95
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/KZelp-cIjfxwQfAfwP-qpWLMy5U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:f7:ea:99:21:5e:ee:0a:e7:e9:42:d4:ef:f4:fa:4b:b8:
         82:e9:a8:92:97:29:11:f1:49:90:05:38:52:6d:4b:a8:60:35:
         d7:1f:19:7f:5c:6c:03:cb:12:6d:09:7f:96:c4:dc:94:1f:42:
         e3:17:16:71:22:5f:1a:59:ec:17:bf:d7:2b:a9:9f:58:ca:10:
         1f:2e:57:3c:9b:09:e0:e1:5b:5a:d2:41:95:2a:b2:b9:51:5a:
         ea:bf:e0:95:0c:bf:ef:b0:a6:b7:19:cf:e3:c9:d6:ff:84:a4:
         3b:33:09:0c:a9:aa:2c:35:01:21:99:d2:07:e6:fc:6b:eb:01:
         80:14:c3:5d:9f:e7:db:ef:cb:5a:16:06:ae:bb:bc:c5:52:bc:
         3e:80:80:cb:bd:fd:cf:9b:7e:a1:87:86:08:8b:05:62:17:a9:
         d8:5d:97:b1:5c:4f:b3:dc:2f:22:95:3b:53:78:1f:0d:4e:44:
         45:ba:f3:29:67:53:48:91:b5:bc:ae:06:ea:ab:6d:d0:02:84:
         69:94:71:b4:00:5a:c3:8b:51:47:e0:25:37:8d:10:f4:33:fe:
         78:84:e3:fa:b2:23:66:78:87:91:c8:48:8b:ad:35:d1:12:ff:
         ac:6f:f7:b0:c3:14:3b:93:cc:c0:42:7a:8f:59:4c:8f:92:30:
         ba:d4:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 08:37:34 2026 by rpki-client