Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/X9MygZSKSL6QlOO0UVIquYhu0Fo.asa
File:                     X9MygZSKSL6QlOO0UVIquYhu0Fo.asa (raw, json)
Hash identifier:          Oin11/QLAtTIeyxZUGkGGrAhnCjiS0Q0Kg95zmjFkRI=
Subject key identifier:   5F:D3:32:81:94:8A:48:BE:90:94:E3:B4:51:52:2A:B9:88:6E:D0:5A
Certificate issuer:       /CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Certificate serial:       019FEADADB0DC3327FD19E3089FEF8FB9151
Authority key identifier: FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/X9MygZSKSL6QlOO0UVIquYhu0Fo.asa
Signing time:             Mon 10 Aug 2026 08:47:19 +0000
ASPA not before:          Mon 10 Aug 2026 08:47:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206633
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ea:da:db:0d:c3:32:7f:d1:9e:30:89:fe:f8:fb:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
        Validity
            Not Before: Aug 10 08:47:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5fd33281948a48be9094e3b451522ab9886ed05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:0c:08:c5:ab:d2:0a:01:20:60:c6:ed:1f:
                    35:9f:76:ce:98:3c:9f:06:34:5d:56:a7:1d:34:bc:
                    0f:69:2d:b8:4a:3e:ac:e2:af:d0:12:39:b1:ce:ac:
                    22:36:f8:32:e4:dd:30:6d:81:c4:74:86:2f:85:36:
                    dc:d7:e1:61:ce:b0:ef:5e:ad:13:77:0b:fc:95:cf:
                    9d:9f:02:b3:5d:09:40:b7:30:af:75:78:8f:ef:43:
                    07:f2:38:1b:a0:db:7a:f3:f3:9e:13:ad:a0:85:98:
                    24:5e:98:44:28:90:55:e2:24:67:46:38:f8:98:11:
                    ae:f1:c9:76:b8:0e:e7:1b:82:6a:fc:10:c3:ab:1f:
                    7e:e7:74:95:8a:83:35:85:07:1f:5d:a7:37:b2:d8:
                    9b:3f:bc:40:41:d9:bd:2d:b9:6d:69:df:86:a8:62:
                    1a:17:45:fa:9f:c7:65:1f:57:ca:32:eb:02:b3:9d:
                    a2:01:10:5d:5e:66:49:89:79:ce:fa:c7:af:32:37:
                    39:71:2a:ae:ef:85:ce:13:db:b4:1b:83:7b:43:dd:
                    ed:a1:86:ea:1d:4a:e6:42:b1:c7:22:ff:cc:68:a6:
                    58:9e:9f:c3:82:dc:35:2f:85:e0:a7:01:bb:df:b1:
                    af:ee:50:5a:e9:e3:83:2a:8b:34:ca:be:48:ab:07:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:32:81:94:8A:48:BE:90:94:E3:B4:51:52:2A:B9:88:6E:D0:5A
            X509v3 Authority Key Identifier:
                keyid:FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/X9MygZSKSL6QlOO0UVIquYhu0Fo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206633

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:e6:25:d4:08:a1:b2:bb:97:4f:93:b3:b0:49:ad:e2:74:
         72:65:62:1f:15:1a:ae:7e:96:c1:e5:f4:1c:83:c9:60:cd:db:
         f3:9e:78:7b:40:b8:c7:48:f1:07:92:e7:eb:34:a3:27:d8:47:
         40:65:b4:b7:b2:77:c0:77:18:ff:f3:14:f6:d4:72:f7:b3:24:
         0f:ed:51:85:16:0e:65:12:60:cd:d6:52:b8:1e:f1:c4:36:12:
         14:eb:37:0f:fd:b2:5d:68:0b:e9:8c:f0:63:80:e0:d7:cc:a1:
         0a:3a:11:14:e1:14:3e:90:2f:49:52:12:b7:20:3a:01:bf:f8:
         76:22:3b:b0:6b:97:6b:57:6e:9e:3e:80:47:d6:58:9e:3b:0c:
         cf:62:f9:51:40:6b:48:32:9d:01:45:f4:6a:a9:b6:85:55:b7:
         3d:99:6f:fd:a4:dc:18:b3:ab:39:5d:2c:df:6e:14:81:43:52:
         36:af:5a:3e:1f:62:c2:ed:41:c6:55:59:24:96:f6:64:3e:f8:
         51:ee:5e:d5:52:28:3d:f6:d9:29:1a:bb:1c:6a:20:07:4f:5d:
         c8:c7:c7:43:1e:c3:e5:b4:b5:6b:f1:91:8f:2b:6a:79:1b:15:
         10:9c:dd:ef:5d:70:f1:ee:ea:19:18:dc:9b:a2:47:98:21:c2:
         6f:59:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:33 2026 by rpki-client