Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/E-afr4F2Q1-YX2MSxrM7oF618aU.asa
File:                     E-afr4F2Q1-YX2MSxrM7oF618aU.asa (raw, json)
Hash identifier:          DyeMjeNi1YFyAHlDQKwQ+V3mc3ffjKyYa2gMYLJ2l18=
Subject key identifier:   13:E6:9F:AF:81:76:43:5F:98:5F:63:12:C6:B3:3B:A0:5E:B5:F1:A5
Certificate issuer:       /CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
Certificate serial:       019EB124AF74BBE44B6EDBF6F9BDC20A714B
Authority key identifier: D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/E-afr4F2Q1-YX2MSxrM7oF618aU.asa
Signing time:             Wed 10 Jun 2026 10:47:11 +0000
ASPA not before:          Wed 10 Jun 2026 10:47:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59718
Providers:                AS: 8985
                          AS: 39607
                          AS: 49869
                          AS: 50509
                          AS: 50952
                          AS: 56931
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b1:24:af:74:bb:e4:4b:6e:db:f6:f9:bd:c2:0a:71:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
        Validity
            Not Before: Jun 10 10:47:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13e69faf8176435f985f6312c6b33ba05eb5f1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:22:6d:35:5f:a7:79:02:1d:82:14:41:8f:
                    63:71:5f:53:bf:b3:c8:e6:36:af:ea:29:a1:2a:be:
                    75:52:82:e7:5c:c9:b5:c4:ad:97:d4:4e:32:c9:15:
                    11:ea:94:29:2d:57:f3:8c:90:ba:e0:b3:01:74:67:
                    e7:04:78:ca:c8:1c:02:02:fa:16:68:4f:bd:25:e8:
                    b0:5b:d0:b7:80:eb:76:fd:53:b0:2c:dd:2d:32:31:
                    83:87:b4:d2:d7:74:bb:fc:e0:4b:3a:ed:0f:63:38:
                    52:44:a8:f5:ed:52:a6:94:56:d9:02:ce:75:6f:3b:
                    0f:d5:4d:dc:3f:0b:d4:d2:33:4c:8b:a1:bc:dc:c7:
                    28:5a:a1:2b:0a:b7:42:8b:54:06:91:c3:a5:ee:e2:
                    0d:9a:ce:88:ab:62:06:a8:79:5f:26:64:52:dd:a7:
                    56:9a:98:94:4e:45:4c:2f:1e:9f:7e:f8:7a:63:30:
                    f1:eb:38:4a:ef:b2:c8:5f:f5:7c:87:04:67:6c:3f:
                    21:11:63:73:69:d2:eb:45:d2:b4:84:69:a0:77:64:
                    66:4b:37:e4:0b:f1:f1:a3:24:01:21:11:b8:2f:53:
                    9a:77:a1:2b:33:01:e6:59:e6:89:0c:19:a1:f8:e2:
                    85:d6:b6:ec:c9:73:b0:dc:22:9c:a8:48:a0:0f:4b:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:9F:AF:81:76:43:5F:98:5F:63:12:C6:B3:3B:A0:5E:B5:F1:A5
            X509v3 Authority Key Identifier:
                keyid:D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/E-afr4F2Q1-YX2MSxrM7oF618aU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59718

