Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/DggIJs_MPATTU1fsjQ1fThUkFzg.asa
File:                     DggIJs_MPATTU1fsjQ1fThUkFzg.asa (raw, json)
Hash identifier:          L3cZLBkDqG4NS7mwPXNtZBZm35MoayAzoN2PVANaJ4g=
Subject key identifier:   0E:08:08:26:CF:CC:3C:04:D3:53:57:EC:8D:0D:5F:4E:15:24:17:38
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       01A0D42B7BCCF59A1368A4CAC3CFC8C7A962
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/DggIJs_MPATTU1fsjQ1fThUkFzg.asa
Signing time:             Thu 24 Sep 2026 16:06:54 +0000
ASPA not before:          Thu 24 Sep 2026 16:06:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219026
Providers:                AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:2b:7b:cc:f5:9a:13:68:a4:ca:c3:cf:c8:c7:a9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Sep 24 16:06:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e080826cfcc3c04d35357ec8d0d5f4e15241738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:17:14:bf:3f:d1:08:80:a9:f8:ad:10:d9:
                    99:d4:18:0e:80:28:44:5a:33:96:df:1c:8b:ab:f9:
                    44:52:4e:67:2f:73:8f:28:1a:fe:e3:e9:6a:dc:fd:
                    78:fe:c3:24:93:5e:de:de:eb:62:38:8d:22:1e:e9:
                    d6:a7:b2:22:16:a4:f4:0f:c1:d7:a6:93:04:a7:4d:
                    39:f8:fb:19:59:28:16:4e:82:af:06:38:a7:a6:1e:
                    17:6e:7a:bd:7b:1a:a1:26:9b:59:2c:0a:db:6b:5f:
                    a8:2b:d3:7d:0c:4b:29:6b:95:67:de:2a:45:4c:35:
                    6a:2f:d8:9c:cc:44:01:f5:65:95:53:28:6c:bf:39:
                    a7:4f:64:92:16:f3:68:eb:d1:63:64:4a:ef:4c:cc:
                    e0:14:9b:b0:31:fb:64:08:11:14:f1:44:25:09:18:
                    a2:78:d5:e3:35:16:e5:a9:4a:39:ec:42:6a:b4:87:
                    6d:82:2c:fd:3b:fd:4e:1a:22:a7:7a:e7:0c:32:53:
                    1a:f4:d0:8e:c4:98:87:46:e4:52:9f:cd:97:2a:42:
                    ef:4f:bc:c6:c4:20:e0:fb:79:cc:e8:a0:d9:1f:d7:
                    5c:ec:a3:cb:89:cd:fa:57:23:fa:2e:82:ab:4d:e0:
                    f3:8b:23:b2:d8:6c:48:11:43:c8:99:16:3e:5e:5f:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:08:26:CF:CC:3C:04:D3:53:57:EC:8D:0D:5F:4E:15:24:17:38
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/DggIJs_MPATTU1fsjQ1fThUkFzg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219026

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:3a:ec:96:b2:fd:06:42:4e:ff:4f:f6:82:db:58:b1:2e:
         77:bf:3b:31:59:b9:c4:6f:79:dc:02:40:29:ad:0c:57:ca:08:
         98:2d:da:89:fd:75:52:eb:20:26:6c:0b:79:71:7f:34:f6:d7:
         39:4a:3b:71:48:e8:4f:0c:57:09:01:44:7f:37:fe:e9:d5:15:
         94:6e:03:db:cb:81:74:be:fe:99:fe:54:7a:6c:57:00:bb:76:
         c7:f6:4f:a9:1d:cb:17:74:03:20:77:b9:4e:55:04:1c:ce:b8:
         9f:a7:de:51:f3:36:d7:00:80:49:99:5a:a9:79:51:4b:31:3e:
         98:32:6e:9b:a0:e1:f7:ca:d2:60:fb:6c:77:26:37:70:2c:e7:
         b6:64:15:c8:43:f4:50:95:3a:88:06:61:56:6c:20:97:b4:ca:
         e6:e1:38:94:24:9a:bf:2f:3b:66:cf:47:6c:ad:6c:eb:0d:46:
         89:39:9a:9d:e5:9f:f5:6d:e9:da:2c:be:c3:3a:1c:e5:84:50:
         77:6f:87:19:6f:8e:51:bf:93:16:43:32:41:02:40:39:45:da:
         4c:93:b9:6b:1c:b4:23:be:3c:17:16:da:f6:d0:52:40:49:b4:
         26:48:9a:a1:e3:3f:84:89:a6:00:67:91:56:5d:c4:72:d4:7b:
         81:88:70:45
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDUK3vM9ZoTaKTKw8/Ix6liMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjYwOTI0MTYwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTA4MDgyNmNmY2MzYzA0ZDM1MzU3ZWM4ZDBkNWY0ZTE1MjQxNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7gXFL8/0QiAqfitENmZ1BgOgChE
WjOW3xyLq/lEUk5nL3OPKBr+4+lq3P14/sMkk17e3utiOI0iHunWp7IiFqT0D8HX
ppMEp005+PsZWSgWToKvBjinph4Xbnq9exqhJptZLArba1+oK9N9DEspa5Vn3ipF
TDVqL9iczEQB9WWVUyhsvzmnT2SSFvNo69FjZErvTMzgFJuwMftkCBEU8UQlCRii
eNXjNRblqUo57EJqtIdtgiz9O/1OGiKneucMMlMa9NCOxJiHRuRSn82XKkLvT7zG
xCDg+3nM6KDZH9dc7KPLic36VyP6LoKrTeDziyOy2GxIEUPImRY+Xl/bmwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA4ICCbPzDwE01NX7I0NX04VJBc4MB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvRGdnSUpzX01QQVRUVTFmc2pRMWZUaFVrRnpnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNXkjANBgkqhkiG
9w0BAQsFAAOCAQEAW8467Jay/QZCTv9P9oLbWLEud787MVm5xG953AJAKa0MV8oI
mC3aif11UusgJmwLeXF/NPbXOUo7cUjoTwxXCQFEfzf+6dUVlG4D28uBdL7+mf5U
emxXALt2x/ZPqR3LF3QDIHe5TlUEHM64n6feUfM21wCASZlaqXlRSzE+mDJum6Dh
98rSYPtsdyY3cCzntmQVyEP0UJU6iAZhVmwgl7TK5uE4lCSavy87Zs9HbK1s6w1G
iTmaneWf9W3p2iy+wzoc5YRQd2+HGW+OUb+TFkMyQQJAOUXaTJO5axy0I748Fxba
9tBSQEm0JkiaoeM/hImmAGeRVl3EctR7gYhwRQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:55:42 2026 by rpki-client