Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa
File:                     rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (raw, json)
Hash identifier:          PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=
Subject key identifier:   AC:76:FF:8B:3F:89:88:C7:6D:DD:10:C8:DB:EA:9F:E2:86:DF:17:24
Certificate issuer:       /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial:       019CC4771F5D954CC16E4331EB9D33789CEA
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa
Signing time:             Fri 06 Mar 2026 18:44:27 +0000
ASPA not before:          Fri 06 Mar 2026 18:44:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205044
Providers:                AS: 207187
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:77:1f:5d:95:4c:c1:6e:43:31:eb:9d:33:78:9c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
        Validity
            Not Before: Mar  6 18:44:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac76ff8b3f8988c76ddd10c8dbea9fe286df1724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:66:dd:c0:11:ba:75:be:fd:6b:0b:cb:c0:
                    7c:54:31:f6:07:8d:2b:60:73:f4:ec:5d:41:49:3e:
                    e7:ad:6f:18:8c:e3:42:5a:c5:cf:62:55:e3:02:73:
                    f5:85:b8:64:25:5c:31:d3:c2:85:40:7b:64:57:61:
                    27:5f:7e:71:ae:2f:00:e8:bc:33:6c:fb:f5:e6:1a:
                    3b:c7:f8:06:8d:fa:fc:1b:8f:bf:b2:18:98:5a:66:
                    71:44:24:e7:f5:90:0d:45:51:3d:15:da:53:0f:57:
                    af:3e:49:4a:4b:03:92:d5:ff:38:6e:e9:00:cf:e4:
                    65:39:31:ee:68:70:03:7e:e2:f1:aa:47:90:71:1e:
                    36:d9:51:d8:75:01:10:f2:26:6f:03:5c:81:3c:0f:
                    66:69:b2:dc:82:02:b0:6f:ab:67:fa:08:4f:1d:99:
                    f4:fc:36:e1:80:27:06:49:27:a5:6f:e6:e7:1e:43:
                    87:41:fd:df:5c:cd:13:23:db:e2:05:80:08:d9:8d:
                    ea:99:26:b9:55:ae:d1:8c:f9:d8:46:b3:0d:98:be:
                    a1:5f:21:68:71:bf:03:fa:84:e4:6f:65:5a:73:c6:
                    53:68:50:c3:8c:24:dc:e3:c6:26:11:2a:37:4f:a4:
                    a1:36:e6:27:f1:71:2f:2f:b5:1d:4f:92:68:d5:91:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:76:FF:8B:3F:89:88:C7:6D:DD:10:C8:DB:EA:9F:E2:86:DF:17:24
            X509v3 Authority Key Identifier:
                keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205044

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:f2:7b:1d:cb:55:76:50:a6:6f:fc:2b:0d:22:3d:8b:71:
         dc:2a:8a:bc:fb:87:c5:d0:53:01:73:ef:a2:b0:5f:50:c7:c4:
         77:8e:7f:7f:c5:a0:a4:53:9b:5d:a6:ef:32:06:79:c9:b3:f2:
         5a:48:3e:45:9a:c1:80:16:80:97:4b:90:bd:43:eb:dd:ed:b1:
         14:7c:9c:83:6c:34:dc:c8:6b:a0:97:18:26:96:03:90:0e:48:
         e6:e3:c6:e2:e3:13:d8:4b:72:d8:36:cc:f9:af:9a:14:84:c3:
         2f:53:1c:21:0f:e2:b9:06:96:3b:76:87:2f:79:49:16:79:f1:
         d1:74:a3:59:4f:1e:89:8e:ba:75:0a:b8:1e:4f:b4:7d:63:3a:
         06:c7:09:ca:d4:99:6e:9b:06:57:14:fe:eb:aa:1b:9a:95:e4:
         c7:4f:1b:d5:f3:64:8c:bb:bd:56:17:2f:e3:74:3a:2d:34:2e:
         31:f8:5b:c0:11:94:7c:91:98:06:50:4b:37:19:56:76:d0:07:
         0b:73:1b:48:fa:72:32:1c:58:5f:83:13:43:13:be:0a:fa:05:
         b8:a5:a3:1d:b1:f1:10:91:ea:06:09:16:4a:c5:2b:dd:f7:e0:
         4c:00:b1:67:09:0d:5a:05:19:a9:f2:eb:9b:ee:42:ee:ea:6b:
         84:bd:8f:0a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzEdx9dlUzBbkMx650zeJzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz
YTcyODUwHhcNMjYwMzA2MTg0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzc2ZmY4YjNmODk4OGM3NmRkZDEwYzhkYmVhOWZlMjg2ZGYxNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqFm3cARunW+/WsLy8B8VDH2B40r
YHP07F1BST7nrW8YjONCWsXPYlXjAnP1hbhkJVwx08KFQHtkV2EnX35xri8A6Lwz
bPv15ho7x/gGjfr8G4+/shiYWmZxRCTn9ZANRVE9FdpTD1evPklKSwOS1f84bukA
z+RlOTHuaHADfuLxqkeQcR422VHYdQEQ8iZvA1yBPA9mabLcggKwb6tn+ghPHZn0
/DbhgCcGSSelb+bnHkOHQf3fXM0TI9viBYAI2Y3qmSa5Va7RjPnYRrMNmL6hXyFo
cb8D+oTkb2Vac8ZTaFDDjCTc48YmESo3T6ShNuYn8XEvL7UdT5Jo1ZHpfQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKx2/4s/iYjHbd0QyNvqn+KG3xckMB8GA1UdIwQY
MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt
MTcwOWY3YzdkNWU4LzEvckhiX2l6LUppTWR0M1JESTItcWY0b2JmRnlRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4
LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMg9DANBgkqhkiG
9w0BAQsFAAOCAQEAO0Tyex3LVXZQpm/8Kw0iPYtx3CqKvPuHxdBTAXPvorBfUMfE
d45/f8WgpFObXabvMgZ5ybPyWkg+RZrBgBaAl0uQvUPr3e2xFHycg2w03MhroJcY
JpYDkA5I5uPG4uMT2Ety2DbM+a+aFITDL1McIQ/iuQaWO3aHL3lJFnnx0XSjWU8e
iY66dQq4Hk+0fWM6BscJytSZbpsGVxT+66obmpXkx08b1fNkjLu9Vhcv43Q6LTQu
MfhbwBGUfJGYBlBLNxlWdtAHC3MbSPpyMhxYX4MTQxO+CvoFuKWjHbHxEJHqBgkW
SsUr3ffgTACxZwkNWgUZqfLrm+5C7uprhL2PCg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:12 2026 by rpki-client