Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/pPTCAzxOVodx4YwhI50m9jIVxxc.asa
File:                     pPTCAzxOVodx4YwhI50m9jIVxxc.asa (raw, json)
Hash identifier:          mTurzgH9XuBjjcHY0WzHUelJfAKXzMIPkKszwVBrzsw=
Subject key identifier:   A4:F4:C2:03:3C:4E:56:87:71:E1:8C:21:23:9D:26:F6:32:15:C7:17
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       019FE603B76783C5402E07B84F714985F78D
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/pPTCAzxOVodx4YwhI50m9jIVxxc.asa
Signing time:             Sun 09 Aug 2026 10:13:50 +0000
ASPA not before:          Sun 09 Aug 2026 10:13:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208563
Providers:                AS: 6939
                          AS: 31142
                          AS: 34549
                          AS: 34854
                          AS: 34927
                          AS: 41051
                          AS: 47498
                          AS: 58299
                          AS: 61190
                          AS: 202409
                          AS: 207960
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:03:b7:67:83:c5:40:2e:07:b8:4f:71:49:85:f7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Aug  9 10:13:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a4f4c2033c4e568771e18c21239d26f63215c717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:5d:d9:76:c4:7b:db:e0:01:9e:6c:09:a9:
                    49:7b:16:9d:ab:f8:5f:b1:2e:da:53:32:cd:f8:a9:
                    cb:28:cb:0b:79:6b:b6:bf:f0:5e:ac:52:a1:d5:9a:
                    33:19:05:04:6a:08:07:be:4f:0a:6d:52:a3:f7:d6:
                    08:0c:a7:42:5a:0d:58:4b:9a:04:cf:4d:d7:b5:9a:
                    72:cd:01:ca:db:ba:d4:53:ac:7a:5c:28:c2:08:28:
                    78:01:cc:64:a7:b4:05:95:98:43:00:21:45:ad:2c:
                    86:7f:71:c9:0c:bc:04:a3:67:b5:8f:7d:79:cd:79:
                    e9:87:70:26:0a:66:c2:ff:53:a8:c8:50:7f:ce:6a:
                    28:66:de:dd:42:ff:85:f4:10:3d:db:fd:e8:ea:c6:
                    52:0a:05:0f:48:b8:68:dc:27:c1:48:4f:39:a5:5c:
                    f2:63:3f:fe:10:2c:3c:2f:68:c5:ba:89:68:5b:e1:
                    60:eb:a1:96:bc:af:65:13:62:47:ed:86:c4:e7:61:
                    df:f3:0f:88:a1:a3:09:6d:7e:9b:75:fd:58:d0:69:
                    ee:21:c4:ed:f2:9d:ea:fd:70:b9:d3:09:fd:03:a1:
                    8b:15:0a:92:e3:07:42:27:b0:dc:00:a7:b0:c2:52:
                    27:da:b6:5e:59:4d:86:ca:07:f7:aa:f2:ec:d7:a8:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:C2:03:3C:4E:56:87:71:E1:8C:21:23:9D:26:F6:32:15:C7:17
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/pPTCAzxOVodx4YwhI50m9jIVxxc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208563

    Signature Algorithm: sha256WithRSAEncryption
         08:42:66:2d:0a:74:38:4b:50:38:4c:13:32:b6:3a:49:02:fa:
         aa:84:c0:21:1b:43:63:74:c5:e0:68:a5:21:db:81:29:b7:40:
         1d:d4:c9:f3:6b:f1:f9:35:7d:1e:48:0a:f6:d8:c2:41:54:11:
         44:e2:27:fa:53:a3:ec:fb:fe:30:1f:dc:5a:31:a7:e0:30:fb:
         5d:36:4d:45:3c:43:97:3b:fd:17:53:8c:c0:99:fb:57:ee:0e:
         51:6a:98:0b:d9:3d:0b:06:26:8a:c2:f9:e7:f1:a0:54:de:9a:
         33:fd:a9:2b:58:72:32:bf:0e:fb:36:38:28:e8:f3:87:d6:67:
         37:58:f2:ee:22:9f:58:3a:ae:c7:cf:41:e5:9f:76:69:a3:b4:
         e2:bd:1d:52:05:1e:10:1f:b1:fd:f4:0f:f6:c0:8a:a8:6f:71:
         d6:2e:40:7b:29:6e:45:29:26:2f:14:e2:eb:f2:ff:11:b8:49:
         28:9f:45:ce:18:a0:9b:fc:25:fb:26:1f:fa:39:e8:55:07:18:
         ee:9c:57:8f:01:29:0a:df:10:d5:fe:c0:a4:ba:af:c0:fb:4b:
         3d:01:84:77:28:4f:4e:cf:aa:15:31:f1:91:b0:24:9c:f2:2c:
         7b:a7:f0:0f:fe:1e:68:48:88:04:35:0c:a5:6e:16:e1:5f:30:
         01:f1:c9:26
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/mA7dng8VALge4T3FJhfeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjYwODA5MTAxMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGY0YzIwMzNjNGU1Njg3NzFlMThjMjEyMzlkMjZmNjMyMTVjNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w1d2XbEe9vgAZ5sCalJexadq/hf
sS7aUzLN+KnLKMsLeWu2v/BerFKh1ZozGQUEaggHvk8KbVKj99YIDKdCWg1YS5oE
z03XtZpyzQHK27rUU6x6XCjCCCh4Acxkp7QFlZhDACFFrSyGf3HJDLwEo2e1j315
zXnph3AmCmbC/1OoyFB/zmooZt7dQv+F9BA92/3o6sZSCgUPSLho3CfBSE85pVzy
Yz/+ECw8L2jFuoloW+Fg66GWvK9lE2JH7YbE52Hf8w+IoaMJbX6bdf1Y0GnuIcTt
8p3q/XC50wn9A6GLFQqS4wdCJ7DcAKewwlIn2rZeWU2Gygf3qvLs16iZtwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKT0wgM8TlaHceGMISOdJvYyFccXMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvcFBUQ0F6eE9Wb2R4NFl3aEk1MG05aklWeHhjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuszANBgkqhkiG
9w0BAQsFAAOCAQEACEJmLQp0OEtQOEwTMrY6SQL6qoTAIRtDY3TF4GilIduBKbdA
HdTJ82vx+TV9HkgK9tjCQVQRROIn+lOj7Pv+MB/cWjGn4DD7XTZNRTxDlzv9F1OM
wJn7V+4OUWqYC9k9CwYmisL55/GgVN6aM/2pK1hyMr8O+zY4KOjzh9ZnN1jy7iKf
WDqux89B5Z92aaO04r0dUgUeEB+x/fQP9sCKqG9x1i5AeyluRSkmLxTi6/L/EbhJ
KJ9Fzhigm/wl+yYf+jnoVQcY7pxXjwEpCt8Q1f7ApLqvwPtLPQGEdyhPTs+qFTHx
kbAknPIse6fwD/4eaEiIBDUMpW4W4V8wAfHJJg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:45 2026 by rpki-client