Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/2C3FcWazR5XyXlMgLgJnDejEmi8.asa
File:                     2C3FcWazR5XyXlMgLgJnDejEmi8.asa (raw, json)
Hash identifier:          2MsHJBx/wK2u5DGzbrSigEczmjhlHiUmREbO6gj6VoM=
Subject key identifier:   D8:2D:C5:71:66:B3:47:95:F2:5E:53:20:2E:02:67:0D:E8:C4:9A:2F
Certificate issuer:       /CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Certificate serial:       01A0D29EC7D8753274916F74F17ED38A84F0
Authority key identifier: 7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/2C3FcWazR5XyXlMgLgJnDejEmi8.asa
Signing time:             Thu 24 Sep 2026 08:53:36 +0000
ASPA not before:          Thu 24 Sep 2026 08:53:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            5576
Providers:                AS: 35047
                          AS: 42313
                          AS: 56468
                          AS: 202821
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:9e:c7:d8:75:32:74:91:6f:74:f1:7e:d3:8a:84:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
        Validity
            Not Before: Sep 24 08:53:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d82dc57166b34795f25e53202e02670de8c49a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:70:77:57:32:b5:32:67:73:11:b5:09:82:e1:
                    ca:db:06:8d:0f:70:2f:25:0f:5a:ea:a6:c9:d4:6a:
                    7c:b0:17:26:9e:46:8b:66:3e:2e:23:8e:e9:e4:6e:
                    8b:ae:f9:05:41:47:18:f1:0d:a7:85:84:32:1f:b3:
                    2f:59:e6:55:51:1a:0c:0c:de:0f:b2:9d:12:c8:47:
                    bc:eb:62:0b:ca:b0:93:d7:76:9b:4c:58:a5:df:05:
                    e6:88:26:a0:19:4b:15:ec:e2:12:c1:80:f1:cd:05:
                    72:64:aa:26:f9:2b:68:0c:be:4b:4b:25:aa:54:28:
                    50:2e:39:6a:4b:14:4f:3a:9f:6a:93:4b:40:57:19:
                    3e:19:51:7a:e4:6c:1e:6d:36:5c:c5:bf:60:25:52:
                    e2:1f:90:46:62:74:29:c0:1c:f7:7e:3f:af:e4:06:
                    48:b2:4b:57:7e:4e:38:80:72:6b:e9:82:76:f5:ec:
                    fb:5d:21:94:96:ba:51:ab:23:8a:b0:73:b7:b7:c2:
                    69:12:24:a4:5d:34:07:e3:b9:40:87:25:72:ff:07:
                    1e:f1:4b:3a:ac:dc:ac:9a:de:0b:bd:a4:d9:ca:cd:
                    ca:58:31:4f:8c:5b:75:37:3d:b8:89:16:31:89:1a:
                    7d:81:1e:9a:7d:b2:cd:b8:7e:31:87:06:19:84:bb:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2D:C5:71:66:B3:47:95:F2:5E:53:20:2E:02:67:0D:E8:C4:9A:2F
            X509v3 Authority Key Identifier:
                keyid:7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/2C3FcWazR5XyXlMgLgJnDejEmi8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5576

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:53:a4:3b:ad:9c:aa:5a:63:42:b5:2e:20:d5:06:0b:93:
         92:81:2c:b2:e5:83:9c:2c:6c:0d:d3:83:98:19:9d:a1:76:04:
         22:0c:9f:6f:fe:55:28:d0:ed:e8:e2:7c:da:cf:6c:ce:63:fa:
         57:b4:fe:c3:8d:c6:37:71:e9:ff:1c:85:88:24:f7:31:2a:1a:
         24:2a:24:73:c3:48:83:bb:f4:ee:9c:8d:16:97:64:07:e5:44:
         c3:57:4c:90:db:70:40:c5:5b:cf:46:70:ee:cb:64:d2:94:b8:
         a2:86:b9:a0:0f:2c:1a:8d:ce:64:c9:ae:2e:ad:83:13:6f:7e:
         fb:de:d4:cb:21:a1:2b:34:cd:43:e9:10:59:44:83:65:3e:02:
         16:30:a6:f1:e3:3e:83:c0:69:42:ad:60:51:f9:4a:36:d6:da:
         82:21:81:9c:f4:55:03:9f:13:f8:22:f9:a7:92:55:0b:24:82:
         29:8a:00:b4:41:c8:6c:a8:d5:e7:f8:b1:19:69:98:36:60:75:
         ee:bf:32:ef:29:3c:cb:82:08:f7:4f:1b:35:3b:29:4f:9d:6d:
         9d:ac:99:59:30:cc:25:a6:6f:3f:00:33:48:9d:4a:60:06:31:
         ea:a5:60:3f:85:f5:ae:02:02:1e:e3:2a:2f:35:ba:0d:17:87:
         56:bb:d6:bb
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAaDSnsfYdTJ0kW908X7TioTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZmFiOTQ3NmIzZWNiMWU2ODEwMTY3MzgwZmM4YjE4NzZh
MGQyMTMwHhcNMjYwOTI0MDg1MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJkYzU3MTY2YjM0Nzk1ZjI1ZTUzMjAyZTAyNjcwZGU4YzQ5YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HB3VzK1MmdzEbUJguHK2waND3Av
JQ9a6qbJ1Gp8sBcmnkaLZj4uI47p5G6LrvkFQUcY8Q2nhYQyH7MvWeZVURoMDN4P
sp0SyEe862ILyrCT13abTFil3wXmiCagGUsV7OISwYDxzQVyZKom+StoDL5LSyWq
VChQLjlqSxRPOp9qk0tAVxk+GVF65GwebTZcxb9gJVLiH5BGYnQpwBz3fj+v5AZI
sktXfk44gHJr6YJ29ez7XSGUlrpRqyOKsHO3t8JpEiSkXTQH47lAhyVy/wce8Us6
rNysmt4LvaTZys3KWDFPjFt1Nz24iRYxiRp9gR6afbLNuH4xhwYZhLuvVwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFNgtxXFms0eV8l5TIC4CZw3oxJovMB8GA1UdIwQY
MBaAFH76uUdrPsseaBAWc4D8ixh2oNITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnZxNVIycy15eDVvRUJaemdQeUxHSGFnMGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jZTZmNjgtOWQyNS00OTdmLThkYmUt
OGM2ZjA1MGNiZDk1LzEvMkMzRmNXYXpSNVh5WGxNZ0xnSm5EZWpFbWk4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jZTZmNjgtOWQyNS00OTdmLThkYmUtOGM2ZjA1MGNiZDk1
LzEvZnZxNVIycy15eDVvRUJaemdQeUxHSGFnMGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhXIMA0GCSqGSIb3
DQEBCwUAA4IBAQBZf1OkO62cqlpjQrUuINUGC5OSgSyy5YOcLGwN04OYGZ2hdgQi
DJ9v/lUo0O3o4nzaz2zOY/pXtP7DjcY3cen/HIWIJPcxKhokKiRzw0iDu/TunI0W
l2QH5UTDV0yQ23BAxVvPRnDuy2TSlLiihrmgDywajc5kya4urYMTb3773tTLIaEr
NM1D6RBZRINlPgIWMKbx4z6DwGlCrWBR+Uo21tqCIYGc9FUDnxP4IvmnklULJIIp
igC0QchsqNXn+LEZaZg2YHXuvzLvKTzLggj3Txs1OylPnW2drJlZMMwlpm8/ADNI
nUpgBjHqpWA/hfWuAgIe4yovNboNF4dWu9a7
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:16 2026 by rpki-client