Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/IIpkiT0DsKtry5SfDibaOaf5Gmc.asa
File:                     IIpkiT0DsKtry5SfDibaOaf5Gmc.asa (raw, json)
Hash identifier:          piz50WCwexz+zSmea8jYzJEYb2s6Vf251Ay/agIa33g=
Subject key identifier:   20:8A:64:89:3D:03:B0:AB:6B:CB:94:9F:0E:26:DA:39:A7:F9:1A:67
Certificate issuer:       /CN=6659d0207d896b18282922aeef6b472b788f9432
Certificate serial:       01A070791CFB2B07780A7680882C9FD80F98
Authority key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/IIpkiT0DsKtry5SfDibaOaf5Gmc.asa
Signing time:             Sat 05 Sep 2026 07:29:40 +0000
ASPA not before:          Sat 05 Sep 2026 07:29:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215006
Providers:                AS: 41051
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:70:79:1c:fb:2b:07:78:0a:76:80:88:2c:9f:d8:0f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6659d0207d896b18282922aeef6b472b788f9432
        Validity
            Not Before: Sep  5 07:29:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=208a64893d03b0ab6bcb949f0e26da39a7f91a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:47:80:17:d5:74:0e:1d:62:fe:22:f2:60:
                    7a:93:4e:13:92:db:a2:22:70:7a:a3:d4:91:e5:05:
                    13:97:0a:67:f4:8d:97:28:9c:59:e1:31:35:27:f1:
                    40:4d:e5:c0:b5:1d:97:31:c9:38:ed:55:fc:31:6f:
                    8b:e5:39:75:f0:1b:7e:08:82:b8:ff:28:f1:ee:8c:
                    4d:d9:05:ea:59:22:6d:2d:c7:7e:8d:45:07:93:63:
                    98:73:17:78:4d:f3:a1:45:8a:3f:8d:3e:bc:69:c5:
                    b9:62:04:58:30:9c:77:c1:52:83:89:18:79:d0:d5:
                    bf:6e:0d:9f:40:88:95:2b:c5:4e:89:bc:1d:94:48:
                    9b:14:43:b7:3c:5e:3d:a6:fe:4a:c8:ac:a5:80:16:
                    fb:52:a0:ad:c9:42:d5:ad:75:5b:89:37:e7:8f:3b:
                    90:f5:19:8e:63:9d:2f:4e:fb:b9:14:3b:0d:0b:66:
                    dc:7f:12:44:63:01:be:a1:4c:71:5a:5e:91:b3:67:
                    85:16:67:de:a1:51:0f:fc:e0:89:12:0e:49:f1:e9:
                    d2:76:7f:da:3a:de:64:0b:1b:49:68:21:f6:48:5b:
                    b4:e3:8f:8f:ec:ff:22:6f:0c:e8:01:cd:57:da:86:
                    5a:a5:61:78:37:75:18:31:96:12:a7:73:b5:8d:ca:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:64:89:3D:03:B0:AB:6B:CB:94:9F:0E:26:DA:39:A7:F9:1A:67
            X509v3 Authority Key Identifier:
                keyid:66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/IIpkiT0DsKtry5SfDibaOaf5Gmc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215006

    Signature Algorithm: sha256WithRSAEncryption
         43:06:99:71:e0:82:cc:47:cd:5a:4c:9b:b2:f5:22:4b:0d:2d:
         83:90:4d:e0:0c:f5:6c:a8:80:88:c8:7c:9f:79:60:a0:e0:ff:
         7a:f6:c4:11:fc:8c:44:3d:3b:ca:72:55:af:50:f0:72:4b:6b:
         a5:f0:fb:2d:54:67:02:4b:a0:02:17:49:0c:82:ae:e1:5a:0a:
         8c:f1:e8:d4:09:cf:83:cd:56:83:e5:d3:2a:90:99:85:16:39:
         e4:8a:95:44:2e:e9:b4:23:07:94:fd:d9:82:82:95:a8:a2:1e:
         c0:1b:a4:7f:12:88:81:69:e5:7d:9d:e5:af:10:9c:e1:04:e3:
         1e:fa:24:8f:65:ba:5d:14:43:f9:28:95:6a:3a:f7:2a:90:77:
         4a:cb:e8:ec:e8:1d:54:67:99:f6:fc:9f:5d:2c:70:78:ba:0f:
         6b:bd:6f:c2:c3:ec:6b:d5:f7:11:8c:55:43:cb:fa:b5:00:c1:
         da:a3:90:9a:a8:b2:f7:6a:df:b9:a3:10:42:c5:69:f1:66:bf:
         64:91:7a:47:d8:39:51:34:f0:40:f8:82:41:c3:4e:2a:07:94:
         bb:c6:46:9d:66:9b:b4:c5:d8:e8:c1:2b:06:09:fa:b5:66:2d:
         4a:bc:ec:fc:f2:e0:26:18:ae:28:88:3f:66:77:9d:c5:b4:b2:
         d3:5c:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 22:56:32 2026 by rpki-client