Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/FkDSObsiidn9XZeIw1lExVCwjQM.asa
File:                     FkDSObsiidn9XZeIw1lExVCwjQM.asa (raw, json)
Hash identifier:          VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=
Subject key identifier:   16:40:D2:39:BB:22:89:D9:FD:5D:97:88:C3:59:44:C5:50:B0:8D:03
Certificate issuer:       /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial:       019CC6CCF7A127D85A1AA2D78C8123574414
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/FkDSObsiidn9XZeIw1lExVCwjQM.asa
Signing time:             Sat 07 Mar 2026 05:37:27 +0000
ASPA not before:          Sat 07 Mar 2026 05:37:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213904
Providers:                AS: 174
                          AS: 25467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:cc:f7:a1:27:d8:5a:1a:a2:d7:8c:81:23:57:44:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
        Validity
            Not Before: Mar  7 05:37:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1640d239bb2289d9fd5d9788c35944c550b08d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:a6:b3:1f:44:67:e6:6e:93:ef:1e:47:0f:
                    51:8b:be:eb:c9:b3:28:2a:80:c1:84:67:7c:73:08:
                    bb:62:df:46:6f:75:05:b7:09:83:8a:5a:ad:74:8f:
                    6b:6d:98:93:69:88:ec:1c:9c:ff:ee:3f:19:e1:57:
                    5b:08:00:c5:1e:d6:4e:50:92:0a:33:0a:b0:67:ca:
                    a0:6f:3b:3d:3c:ae:5b:70:54:96:66:05:56:d8:d6:
                    7e:00:2a:6c:7a:bd:97:44:ee:84:6b:ad:71:2f:5f:
                    1b:e3:a9:15:9f:ee:c2:69:2c:17:c9:75:cc:a9:6d:
                    a5:12:36:02:a3:e8:f8:05:a1:f1:5f:b4:e1:84:9b:
                    f6:06:8f:fd:fc:15:7c:53:85:c3:93:e7:c2:c0:1d:
                    28:da:19:f0:89:9d:df:b9:c7:6a:aa:d7:26:4a:c8:
                    99:7a:14:1c:84:2f:0a:22:a5:41:12:5d:e2:4c:c9:
                    54:b1:88:26:59:cd:f4:0d:06:8d:0c:78:23:c9:b5:
                    5c:42:09:ff:55:fd:48:3e:1e:d4:a6:a0:e9:24:ad:
                    98:56:78:ed:62:f1:62:f7:02:b7:4b:5b:97:bc:53:
                    c8:b4:44:10:62:9e:82:b4:68:e2:64:f9:86:79:94:
                    85:8d:b4:45:5c:55:01:19:d0:da:01:4f:93:eb:fd:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:D2:39:BB:22:89:D9:FD:5D:97:88:C3:59:44:C5:50:B0:8D:03
            X509v3 Authority Key Identifier:
                keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/FkDSObsiidn9XZeIw1lExVCwjQM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213904

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:a6:f8:5c:4a:a3:52:ab:fa:15:3e:3f:63:e6:b8:93:1d:
         8a:90:4d:ca:24:17:4f:0d:46:2d:94:05:d9:c5:66:25:39:ed:
         12:3e:98:16:31:fd:93:89:7b:08:18:22:96:ed:9f:66:f7:de:
         7e:83:bf:34:1c:14:71:52:e1:a5:e5:84:87:79:ba:b9:76:11:
         0c:5b:22:67:62:69:8a:0c:8b:fc:3a:4c:1c:1c:0c:b0:63:9f:
         93:b8:58:c6:22:e5:e5:ec:cc:e1:43:35:4b:57:85:b2:0d:a1:
         23:e3:98:53:56:ed:a1:7c:fa:19:ce:2b:f7:d9:93:58:06:e5:
         a7:7b:7e:08:58:ac:58:46:0b:9d:1b:99:39:85:c5:54:02:f9:
         e5:39:4e:e7:38:9b:1e:6c:fd:06:86:16:57:3d:20:43:13:9b:
         bd:68:bc:20:cc:05:da:1c:c2:33:3d:8f:3c:e9:38:bd:cd:9b:
         31:e9:80:b1:20:16:79:cf:d9:97:b7:36:53:28:33:86:78:ac:
         4c:00:42:f7:72:65:91:35:92:9c:bc:0c:08:9b:97:7c:42:07:
         81:aa:b7:c2:1e:3a:d0:13:3e:25:b4:aa:5f:6a:ca:fb:93:ab:
         3d:71:8d:34:06:70:2e:bf:43:c0:74:a0:f6:6c:88:f8:43:7e:
         e3:ed:14:aa
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzGzPehJ9haGqLXjIEjV0QUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1
OGQ2ZDUwHhcNMjYwMzA3MDUzNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQwZDIzOWJiMjI4OWQ5ZmQ1ZDk3ODhjMzU5NDRjNTUwYjA4ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pimsx9EZ+Zuk+8eRw9Ri77rybMo
KoDBhGd8cwi7Yt9Gb3UFtwmDilqtdI9rbZiTaYjsHJz/7j8Z4VdbCADFHtZOUJIK
MwqwZ8qgbzs9PK5bcFSWZgVW2NZ+ACpser2XRO6Ea61xL18b46kVn+7CaSwXyXXM
qW2lEjYCo+j4BaHxX7ThhJv2Bo/9/BV8U4XDk+fCwB0o2hnwiZ3fucdqqtcmSsiZ
ehQchC8KIqVBEl3iTMlUsYgmWc30DQaNDHgjybVcQgn/Vf1IPh7UpqDpJK2YVnjt
YvFi9wK3S1uXvFPItEQQYp6CtGjiZPmGeZSFjbRFXFUBGdDaAU+T6/0C3wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBZA0jm7IonZ/V2XiMNZRMVQsI0DMB8GA1UdIwQY
MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct
MTYyMGNmZGM3MTE3LzEvRmtEU09ic2lpZG45WFplSXcxbEV4VkN3alFNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3
LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNDkDANBgkqhkiG
9w0BAQsFAAOCAQEAUrGm+FxKo1Kr+hU+P2PmuJMdipBNyiQXTw1GLZQF2cVmJTnt
Ej6YFjH9k4l7CBgilu2fZvfefoO/NBwUcVLhpeWEh3m6uXYRDFsiZ2JpigyL/DpM
HBwMsGOfk7hYxiLl5ezM4UM1S1eFsg2hI+OYU1btoXz6Gc4r99mTWAblp3t+CFis
WEYLnRuZOYXFVAL55TlO5zibHmz9BoYWVz0gQxObvWi8IMwF2hzCMz2PPOk4vc2b
MemAsSAWec/Zl7c2UygzhnisTABC93JlkTWSnLwMCJuXfEIHgaq3wh460BM+JbSq
X2rK+5OrPXGNNAZwLr9DwHSg9myI+EN+4+0Uqg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:12 2026 by rpki-client