Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/6gOZ3UTl4hukSLcLc39uEv-aL0s.asa
File:                     6gOZ3UTl4hukSLcLc39uEv-aL0s.asa (raw, json)
Hash identifier:          udD+tFoNhBuLy4e3Qz16x4PyiTDDhT7Lc9W2hrVoUuk=
Subject key identifier:   EA:03:99:DD:44:E5:E2:1B:A4:48:B7:0B:73:7F:6E:12:FF:9A:2F:4B
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       019DD7FD84B99EC786211808A23468D9F07B
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/6gOZ3UTl4hukSLcLc39uEv-aL0s.asa
Signing time:             Wed 29 Apr 2026 06:46:49 +0000
ASPA not before:          Wed 29 Apr 2026 06:46:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215172
Providers:                AS: 174
                          AS: 3204
                          AS: 6939
                          AS: 7720
                          AS: 17408
                          AS: 34927
                          AS: 44324
                          AS: 51087
                          AS: 53356
                          AS: 199310
                          AS: 199605
                          AS: 203168
                          AS: 206069
                          AS: 206216
                          AS: 209565
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d7:fd:84:b9:9e:c7:86:21:18:08:a2:34:68:d9:f0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Apr 29 06:46:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea0399dd44e5e21ba448b70b737f6e12ff9a2f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:55:43:71:62:27:37:dd:08:80:a0:c6:67:
                    7c:45:e6:da:16:ac:23:83:93:71:42:87:03:3d:e1:
                    97:b5:84:36:4b:0e:5c:ee:61:cc:54:b9:8d:11:a4:
                    e9:5c:ab:66:07:61:f9:14:d6:1e:b7:aa:a7:c9:29:
                    a6:c1:2c:0b:36:04:0b:e8:9d:44:93:cb:0c:10:b7:
                    82:e1:18:3c:f9:1b:4f:34:cc:0e:d3:9d:4e:71:a9:
                    e0:6b:cb:61:91:94:52:f6:47:52:09:0e:fb:bc:a3:
                    8d:ef:7d:9b:6c:de:ef:a5:f3:5e:9a:84:b5:92:bb:
                    e3:3a:0e:79:d2:b8:1c:ae:20:4b:2f:72:87:5a:e7:
                    4e:4d:18:dc:65:0e:41:23:4a:a8:98:e6:09:81:a1:
                    6e:33:d4:4f:92:d5:6b:0f:49:1e:d8:70:80:73:5b:
                    d9:8d:52:63:b1:bc:97:a6:24:b2:cf:80:0d:b9:7e:
                    11:72:f3:f0:f8:88:61:94:11:fa:e9:b3:4f:fa:d8:
                    9a:d3:fb:3c:53:ee:31:b2:46:be:14:98:45:82:2b:
                    c4:f7:01:b6:dc:c7:48:93:e0:07:5e:f8:5a:53:f9:
                    25:a6:f9:e0:e4:f6:04:61:25:f1:f6:fb:93:4e:7b:
                    d1:48:22:2e:64:f0:8a:c6:84:b0:3c:79:75:54:1b:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:99:DD:44:E5:E2:1B:A4:48:B7:0B:73:7F:6E:12:FF:9A:2F:4B
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/6gOZ3UTl4hukSLcLc39uEv-aL0s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215172

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:71:86:9b:5c:c9:52:dd:f1:cd:16:c6:69:0c:b4:60:5e:
         d4:09:01:68:41:c2:cf:e2:60:04:29:2f:4d:da:08:46:ac:03:
         d2:25:4f:ad:6d:20:82:63:d8:8d:72:8f:4c:34:3d:45:b7:72:
         00:33:a2:a2:25:5a:9e:bc:10:6a:af:ba:a1:5b:6c:e1:77:b6:
         d0:86:4a:e3:e1:e4:7f:22:e6:be:b6:fb:08:91:ea:25:fc:99:
         1c:f4:70:c6:d3:27:ee:5b:30:56:42:cf:01:d4:f8:02:a4:17:
         dd:ed:f7:10:a6:33:75:b5:b6:0d:b6:25:83:c1:16:5e:a6:35:
         0b:8c:d0:9e:e7:94:dd:d7:3f:46:20:13:d4:78:ab:04:4a:d8:
         3c:5d:c6:a8:bd:4e:74:d6:60:4a:5a:1f:9b:79:12:67:7d:c3:
         2d:e0:da:6a:0d:4a:9e:0d:06:21:43:43:38:c3:2c:ad:c3:51:
         03:7c:10:83:eb:69:d6:31:ff:86:25:d3:94:aa:1b:7e:06:1f:
         9c:e9:9d:1b:3a:c7:95:c0:74:7d:d1:f5:ab:05:3b:dd:91:61:
         c3:60:f9:5e:44:ba:84:ae:26:fb:77:41:99:de:8d:70:27:1e:
         6b:37:3d:f1:fa:91:fd:20:e7:22:a0:9b:80:3c:49:6a:ec:10:
         96:04:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:53 2026 by rpki-client