Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa
File:                     pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa (raw, json)
Hash identifier:          asd3kKFSLHLrOnSUbXKA6WurWf6oqSngwKQtRaOmKfY=
Subject key identifier:   A6:7E:98:DC:60:97:8E:31:C1:AA:72:BE:D9:AF:1D:5A:82:6E:F4:0B
Certificate issuer:       /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial:       019FD6C30AC6AD810581996A9BE97570C6A2
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa
Signing time:             Thu 06 Aug 2026 11:08:54 +0000
ASPA not before:          Thu 06 Aug 2026 11:08:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25091
Providers:                AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 3356
                          AS: 5511
                          AS: 6453
                          AS: 6762
                          AS: 55002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:c3:0a:c6:ad:81:05:81:99:6a:9b:e9:75:70:c6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
        Validity
            Not Before: Aug  6 11:08:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a67e98dc60978e31c1aa72bed9af1d5a826ef40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:91:ac:75:e1:a0:c4:e9:23:bb:0d:a7:30:
                    1f:6e:b9:1b:a2:b5:a5:f5:25:eb:25:71:91:7a:9f:
                    c7:1e:5a:38:d5:07:ac:3e:71:40:e8:62:8f:57:3d:
                    54:77:a6:a9:1c:9d:14:9e:97:98:46:b4:77:b1:20:
                    5e:6a:40:7c:8b:be:22:00:fe:f5:6e:49:19:01:4e:
                    0c:1f:32:9e:03:73:8b:77:35:a8:47:d6:b2:92:b7:
                    d8:ab:02:e6:01:32:8f:ab:1b:fb:48:68:4e:97:64:
                    30:47:06:79:46:ac:e0:bd:e4:ce:cf:3d:4c:a9:04:
                    d9:f3:73:5a:3c:fc:dc:e5:9d:9a:11:f9:d5:1d:e3:
                    ae:dd:69:45:ac:7a:b9:98:e9:19:e4:0e:fb:c2:db:
                    4d:d8:b0:f4:42:35:4a:21:87:24:12:fc:1e:46:01:
                    7e:07:ae:e8:d7:2e:35:be:9e:8a:8f:ed:36:90:fa:
                    8f:a5:46:af:2f:05:dc:0a:d0:ee:90:14:ce:20:b4:
                    e1:7d:c4:50:ef:61:3f:ec:8f:19:0b:bc:f3:e9:86:
                    f9:98:02:c6:40:fc:22:b8:aa:57:0c:57:2f:ea:be:
                    df:f1:c6:74:c0:00:74:b9:0e:8e:34:9b:c5:61:4c:
                    10:c4:97:79:ea:0c:fc:29:a7:d3:a1:3a:5e:d1:8e:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:98:DC:60:97:8E:31:C1:AA:72:BE:D9:AF:1D:5A:82:6E:F4:0B
            X509v3 Authority Key Identifier:
                keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/pn6Y3GCXjjHBqnK-2a8dWoJu9As.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25091

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:e6:61:51:a8:ca:e6:17:61:c2:22:21:68:96:7e:f0:b2:
         e4:c1:05:74:2b:5c:98:cf:8a:70:97:f7:6f:76:c0:b2:aa:c9:
         99:98:2f:19:38:98:df:f9:b8:5c:4b:c6:af:24:36:35:1d:68:
         e7:c2:60:d1:ea:44:db:75:62:82:ee:8d:42:73:c1:48:ab:5d:
         32:06:64:a3:27:c5:1c:07:0c:5e:c7:ac:36:af:c6:b4:c9:d3:
         99:f8:f4:88:a1:55:53:79:4b:a1:57:71:89:93:89:4e:61:67:
         4b:6e:3e:d7:a4:80:bd:46:2d:e4:ef:6a:a3:2a:7a:ab:bc:20:
         a6:07:18:6f:4b:ac:94:6d:69:c6:55:71:47:74:16:6d:42:2a:
         44:ed:a6:d6:28:b6:74:63:a7:72:90:f2:f4:17:38:67:ae:0f:
         38:07:12:1b:9d:11:95:7b:29:7a:de:02:59:45:d8:47:0e:a4:
         1d:32:f4:86:31:60:d8:65:b3:4e:51:6a:e6:c1:24:d4:7e:d5:
         fe:dc:46:c2:7d:a1:cc:b6:7e:33:48:de:ef:af:cb:ed:f7:ba:
         00:84:64:0c:ae:52:a9:9d:31:de:d9:bf:81:e3:56:ec:da:84:
         e9:b2:05:a1:96:d6:33:0b:33:3b:00:21:ca:9c:0a:1f:54:40:
         f1:e8:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:13 2026 by rpki-client