Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa
File:                     YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa (raw, json)
Hash identifier:          HUVAVch0tpB2Eafp8Rpcw9ARFWadeMwT0krWeIBPrQo=
Subject key identifier:   63:19:D7:06:32:5D:44:B0:30:D7:55:9D:9B:DA:C4:9B:B1:43:81:FA
Certificate issuer:       /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial:       019F1F1E8D61693EC42EA110C8097BA2F361
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa
Signing time:             Wed 01 Jul 2026 19:18:43 +0000
ASPA not before:          Wed 01 Jul 2026 19:18:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214640
Providers:                AS: 3399
                          AS: 31898
                          AS: 42532
                          AS: 208453
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1f:1e:8d:61:69:3e:c4:2e:a1:10:c8:09:7b:a2:f3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
        Validity
            Not Before: Jul  1 19:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6319d706325d44b030d7559d9bdac49bb14381fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:23:84:c0:eb:06:e9:af:d0:ae:53:e9:0f:
                    a3:a9:96:b6:7b:39:73:55:68:68:89:e2:2e:cb:ff:
                    0e:6d:4e:72:b4:27:bb:25:4f:c4:1b:05:40:9b:a4:
                    33:a4:de:05:e9:73:9a:1e:65:90:12:0b:de:27:37:
                    a8:b9:7a:a1:d5:ff:7e:98:f8:e3:d2:17:9c:3f:24:
                    f1:56:a3:22:02:c4:8f:9a:5f:da:c4:60:58:93:8d:
                    38:6c:f9:f9:11:22:d6:80:d2:96:95:6c:17:bd:dc:
                    7b:e3:e1:f2:1f:1f:96:9b:ac:38:67:61:b5:cb:a5:
                    c4:1f:76:db:10:e9:79:88:8a:93:a8:0d:e4:ac:de:
                    9b:39:a4:db:37:a3:dd:ac:a3:5f:82:56:bd:ca:a2:
                    8a:1c:97:4a:34:f2:36:3c:5c:2a:a7:7b:c8:6e:91:
                    2b:ee:59:81:fa:85:74:94:f6:2c:95:bc:ee:50:fc:
                    db:7a:19:36:fb:db:26:fa:b9:67:5a:95:5e:66:4a:
                    2a:66:99:c5:99:48:00:55:76:78:31:5f:0b:7c:8b:
                    c6:21:c6:e7:ba:37:6a:f3:30:83:51:de:9d:10:b3:
                    17:39:a4:3d:fa:5e:11:09:46:00:63:3e:75:76:a9:
                    90:7d:22:30:de:eb:c5:ce:f5:56:6d:0f:45:bd:1f:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:19:D7:06:32:5D:44:B0:30:D7:55:9D:9B:DA:C4:9B:B1:43:81:FA
            X509v3 Authority Key Identifier:
                keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214640

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:59:98:25:61:25:f2:36:60:fc:55:c6:13:38:1e:0f:83:
         70:29:56:b8:90:14:00:6b:71:49:43:5c:f4:6f:ad:06:66:4f:
         dd:28:eb:40:b3:cd:68:f1:16:19:bb:c8:56:fe:ed:95:d5:ec:
         21:b5:a0:22:27:5f:05:0e:f0:a5:ec:68:8f:4d:f6:ad:ca:5e:
         28:89:7a:bc:7c:cc:d1:e3:36:22:24:8c:14:38:d2:ef:8a:cf:
         95:ed:ab:be:ac:81:92:d7:04:f2:c3:9d:02:9b:a9:8d:4a:f6:
         99:92:ef:3b:6b:72:69:b0:b5:41:d2:1a:9c:50:e6:90:f1:ab:
         18:ef:c4:e7:9c:a1:71:bc:7f:23:af:c5:df:bb:5e:15:ec:34:
         5e:36:43:a2:6c:4d:db:90:b1:79:3a:b3:6a:1d:10:0a:bc:2d:
         db:fc:5f:0f:86:bf:be:0c:d0:cd:9f:ff:a4:81:25:95:a9:86:
         b3:1f:59:a6:76:66:ae:3c:06:b3:29:f7:e7:a6:97:1d:34:bc:
         83:47:d0:b5:61:8b:a2:80:1e:89:a4:96:29:a5:44:e3:77:2e:
         e3:e6:c1:66:0c:25:c3:25:81:24:ed:05:3b:29:af:9a:90:3f:
         50:b6:c7:30:39:c0:18:c8:52:bd:6d:82:26:e0:bc:e2:c4:a9:
         7a:fa:dc:6c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8fHo1haT7ELqEQyAl7ovNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY0N2RhYzcyOWY0N2IwNjM2OWM0Yzk3NDFjZjk0Mzk1
M2RjNTkwHhcNMjYwNzAxMTkxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzE5ZDcwNjMyNWQ0NGIwMzBkNzU1OWQ5YmRhYzQ5YmIxNDM4MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquojhMDrBumv0K5T6Q+jqZa2ezlz
VWhoieIuy/8ObU5ytCe7JU/EGwVAm6QzpN4F6XOaHmWQEgveJzeouXqh1f9+mPjj
0hecPyTxVqMiAsSPml/axGBYk404bPn5ESLWgNKWlWwXvdx74+HyHx+Wm6w4Z2G1
y6XEH3bbEOl5iIqTqA3krN6bOaTbN6PdrKNfgla9yqKKHJdKNPI2PFwqp3vIbpEr
7lmB+oV0lPYslbzuUPzbehk2+9sm+rlnWpVeZkoqZpnFmUgAVXZ4MV8LfIvGIcbn
ujdq8zCDUd6dELMXOaQ9+l4RCUYAYz51dqmQfSIw3uvFzvVWbQ9FvR+4pwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGMZ1wYyXUSwMNdVnZvaxJuxQ4H6MB8GA1UdIwQY
MBaAFKCmR9rHKfR7BjacTJdBz5Q5U9xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQt
ZmI2OTgzY2U5ZGZmLzEvWXhuWEJqSmRSTEF3MTFXZG05ckVtN0ZEZ2ZvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQtZmI2OTgzY2U5ZGZm
LzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGcDANBgkqhkiG
9w0BAQsFAAOCAQEAfItZmCVhJfI2YPxVxhM4Hg+DcClWuJAUAGtxSUNc9G+tBmZP
3SjrQLPNaPEWGbvIVv7tldXsIbWgIidfBQ7wpexoj032rcpeKIl6vHzM0eM2IiSM
FDjS74rPle2rvqyBktcE8sOdApupjUr2mZLvO2tyabC1QdIanFDmkPGrGO/E55yh
cbx/I6/F37teFew0XjZDomxN25CxeTqzah0QCrwt2/xfD4a/vgzQzZ//pIEllamG
sx9ZpnZmrjwGsyn356aXHTS8g0fQtWGLooAeiaSWKaVE43cu4+bBZgwlwyWBJO0F
OymvmpA/ULbHMDnAGMhSvW2CJuC84sSpevrcbA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:26 2026 by rpki-client