Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa
File:                     aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (raw, json)
Hash identifier:          OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=
Subject key identifier:   6A:A6:63:DA:F5:0A:CD:75:B8:38:93:A2:5C:57:18:CC:E1:A5:38:11
Certificate issuer:       /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial:       019F2368EA89E40239EF508B9C1129094639
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa
Signing time:             Thu 02 Jul 2026 15:18:26 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205315
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 03:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:ea:89:e4:02:39:ef:50:8b:9c:11:29:09:46:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
        Validity
            Not Before: Jul  2 15:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa663daf50acd75b83893a25c5718cce1a53811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:42:a8:0e:f1:79:10:7f:ce:48:46:40:b1:
                    bf:e9:53:2a:df:84:a9:ff:35:df:0b:7b:c7:cd:ea:
                    9e:be:38:90:99:fd:f1:80:84:30:65:e2:ea:ae:30:
                    b5:c4:3b:63:6e:e4:e3:ef:d7:e4:46:f8:e3:21:fd:
                    5d:21:9f:d5:61:ae:f7:37:25:59:7d:cc:69:58:99:
                    e2:9a:ba:4d:d9:ca:cb:66:22:af:55:78:84:32:b2:
                    18:08:1a:43:dd:c6:86:3b:29:e8:ab:e8:bf:fa:0b:
                    61:15:dd:e4:8e:01:d9:f6:59:df:b5:0e:92:8c:e4:
                    2e:8a:98:8e:03:46:36:55:b6:60:8c:25:2f:ab:b5:
                    aa:dd:4f:19:24:e2:00:f1:9d:b4:76:0d:25:91:40:
                    90:7e:16:d6:1b:58:d2:b1:f9:1e:72:cd:19:6d:fc:
                    ca:4e:af:40:42:f8:97:f9:c3:74:00:4d:a8:3e:62:
                    22:ea:05:70:7b:8f:b9:13:b9:5c:3b:9a:6d:ae:a4:
                    18:07:38:59:6d:9b:64:45:89:1b:a4:ec:cc:73:cb:
                    6b:3a:e4:69:db:f3:aa:22:51:86:b1:40:46:ec:bc:
                    28:cd:a0:eb:1d:83:54:da:7a:3b:9a:ec:ec:40:d3:
                    45:76:07:48:81:01:5a:a1:57:7f:6a:eb:28:69:6e:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A6:63:DA:F5:0A:CD:75:B8:38:93:A2:5C:57:18:CC:E1:A5:38:11
            X509v3 Authority Key Identifier:
                keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205315

    Signature Algorithm: sha256WithRSAEncryption
         ab:c8:87:05:6b:18:7b:3b:aa:54:1d:62:1d:3d:2a:bd:c0:2e:
         3d:42:3c:b4:5d:14:2c:c9:7a:1e:68:10:d7:45:2c:fc:ed:38:
         57:20:48:b9:a5:7e:3b:45:89:a1:5b:81:64:cf:81:2e:f8:21:
         9e:de:0d:bd:56:f9:f1:d8:dd:ef:02:43:1d:c4:e6:f8:c5:03:
         b3:47:7b:9b:ca:8f:13:83:d0:b5:44:62:bc:b3:b1:6c:2f:e6:
         ec:c6:56:11:e1:12:23:14:44:38:7f:bd:27:fb:12:6b:28:05:
         c3:b5:b0:bb:55:a2:c9:72:e5:5b:b3:91:9c:bb:20:45:70:a8:
         13:9d:6c:38:e3:f6:e5:a8:af:12:53:62:34:02:2d:99:ae:44:
         86:37:6c:cf:5f:24:91:e2:1f:bc:d7:a7:1a:df:52:c0:61:32:
         49:52:69:e3:33:90:8b:e0:5b:a4:51:ae:77:4a:f4:d1:9e:f8:
         2a:52:a4:c1:07:03:bd:18:c9:b5:19:46:9a:39:95:c2:d8:61:
         e1:8f:d9:ad:01:ad:c1:dd:ef:b9:73:56:0e:d8:8f:cb:45:f6:
         52:d7:59:36:e0:e6:fa:9f:b1:e0:03:5a:b9:8b:a1:9b:a7:15:
         62:7d:3d:47:53:70:8d:67:5f:c8:11:84:d4:16:03:d3:56:5f:
         f0:11:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:37:39 2026 by rpki-client