Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/h_dGaZkpgJ73O29r1EDyAEN8xR8.asa
File:                     h_dGaZkpgJ73O29r1EDyAEN8xR8.asa (raw, json)
Hash identifier:          Hu5pzvPt2D+Ppd393Bg90m+MGP3xk9fAeGx+umxpkLs=
Subject key identifier:   87:F7:46:69:99:29:80:9E:F7:3B:6F:6B:D4:40:F2:00:43:7C:C5:1F
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01A0FBF1EAB33CF6B70CE44EE06C75BF4BFF
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/h_dGaZkpgJ73O29r1EDyAEN8xR8.asa
Signing time:             Fri 02 Oct 2026 09:28:50 +0000
ASPA not before:          Fri 02 Oct 2026 09:28:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206375
Providers:                AS: 3257
                          AS: 4849
                          AS: 9002
                          AS: 9121
                          AS: 44901
                          AS: 206119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fb:f1:ea:b3:3c:f6:b7:0c:e4:4e:e0:6c:75:bf:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Oct  2 09:28:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87f746699929809ef73b6f6bd440f200437cc51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:d3:21:36:ca:bc:53:de:dc:21:c4:96:b7:
                    90:20:c0:6f:29:1a:63:f1:ff:ae:b5:22:3c:7c:0e:
                    ad:6b:0f:f1:21:d1:d8:f6:da:2c:28:6e:b2:99:e7:
                    42:db:40:30:61:83:a4:9b:84:32:98:3a:62:3a:a1:
                    8b:bc:a1:60:8f:32:2f:12:52:ed:7b:7f:6d:c7:5c:
                    77:71:37:b0:40:ea:a8:87:32:54:21:73:62:5b:07:
                    bd:4b:83:d6:e4:c2:60:14:33:29:e6:07:95:4d:5b:
                    23:60:d4:93:4e:d9:a7:a3:8d:25:23:11:78:8a:e2:
                    bf:88:a5:c6:1e:27:b5:17:ad:3a:de:fb:5d:59:04:
                    16:9c:15:1a:79:46:00:07:e2:8b:cd:67:ae:66:74:
                    8f:e1:d1:36:85:f1:b2:8c:9b:58:7b:23:29:12:a6:
                    db:31:2a:1b:d3:7e:a0:d2:f2:56:28:1d:c0:26:ad:
                    73:cf:76:19:97:7b:b5:7b:01:f1:f0:5f:05:1e:b3:
                    d6:77:f6:2d:4f:62:17:7f:03:c8:49:7f:7e:f1:8d:
                    23:b2:b4:2b:fa:8f:a0:21:f8:e8:d6:18:b1:a9:a5:
                    af:a8:71:b4:50:ef:dc:5e:82:81:c5:ee:e5:98:73:
                    60:c8:89:ed:df:61:67:73:12:6d:94:4d:47:7c:dd:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:46:69:99:29:80:9E:F7:3B:6F:6B:D4:40:F2:00:43:7C:C5:1F
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/h_dGaZkpgJ73O29r1EDyAEN8xR8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206375

    Signature Algorithm: sha256WithRSAEncryption
         77:31:cf:ed:af:f1:72:c9:18:34:9c:c4:e6:1b:54:fa:10:1e:
         b3:44:b6:58:f7:13:81:05:dc:b7:2e:2b:a3:e3:5b:b7:95:b1:
         e4:c7:6c:6b:2b:94:92:c6:c1:d9:74:1a:45:00:76:10:f6:9b:
         a6:c9:02:68:6c:61:1d:70:8c:80:81:55:d9:98:8e:b7:4b:0b:
         66:40:61:0a:05:07:d3:77:ab:60:bb:66:44:fa:a8:2e:95:fd:
         87:4b:51:52:0b:5c:bc:37:04:d0:f4:0e:00:a9:51:36:c1:4f:
         3e:fd:4c:b5:75:0a:74:c9:8d:c7:b8:aa:6a:ca:ec:2e:09:d7:
         83:bc:68:b3:5a:83:64:8a:ce:04:21:f7:2f:43:a9:6c:83:30:
         e1:51:e8:87:b8:2b:48:e2:88:cd:06:e3:e3:bd:08:5a:a8:1b:
         9a:46:d6:4f:ee:95:09:50:89:83:f1:d3:28:59:9e:8a:06:4a:
         73:5a:10:f9:cf:a7:26:7d:77:4d:32:b8:09:ae:36:a1:e5:34:
         65:66:d4:f6:22:23:6b:bb:cb:d8:60:c1:9d:d5:5f:3e:84:1f:
         27:fb:0b:16:71:b5:7b:de:eb:d4:d2:5c:4f:5e:c9:7e:0c:11:
         be:ed:e8:1c:56:bb:87:95:4e:92:05:17:fc:ed:bf:5e:3d:0b:
         87:d2:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:31:33 2026 by rpki-client