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:fb:f9:f3:94:75:7e:ec:f4:81:79:e3:41:29:bf:ee:15:
         93:a2:bc:13:46:47:bb:ee:b1:2c:2b:64:ab:63:0f:32:80:19:
         2a:8e:27:7a:b9:65:86:53:5c:b3:0f:e6:37:1b:87:b3:1c:73:
         21:a4:c5:cf:5a:e2:8d:51:d8:3b:c4:cb:80:2d:c7:ce:75:58:
         25:ac:1a:6b:df:5d:27:ed:43:a6:b7:99:d0:d8:68:09:8f:62:
         b0:3c:54:c2:10:68:33:ab:27:59:a9:dc:26:6c:39:20:97:9f:
         ec:bd:50:bf:38:bb:2f:e1:12:4f:df:5c:3e:4c:09:9b:0c:aa:
         32:ad:4c:fa:13:a1:03:72:1f:4c:8a:4a:db:eb:1e:b0:b2:da:
         f5:76:72:f3:8d:78:e1:d4:47:f8:a3:4f:b5:fb:06:2d:a2:87:
         16:94:a9:f3:10:ce:8b:81:32:0d:c0:46:9a:19:bf:e8:98:6f:
         41:c6:f2:9c:c7:20:d4:1a:73:a9:34:10:52:80:dd:c7:ff:19:
         7d:11:73:8a:08:4e:44:06:7c:b4:79:85:45:ba:b2:ac:b9:3e:
         4a:76:09:15:62:6d:60:bb:56:22:01:8a:12:a6:72:97:7b:2d:
         ce:8b:12:f1:dc:f9:84:b2:75:59:b3:b9:c6:91:8e:eb:b7:0c:
         7a:c6:24:ea
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6xJK90u+RLbtv2+b3CCnFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTNiMDU0ZDg4MmI0ZDc5ZWUzYjliN2QzYWJiMmY3YzVi
MjcxYmUwHhcNMjYwNjEwMTA0NzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2U2OWZhZjgxNzY0MzVmOTg1ZjYzMTJjNmIzM2JhMDVlYjVmMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ0ibTVfp3kCHYIUQY9jcV9Tv7PI
5jav6imhKr51UoLnXMm1xK2X1E4yyRUR6pQpLVfzjJC64LMBdGfnBHjKyBwCAvoW
aE+9JeiwW9C3gOt2/VOwLN0tMjGDh7TS13S7/OBLOu0PYzhSRKj17VKmlFbZAs51
bzsP1U3cPwvU0jNMi6G83McoWqErCrdCi1QGkcOl7uINms6Iq2IGqHlfJmRS3adW
mpiUTkVMLx6ffvh6YzDx6zhK77LIX/V8hwRnbD8hEWNzadLrRdK0hGmgd2RmSzfk
C/HxoyQBIRG4L1Oad6ErMwHmWeaJDBmh+OKF1rbsyXOw3CKcqEigD0u7gwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBPmn6+BdkNfmF9jEsazO6BetfGlMB8GA1UdIwQY
MBaAFNQTsFTYgrTXnuO5t9OrsvfFsnG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJPd1ZOaUN0TmVlNDdtMzA2dXk5OFd5Y2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YWE0NmItNmUwOC00YmU5LThlZTgt
NTJjNjQwNGFhNmQyLzEvRS1hZnI0RjJRMS1ZWDJNU3hyTTdvRjYxOGFVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82YWE0NmItNmUwOC00YmU5LThlZTgtNTJjNjQwNGFhNmQy
LzEvMUJPd1ZOaUN0TmVlNDdtMzA2dXk5OFd5Y2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDpRjANBgkqhkiG
9w0BAQsFAAOCAQEAHUP7+fOUdX7s9IF540Epv+4Vk6K8E0ZHu+6xLCtkq2MPMoAZ
Ko4nerllhlNcsw/mNxuHsxxzIaTFz1rijVHYO8TLgC3HznVYJawaa99dJ+1DpreZ
0NhoCY9isDxUwhBoM6snWancJmw5IJef7L1Qvzi7L+EST99cPkwJmwyqMq1M+hOh
A3IfTIpK2+sesLLa9XZy84144dRH+KNPtfsGLaKHFpSp8xDOi4EyDcBGmhm/6Jhv
QcbynMcg1BpzqTQQUoDdx/8ZfRFzighORAZ8tHmFRbqyrLk+SnYJFWJtYLtWIgGK
EqZyl3stzosS8dz5hLJ1WbO5xpGO67cMesYk6g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:39 2026 by rpki-client