Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa
File:                     UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa (raw, json)
Hash identifier:          Gf/LbKoB+VuriOGpuU9l7kr0/08qSC6GQP4aAWqyo8Y=
Subject key identifier:   50:93:E7:2F:00:4B:8D:78:27:87:C7:CB:B3:AC:7D:85:97:92:08:7B
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019F19012FF698E0E9271B2240535FADE339
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa
Signing time:             Tue 30 Jun 2026 14:48:55 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215638
Providers:                AS: 174
                          AS: 1299
                          AS: 6939
                          AS: 9002
                          AS: 13213
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2f:f6:98:e0:e9:27:1b:22:40:53:5f:ad:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Jun 30 14:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5093e72f004b8d782787c7cbb3ac7d859792087b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:85:10:98:90:6b:7a:07:22:23:ac:65:97:
                    b4:52:68:25:9f:8c:81:f6:00:e9:2b:6d:d5:4a:c5:
                    da:73:de:d6:d6:47:91:9c:fa:13:ba:26:70:57:b5:
                    ca:85:0c:e0:e7:29:b0:49:9c:7c:47:5e:e7:d1:37:
                    05:42:46:07:dd:f7:31:84:96:f1:96:24:39:27:a3:
                    1c:2d:c6:69:80:55:e0:b6:ee:a0:52:66:3b:63:78:
                    e9:af:56:39:a1:c7:1f:62:12:9a:41:ff:3a:46:07:
                    58:be:1e:89:83:44:63:9e:a0:3d:bd:5b:30:5b:53:
                    78:ad:2b:9b:34:2b:db:d9:f8:6a:6d:0d:e5:60:c8:
                    fc:8b:2f:37:e2:f3:fe:73:05:dd:c5:bb:e7:96:39:
                    30:45:7f:c7:42:d2:93:0c:f5:d3:14:52:7c:5a:35:
                    82:6a:ab:d5:85:e0:c7:6e:47:8e:3f:3d:71:9f:ef:
                    c1:81:6a:31:c0:1a:f4:09:e9:e1:06:62:f8:ee:5e:
                    93:a0:33:36:94:3a:05:90:e3:3b:62:be:1e:36:e8:
                    54:3a:b8:d1:e2:32:8d:ed:61:ab:7d:15:e3:89:cf:
                    00:0b:d8:e8:36:10:60:56:70:f7:97:fd:52:ae:d3:
                    1c:9a:d0:ba:42:7b:11:6d:bc:55:9f:59:fe:c4:9c:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:E7:2F:00:4B:8D:78:27:87:C7:CB:B3:AC:7D:85:97:92:08:7B
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/UJPnLwBLjXgnh8fLs6x9hZeSCHs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215638

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:1c:4e:0d:14:18:7f:45:d4:29:1d:a6:df:3d:eb:4c:46:
         35:ad:75:f7:76:93:c1:37:19:b0:0d:25:a1:9f:10:fa:10:71:
         f8:e3:df:e7:07:ff:d0:4a:b8:e6:36:87:25:8e:a5:b8:2c:93:
         31:17:ad:8a:40:6a:6c:75:14:22:1b:97:a1:4d:9e:a6:3a:ae:
         dc:e8:7e:9a:76:88:d7:b8:1a:9f:f7:8c:cb:37:96:3c:ec:b5:
         a2:ca:30:69:7b:5d:57:85:8f:c2:80:2b:aa:69:7d:ed:6b:88:
         31:5f:a7:a6:10:6a:c3:bd:dc:7d:a4:61:3a:c4:63:71:38:7f:
         4c:05:7e:61:da:62:f9:bd:a7:cd:45:00:c6:86:39:f4:80:21:
         b9:66:b0:e6:3d:09:74:8d:7d:74:79:ae:68:ec:c1:28:89:1d:
         c5:6c:f8:2a:d6:68:a5:58:6c:03:ab:ea:cf:60:6e:da:55:7a:
         09:6f:bb:71:f6:c5:44:e7:3c:1a:5c:a2:98:bc:9d:d6:90:9c:
         06:5f:8f:34:41:db:7a:7b:7d:cd:da:25:f5:e3:9f:20:10:20:
         dd:eb:79:78:54:5e:dc:71:7b:05:b4:95:ea:ef:bd:f8:db:3d:
         a4:ae:89:80:15:ed:dd:f0:b7:76:e8:f4:5d:e3:e9:4a:45:b3:
         cb:3e:9f:7c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAS/2mODpJxsiQFNfreM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjYwNjMwMTQ0ODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDkzZTcyZjAwNGI4ZDc4Mjc4N2M3Y2JiM2FjN2Q4NTk3OTIwODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOCFEJiQa3oHIiOsZZe0Umgln4yB
9gDpK23VSsXac97W1keRnPoTuiZwV7XKhQzg5ymwSZx8R17n0TcFQkYH3fcxhJbx
liQ5J6McLcZpgFXgtu6gUmY7Y3jpr1Y5occfYhKaQf86RgdYvh6Jg0RjnqA9vVsw
W1N4rSubNCvb2fhqbQ3lYMj8iy834vP+cwXdxbvnljkwRX/HQtKTDPXTFFJ8WjWC
aqvVheDHbkeOPz1xn+/BgWoxwBr0CenhBmL47l6ToDM2lDoFkOM7Yr4eNuhUOrjR
4jKN7WGrfRXjic8AC9joNhBgVnD3l/1SrtMcmtC6QnsRbbxVn1n+xJztoQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFCT5y8AS414J4fHy7OsfYWXkgh7MB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvVUpQbkx3QkxqWGduaDhmTHM2eDloWmVTQ0hzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKVjANBgkqhkiG
9w0BAQsFAAOCAQEAj8UcTg0UGH9F1Ckdpt8960xGNa1193aTwTcZsA0loZ8Q+hBx
+OPf5wf/0Eq45jaHJY6luCyTMRetikBqbHUUIhuXoU2epjqu3Oh+mnaI17gan/eM
yzeWPOy1osowaXtdV4WPwoArqml97WuIMV+nphBqw73cfaRhOsRjcTh/TAV+Ydpi
+b2nzUUAxoY59IAhuWaw5j0JdI19dHmuaOzBKIkdxWz4KtZopVhsA6vqz2Bu2lV6
CW+7cfbFROc8GlyimLyd1pCcBl+PNEHbent9zdol9eOfIBAg3et5eFRe3HF7BbSV
6u+9+Ns9pK6JgBXt3fC3duj0XePpSkWzyz6ffA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:46 2026 by rpki-client