Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bVyEsAAvKQpoixKzifb7SAIwq1U.asa
File:                     bVyEsAAvKQpoixKzifb7SAIwq1U.asa (raw, json)
Hash identifier:          Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=
Subject key identifier:   6D:5C:84:B0:00:2F:29:0A:68:8B:12:B3:89:F6:FB:48:02:30:AB:55
Certificate issuer:       /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial:       019CD37DEBFF6BB52B221D4C37C356CE8920
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bVyEsAAvKQpoixKzifb7SAIwq1U.asa
Signing time:             Mon 09 Mar 2026 16:46:10 +0000
ASPA not before:          Mon 09 Mar 2026 16:46:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203462
Providers:                AS: 1299
                          AS: 6762
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d3:7d:eb:ff:6b:b5:2b:22:1d:4c:37:c3:56:ce:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
        Validity
            Not Before: Mar  9 16:46:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d5c84b0002f290a688b12b389f6fb480230ab55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:5e:20:b6:dc:34:2f:41:1c:17:24:d9:09:
                    21:2c:51:72:65:7b:15:0f:9f:68:97:84:58:06:c1:
                    5b:b4:ea:2b:8a:0c:ef:d7:f9:ef:a1:7b:d1:8a:04:
                    fd:84:c6:2f:f4:54:de:d6:51:ad:27:45:37:8f:ee:
                    ac:fa:32:68:0d:72:0e:ac:5c:e7:34:76:e0:9e:24:
                    48:e8:93:4a:b8:67:8d:5a:14:32:28:47:36:84:e4:
                    2f:32:68:70:f2:bb:5d:dd:4a:a9:8c:b6:4e:d9:07:
                    7b:91:d9:57:e5:94:b1:df:e8:d3:35:50:b9:5d:8e:
                    f4:a7:32:0d:ce:48:35:39:d6:7b:bb:63:7f:2a:cf:
                    25:6e:1c:9f:68:bc:87:54:d6:ab:66:bb:68:76:bd:
                    ec:58:b9:6c:03:8a:78:15:b0:bc:78:2a:d9:24:d4:
                    ca:ed:76:a4:9d:d9:a2:17:fc:c6:70:94:84:ee:e6:
                    b9:16:88:9d:94:0e:6c:46:b4:d7:f6:29:be:30:6a:
                    cb:fd:67:de:cb:89:43:4f:72:6f:fd:9c:89:47:b1:
                    bf:c5:01:a4:ea:bd:16:5d:f1:bd:dd:c0:47:7f:bc:
                    28:49:8e:10:b5:9a:ff:60:4c:b6:c6:21:a8:f4:c9:
                    cc:79:ea:09:b7:cb:8a:3c:ba:11:a4:5e:b2:d8:cd:
                    54:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:84:B0:00:2F:29:0A:68:8B:12:B3:89:F6:FB:48:02:30:AB:55
            X509v3 Authority Key Identifier:
                keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bVyEsAAvKQpoixKzifb7SAIwq1U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203462

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:4c:e1:e0:36:8e:de:27:56:49:5f:ef:d2:ef:22:f5:49:
         f7:3b:b4:8c:db:d0:b1:c0:77:ef:7c:98:7d:56:39:4a:53:11:
         e7:f0:fd:4f:ac:45:95:26:41:45:a4:87:3e:1b:d1:4f:5c:20:
         e1:a8:3f:b4:69:13:5a:24:93:4c:e8:7a:e6:a8:8d:e3:e4:23:
         a3:02:ed:06:23:43:e2:77:f9:a5:62:7b:67:c0:09:74:7e:85:
         88:45:8c:39:1d:ab:fa:74:ae:1c:7b:ca:3c:aa:6c:d0:ac:05:
         a1:97:dc:84:86:9e:35:c7:c4:85:fc:06:d0:8a:8c:71:f8:04:
         a1:a9:2e:eb:67:6c:1f:37:fd:ac:71:d8:eb:f7:cb:f3:b8:64:
         71:4f:5f:23:00:1b:5e:9e:ac:b4:0f:f2:20:d6:9f:ba:d0:46:
         e7:d3:41:66:ee:4c:8f:bb:6a:de:ae:ac:73:47:b2:85:10:fd:
         60:61:9e:1b:4c:08:37:ee:58:db:78:f8:81:af:01:71:2e:e3:
         72:59:4f:6a:a3:a1:d9:f5:d7:e5:6e:e9:7a:a6:28:0c:3f:9a:
         85:0c:fd:71:b4:5b:bf:21:a4:d1:d1:92:30:fa:66:bd:f4:16:
         0b:95:a3:fe:02:df:3a:ac:f0:04:19:37:16:85:ec:09:58:65:
         9b:f2:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:41 2026 by rpki-client