Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/YKdoVLd9ylGhk--_nieA-ylnwwY.asa
File:                     YKdoVLd9ylGhk--_nieA-ylnwwY.asa (raw, json)
Hash identifier:          iBRLVXc9pjx2a8hspS9tGoEHTB4wLOrd24lO6wYHwPE=
Subject key identifier:   60:A7:68:54:B7:7D:CA:51:A1:93:EF:BF:9E:27:80:FB:29:67:C3:06
Certificate issuer:       /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial:       019F0D3AF95F902353E273E7FA930EF452D6
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/YKdoVLd9ylGhk--_nieA-ylnwwY.asa
Signing time:             Sun 28 Jun 2026 07:56:36 +0000
ASPA not before:          Sun 28 Jun 2026 07:56:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207303
Providers:                AS: 34927
                          AS: 44324
                          AS: 151194
                          AS: 153376
                          AS: 154185
                          AS: 198025
                          AS: 203031
                          AS: 203168
                          AS: 204211
                          AS: 204539
                          AS: 210352
                          AS: 210440
                          AS: 213605
                          AS: 214439
                          AS: 214933
                          AS: 214955
                          AS: 215172
                          AS: 399888
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0d:3a:f9:5f:90:23:53:e2:73:e7:fa:93:0e:f4:52:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Validity
            Not Before: Jun 28 07:56:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=60a76854b77dca51a193efbf9e2780fb2967c306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:fb:3b:6b:34:23:62:73:bd:45:c9:25:69:
                    72:23:7e:20:95:9d:3e:fc:ab:74:58:e9:05:59:0c:
                    90:25:80:d0:e0:4b:cf:cc:60:7c:5f:d5:f0:df:a6:
                    64:5f:c9:b3:00:85:0c:2b:34:b4:24:89:69:eb:63:
                    9d:91:53:55:62:92:a2:16:79:c1:bc:42:04:85:99:
                    e0:df:9e:08:5d:e2:ad:64:4a:44:b6:ae:52:eb:e6:
                    79:0b:53:31:83:a4:cf:f9:d2:b5:0e:16:7d:9c:cf:
                    1f:25:fe:5a:09:9d:0b:4a:50:01:c2:9b:74:53:77:
                    7d:71:97:c1:3d:2c:7a:43:86:c2:8f:6f:0d:ef:9d:
                    4f:c6:a7:06:de:2c:51:2a:7b:3f:20:67:a9:02:80:
                    f2:fa:ba:c9:08:d4:91:c1:24:06:fb:f6:e0:d2:4b:
                    6d:d9:dc:f2:6c:a2:cf:fd:43:47:46:54:0b:2b:cf:
                    38:d2:de:82:1d:a6:e7:4b:76:ae:fe:8e:1a:3f:03:
                    14:55:23:b5:84:bd:0f:aa:ab:57:9d:62:ac:5e:5c:
                    38:8f:fe:41:62:7e:01:c1:a6:50:76:e6:38:ae:83:
                    9a:29:96:33:2d:3b:72:64:bc:53:c8:29:5d:99:fa:
                    c1:d3:c2:30:0c:25:5d:2b:ef:cb:e2:e3:2b:fd:d3:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A7:68:54:B7:7D:CA:51:A1:93:EF:BF:9E:27:80:FB:29:67:C3:06
            X509v3 Authority Key Identifier:
                keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/YKdoVLd9ylGhk--_nieA-ylnwwY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207303

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:76:21:a1:36:e7:9e:4c:2d:4c:c0:b7:ea:d8:20:6a:55:
         64:44:9e:81:75:2a:d9:c5:1d:1f:ae:85:5b:8b:cd:f9:37:c0:
         4b:d8:76:61:b3:a3:65:d2:14:60:d2:81:0e:dd:63:3c:1d:2d:
         f9:39:98:ca:2b:7a:84:64:ec:23:56:30:0f:80:85:8b:a7:1f:
         96:3e:b9:10:53:8c:8e:06:cf:7b:a7:aa:6a:f9:4e:fc:43:92:
         77:af:d6:d9:be:e9:fe:85:1e:1b:c9:0b:81:19:ab:7c:86:64:
         74:91:52:f4:34:77:68:5a:4c:76:84:f7:c0:9f:7d:22:8e:dd:
         29:bc:2e:80:fa:75:44:b0:0e:00:d7:4a:ef:8d:79:a4:a3:dc:
         6d:0f:a5:c6:3c:62:1a:4d:52:2c:82:85:a0:0e:7c:95:ed:b3:
         ec:c0:ff:30:8c:34:1d:e1:c8:8a:ca:f2:d2:40:ee:6b:a3:a3:
         b6:7c:b5:2e:5a:b0:ba:62:6c:01:73:2e:a3:91:ac:ca:3d:1b:
         4d:f4:94:c4:21:7e:3a:12:7b:75:c5:db:e9:59:43:f7:14:df:
         f0:07:ef:0b:7e:91:86:3b:b7:1d:51:95:18:16:89:83:61:ba:
         95:86:1e:f7:50:6d:aa:cd:a9:61:be:ce:1a:94:f0:73:36:b4:
         20:0a:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:32 2026 by rpki-client