Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/T154cUqD6P053fy8MQj4JLmRnPQ.asa
File:                     T154cUqD6P053fy8MQj4JLmRnPQ.asa (raw, json)
Hash identifier:          uOniOU2mDzmU1kYiYRIMPMEIVUqPTiRiSpgSMkLZL+Q=
Subject key identifier:   4F:5E:78:71:4A:83:E8:FD:39:DD:FC:BC:31:08:F8:24:B9:91:9C:F4
Certificate issuer:       /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial:       019F2369240E8E694988716A70FF1DA3F822
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/T154cUqD6P053fy8MQj4JLmRnPQ.asa
Signing time:             Thu 02 Jul 2026 15:18:40 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8300
Providers:                AS: 3303
                          AS: 3320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:24:0e:8e:69:49:88:71:6a:70:ff:1d:a3:f8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
        Validity
            Not Before: Jul  2 15:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f5e78714a83e8fd39ddfcbc3108f824b9919cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:0b:dc:13:37:75:8d:35:fe:0d:fe:ea:be:
                    5d:d7:94:11:10:bf:c9:39:25:4c:3d:e0:3c:6d:aa:
                    07:e0:f2:61:e9:c3:4a:2a:18:bd:e7:5b:94:05:09:
                    61:b4:76:35:2b:b1:f4:7a:56:25:9b:cf:87:5d:64:
                    4d:2c:95:a0:21:1f:18:22:a6:6d:9a:e0:4b:c5:86:
                    04:cc:9e:e5:ac:61:e6:54:ed:08:05:44:91:ad:c6:
                    af:a1:31:1d:ba:f3:64:47:b1:44:5f:bb:92:73:db:
                    6e:b0:6b:9b:21:5d:49:78:4b:40:be:7e:48:48:c7:
                    50:7e:67:c3:0e:ab:ec:77:ee:82:3d:f3:90:08:fc:
                    e7:6b:24:6e:17:e6:0e:f1:55:0b:fd:60:9f:2a:d1:
                    76:9c:d2:e2:63:fe:9f:6b:14:72:36:56:6e:b1:04:
                    c9:58:6f:49:a2:81:ad:7a:e3:e6:7d:d8:45:20:d2:
                    e9:8d:ad:4f:c8:f0:d8:70:ab:9f:48:6d:c8:ee:ed:
                    01:12:04:e5:7b:e1:2a:72:c0:4b:f2:d3:86:5c:43:
                    c2:dd:00:e6:75:08:fa:62:59:1b:13:eb:5e:b3:7e:
                    a4:6f:d5:f5:e8:2f:a5:64:a6:fa:3f:ea:ef:4c:68:
                    72:58:e0:c2:54:9a:e4:ce:6a:42:eb:59:2d:41:94:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:78:71:4A:83:E8:FD:39:DD:FC:BC:31:08:F8:24:B9:91:9C:F4
            X509v3 Authority Key Identifier:
                keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/T154cUqD6P053fy8MQj4JLmRnPQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8300

    Signature Algorithm: sha256WithRSAEncryption
         55:26:b9:9e:4a:79:1d:40:92:71:40:f7:c5:4e:97:23:33:cd:
         38:c2:eb:e8:a0:28:d1:ab:22:73:31:2c:ce:49:0b:84:b8:2e:
         87:02:b6:d5:2d:f7:ee:30:6d:ee:5a:1a:e2:1d:ac:5d:29:80:
         bd:eb:73:b0:fb:b4:9c:50:67:6b:b9:0b:3b:98:98:2a:c6:ca:
         ce:3d:c3:10:64:b2:1c:b0:dd:ba:61:b6:2a:5e:96:6d:84:af:
         00:ae:1d:a5:c4:94:b8:80:6c:98:d7:8f:9d:0d:2c:c8:10:46:
         bd:9f:48:f2:2d:ee:c4:6b:60:c3:b7:3a:de:b5:bf:6e:4b:2c:
         66:c9:95:2f:19:eb:13:7c:2d:76:98:be:5d:a8:f5:f0:58:c3:
         18:f5:44:e2:9b:ac:03:40:0b:b2:d0:22:a3:12:87:a1:68:a9:
         98:ed:20:8c:30:db:4a:af:d3:fb:7e:e0:96:05:c2:60:67:37:
         fc:92:66:06:54:d4:80:fc:da:fb:9c:ad:43:ff:84:3a:20:65:
         8f:da:99:fa:19:fa:f6:df:81:fa:63:36:dc:fc:52:c6:24:8d:
         9c:1a:8b:d8:8c:dd:23:28:23:b0:2c:1d:01:0c:de:ae:e9:ae:
         e3:43:7e:69:5e:ea:63:5e:82:06:89:a1:4d:bc:42:30:6f:43:
         d3:87:e7:f0
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ8jaSQOjmlJiHFqcP8do/giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjVlNzg3MTRhODNlOGZkMzlkZGZjYmMzMTA4ZjgyNGI5OTE5Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/UL3BM3dY01/g3+6r5d15QREL/J
OSVMPeA8baoH4PJh6cNKKhi951uUBQlhtHY1K7H0elYlm8+HXWRNLJWgIR8YIqZt
muBLxYYEzJ7lrGHmVO0IBUSRrcavoTEduvNkR7FEX7uSc9tusGubIV1JeEtAvn5I
SMdQfmfDDqvsd+6CPfOQCPznayRuF+YO8VUL/WCfKtF2nNLiY/6faxRyNlZusQTJ
WG9JooGteuPmfdhFINLpja1PyPDYcKufSG3I7u0BEgTle+EqcsBL8tOGXEPC3QDm
dQj6YlkbE+tes36kb9X16C+lZKb6P+rvTGhyWODCVJrkzmpC61ktQZRQIQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFE9eeHFKg+j9Od38vDEI+CS5kZz0MB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvVDE1NGNVcUQ2UDA1M2Z5OE1RajRKTG1SblBRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBsMA0GCSqGSIb3
DQEBCwUAA4IBAQBVJrmeSnkdQJJxQPfFTpcjM804wuvooCjRqyJzMSzOSQuEuC6H
ArbVLffuMG3uWhriHaxdKYC963Ow+7ScUGdruQs7mJgqxsrOPcMQZLIcsN26YbYq
XpZthK8Arh2lxJS4gGyY14+dDSzIEEa9n0jyLe7Ea2DDtzretb9uSyxmyZUvGesT
fC12mL5dqPXwWMMY9UTim6wDQAuy0CKjEoehaKmY7SCMMNtKr9P7fuCWBcJgZzf8
kmYGVNSA/Nr7nK1D/4Q6IGWP2pn6Gfr234H6Yzbc/FLGJI2cGovYjN0jKCOwLB0B
DN6u6a7jQ35pXupjXoIGiaFNvEIwb0PTh+fw
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:43 2026 by rpki-client