Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/7BZeedmWNxSvPKrlY8KT7vjjkl0.asa
File:                     7BZeedmWNxSvPKrlY8KT7vjjkl0.asa (raw, json)
Hash identifier:          rlQ8KOmIrplS+aFjafrA9Je7LwJ3y4Bn50nbQiuj0HQ=
Subject key identifier:   EC:16:5E:79:D9:96:37:14:AF:3C:AA:E5:63:C2:93:EE:F8:E3:92:5D
Certificate issuer:       /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial:       01A01B97CBA8216C43DDE0CBD7F428D29223
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/7BZeedmWNxSvPKrlY8KT7vjjkl0.asa
Signing time:             Wed 19 Aug 2026 19:55:27 +0000
ASPA not before:          Wed 19 Aug 2026 19:55:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219064
Providers:                AS: 49581
                          AS: 58212
                          AS: 137409
                          AS: 213520
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1b:97:cb:a8:21:6c:43:dd:e0:cb:d7:f4:28:d2:92:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
        Validity
            Not Before: Aug 19 19:55:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec165e79d9963714af3caae563c293eef8e3925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:ac:b3:4b:66:ef:72:6a:2c:7b:89:25:d9:
                    5d:cb:0a:5e:fb:b5:3d:9a:c5:51:c6:7b:b0:99:f6:
                    30:80:e2:0c:07:19:7b:56:42:89:9c:fb:bb:c0:5e:
                    3f:9a:a9:39:36:50:ea:e7:39:0c:36:bd:b0:c6:e6:
                    7a:bd:ee:08:77:17:d9:9f:a5:98:77:2f:65:9a:ee:
                    da:38:5b:1e:9f:64:00:30:2a:a5:85:38:5b:fb:56:
                    61:3c:02:b9:55:db:ba:f4:31:6a:ed:bf:f3:a0:f4:
                    18:4a:64:e9:26:5e:89:4f:ef:36:8d:14:06:8c:0f:
                    c8:1a:96:17:35:7f:a6:8a:89:6d:e2:4e:52:5d:c1:
                    a6:45:48:1f:a8:8f:a9:bc:e4:ae:a1:52:06:9b:41:
                    9a:36:f4:f6:2b:70:26:cd:d1:22:d3:2a:9b:ad:66:
                    f9:9d:08:d2:7a:87:94:dd:8c:1b:7f:a8:a1:e5:4b:
                    50:c2:4d:e9:a4:83:1f:a1:dd:79:65:b1:6f:42:80:
                    a1:90:2f:45:7f:20:22:dd:3f:6b:cf:00:64:42:5e:
                    8c:02:47:15:f7:14:38:fd:34:fd:44:2e:10:8c:3d:
                    46:9e:89:06:21:30:78:96:24:8b:4f:6a:c2:6a:d6:
                    4f:80:aa:f0:c1:55:c1:ae:a9:56:be:ef:73:7c:33:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:5E:79:D9:96:37:14:AF:3C:AA:E5:63:C2:93:EE:F8:E3:92:5D
            X509v3 Authority Key Identifier:
                keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/7BZeedmWNxSvPKrlY8KT7vjjkl0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219064

    Signature Algorithm: sha256WithRSAEncryption
         50:27:d6:f0:d1:09:0a:ad:a4:10:d7:9c:01:52:e8:f8:ce:90:
         e6:ce:f6:c4:f3:6a:96:7d:44:67:4a:d2:06:7d:1b:e9:d8:89:
         18:42:49:ca:e6:c9:25:53:89:74:ee:5e:d0:c4:a5:ce:11:52:
         25:d5:fc:34:62:14:de:63:4c:b0:f9:9c:e4:8e:c2:3b:f5:78:
         0d:59:cb:b4:05:b2:28:1e:a3:77:31:70:3e:47:51:37:22:24:
         d6:b0:6d:96:e5:94:58:f0:33:a4:4e:8f:75:16:f8:bf:8d:db:
         0e:35:ee:44:2c:ca:fd:4c:44:d2:d8:4b:18:e5:86:41:7a:cc:
         25:7a:e5:dc:47:17:f2:a1:1e:62:54:56:3e:cd:37:91:31:63:
         fa:bd:6b:43:91:29:94:37:e9:8c:2d:f6:58:19:17:46:5e:85:
         7f:d2:e7:7f:f4:1c:99:3e:33:34:9e:54:57:bb:f6:b4:d6:8c:
         13:bd:96:8b:88:9c:1b:4f:5b:b0:65:63:b0:3b:38:c8:c9:59:
         4d:da:02:ba:b3:1b:84:28:f5:7d:93:29:07:80:de:33:65:fc:
         b8:bc:f8:0f:b8:f5:fa:2c:2b:06:d7:16:6c:fc:1b:e7:6c:55:
         c7:fb:2f:4d:02:29:b7:c4:8b:13:19:90:45:c7:c1:98:01:65:
         a7:55:01:9c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaAbl8uoIWxD3eDL1/Qo0pIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUxZjhjMGFhNGJkMDM0YmVhZGRiMzM4OWJkNzM2Y2E0
NDNlYzAwHhcNMjYwODE5MTk1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzE2NWU3OWQ5OTYzNzE0YWYzY2FhZTU2M2MyOTNlZWY4ZTM5MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FGss0tm73JqLHuJJdldywpe+7U9
msVRxnuwmfYwgOIMBxl7VkKJnPu7wF4/mqk5NlDq5zkMNr2wxuZ6ve4IdxfZn6WY
dy9lmu7aOFsen2QAMCqlhThb+1ZhPAK5Vdu69DFq7b/zoPQYSmTpJl6JT+82jRQG
jA/IGpYXNX+miolt4k5SXcGmRUgfqI+pvOSuoVIGm0GaNvT2K3AmzdEi0yqbrWb5
nQjSeoeU3Ywbf6ih5UtQwk3ppIMfod15ZbFvQoChkC9FfyAi3T9rzwBkQl6MAkcV
9xQ4/TT9RC4QjD1GnokGITB4liSLT2rCatZPgKrwwVXBrqlWvu9zfDPp8wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOwWXnnZljcUrzyq5WPCk+7445JdMB8GA1UdIwQY
MBaAFJdOH4wKpL0DS+rdszib1zbKRD7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMt
ODU5Mjc4NjQ4MTEyLzEvN0JaZWVkbVdOeFN2UEtybFk4S1Q3dmpqa2wwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMtODU5Mjc4NjQ4MTEy
LzEvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNXuDANBgkqhkiG
9w0BAQsFAAOCAQEAUCfW8NEJCq2kENecAVLo+M6Q5s72xPNqln1EZ0rSBn0b6diJ
GEJJyubJJVOJdO5e0MSlzhFSJdX8NGIU3mNMsPmc5I7CO/V4DVnLtAWyKB6jdzFw
PkdRNyIk1rBtluWUWPAzpE6PdRb4v43bDjXuRCzK/UxE0thLGOWGQXrMJXrl3EcX
8qEeYlRWPs03kTFj+r1rQ5EplDfpjC32WBkXRl6Ff9Lnf/QcmT4zNJ5UV7v2tNaM
E72Wi4icG09bsGVjsDs4yMlZTdoCurMbhCj1fZMpB4DeM2X8uLz4D7j1+iwrBtcW
bPwb52xVx/svTQIpt8SLExmQRcfBmAFlp1UBnA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:49 2026 by rpki-client