Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa
File:                     ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa (raw, json)
Hash identifier:          rTgSzjLcrFW+Ml3XD84+8nUR06InVZZ/zrEf99lwY0w=
Subject key identifier:   CD:ED:8A:52:C2:DF:67:EA:52:57:98:63:E6:E8:9E:45:F5:A4:F4:41
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       019DD43B4CCFD9A9FEDE770F525EC70EE506
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa
Signing time:             Tue 28 Apr 2026 13:15:49 +0000
ASPA not before:          Tue 28 Apr 2026 13:15:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            30893
Providers:                AS: 39889
                          AS: 50989
                          AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d4:3b:4c:cf:d9:a9:fe:de:77:0f:52:5e:c7:0e:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Apr 28 13:15:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cded8a52c2df67ea52579863e6e89e45f5a4f441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:39:7b:3e:09:1c:af:ff:4e:53:89:60:c7:
                    0c:cd:23:06:49:3f:63:7b:8b:a9:d6:85:ec:8b:19:
                    e6:af:86:c0:2b:64:b5:90:be:d6:a5:db:1d:0b:7a:
                    45:68:c2:b3:06:ef:38:b4:b2:25:41:b1:76:12:01:
                    26:38:85:6f:0d:13:41:a1:0c:43:74:97:2c:52:3c:
                    28:60:27:df:f6:ec:c9:4d:d2:0e:41:fa:1e:dd:2a:
                    fd:16:89:3a:20:06:c5:bd:7d:b1:f1:57:c4:82:6c:
                    9b:d7:f0:e2:22:a3:71:f0:3c:92:3e:92:d2:4c:5b:
                    53:28:f1:fe:74:e4:f2:11:4e:74:a3:4d:6e:76:0e:
                    89:75:e4:c3:2e:a8:e4:4d:96:b2:51:fe:67:df:b9:
                    82:84:89:d4:c7:d2:91:fd:c6:26:da:dd:2e:45:2f:
                    d4:ad:0b:55:0e:7d:5c:e8:43:b8:f5:81:fa:8e:0e:
                    51:3f:20:7f:8e:ec:72:26:4a:13:67:df:f2:de:22:
                    06:4f:1a:e8:a4:01:84:45:f2:31:79:d0:89:5d:15:
                    80:69:2b:d6:55:b0:b0:49:0e:1c:47:1c:bc:89:3f:
                    57:e1:97:fb:20:f0:d2:49:78:6f:17:92:e6:fb:0e:
                    bf:1d:da:f3:26:aa:6b:f5:90:78:0c:f9:f6:53:76:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:8A:52:C2:DF:67:EA:52:57:98:63:E6:E8:9E:45:F5:A4:F4:41
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/ze2KUsLfZ-pSV5hj5uieRfWk9EE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30893

    Signature Algorithm: sha256WithRSAEncryption
         54:41:38:d0:29:70:76:fe:9b:96:ac:bf:69:c5:82:c5:c2:0e:
         38:6a:d6:61:fb:a0:3e:26:db:97:ae:a9:a5:f2:08:77:1c:8b:
         f1:3a:c4:d4:16:0c:60:56:e2:55:c6:68:0a:14:07:39:0c:ec:
         f7:f6:b5:fd:8a:af:f7:9e:e6:22:cb:da:9f:43:7f:58:17:0a:
         c5:19:00:e8:f7:b2:9d:08:41:11:c2:be:36:a9:10:6c:ce:2a:
         39:75:e5:ae:84:4d:4b:13:9f:f6:cd:0d:e4:c8:99:b7:37:9b:
         59:02:8c:e4:75:3f:c5:a4:0f:59:b3:89:09:ba:82:c4:06:e5:
         1b:60:2f:42:c8:a0:53:fc:35:f8:44:72:49:5d:ef:e1:45:25:
         a4:f7:ae:59:dc:62:b5:72:70:18:07:7d:06:67:55:4e:02:c5:
         32:17:70:93:01:b7:ae:0d:83:2c:7e:2d:21:f3:dc:94:ea:e5:
         c0:a8:2e:73:c5:ab:e5:68:bb:f7:f7:97:e7:bf:6d:e2:05:94:
         e0:7c:13:96:40:c6:45:8e:a6:08:b9:94:1d:32:6c:18:e1:99:
         a5:45:e7:17:88:2b:b1:03:ac:ec:ff:a5:fc:f0:c9:35:20:27:
         73:92:9e:30:ff:85:10:58:cf:ff:5e:27:90:49:7c:7b:0b:33:
         f6:9b:b5:91
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ3UO0zP2an+3ncPUl7HDuUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm
ZmM3YzAwHhcNMjYwNDI4MTMxNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGVkOGE1MmMyZGY2N2VhNTI1Nzk4NjNlNmU4OWU0NWY1YTRmNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Y5ez4JHK//TlOJYMcMzSMGST9j
e4up1oXsixnmr4bAK2S1kL7WpdsdC3pFaMKzBu84tLIlQbF2EgEmOIVvDRNBoQxD
dJcsUjwoYCff9uzJTdIOQfoe3Sr9Fok6IAbFvX2x8VfEgmyb1/DiIqNx8DySPpLS
TFtTKPH+dOTyEU50o01udg6JdeTDLqjkTZayUf5n37mChInUx9KR/cYm2t0uRS/U
rQtVDn1c6EO49YH6jg5RPyB/juxyJkoTZ9/y3iIGTxropAGERfIxedCJXRWAaSvW
VbCwSQ4cRxy8iT9X4Zf7IPDSSXhvF5Lm+w6/HdrzJqpr9ZB4DPn2U3ZVGwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFM3tilLC32fqUleYY+bonkX1pPRBMB8GA1UdIwQY
MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt
YTZkNDVlZjdkMjI3LzEvemUyS1VzTGZaLXBTVjVoajV1aWVSZldrOUVFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3
LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnitMA0GCSqGSIb3
DQEBCwUAA4IBAQBUQTjQKXB2/puWrL9pxYLFwg44atZh+6A+JtuXrqml8gh3HIvx
OsTUFgxgVuJVxmgKFAc5DOz39rX9iq/3nuYiy9qfQ39YFwrFGQDo97KdCEERwr42
qRBszio5deWuhE1LE5/2zQ3kyJm3N5tZAozkdT/FpA9Zs4kJuoLEBuUbYC9CyKBT
/DX4RHJJXe/hRSWk965Z3GK1cnAYB30GZ1VOAsUyF3CTAbeuDYMsfi0h89yU6uXA
qC5zxavlaLv395fnv23iBZTgfBOWQMZFjqYIuZQdMmwY4ZmlRecXiCuxA6zs/6X8
8Mk1ICdzkp4w/4UQWM//XieQSXx7CzP2m7WR
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:05 2026 by rpki-client