Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dopT_B_M8PSXQcW_dJcC8Whu40E.asa
File:                     dopT_B_M8PSXQcW_dJcC8Whu40E.asa (raw, json)
Hash identifier:          1TjCbtz4HncYYy34XdNCFAEKJieC1scAG4tkzHmHMzs=
Subject key identifier:   76:8A:53:FC:1F:CC:F0:F4:97:41:C5:BF:74:97:02:F1:68:6E:E3:41
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       019E88B24CEEEBA75A014528BA757585B538
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dopT_B_M8PSXQcW_dJcC8Whu40E.asa
Signing time:             Tue 02 Jun 2026 14:17:26 +0000
ASPA not before:          Tue 02 Jun 2026 14:17:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6837
Providers:                AS: 3303
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:b2:4c:ee:eb:a7:5a:01:45:28:ba:75:75:85:b5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jun  2 14:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=768a53fc1fccf0f49741c5bf749702f1686ee341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:3e:4c:3a:35:87:8f:ab:e5:8a:02:23:27:
                    95:0b:2d:63:f3:94:09:af:bc:01:c3:67:5c:4c:92:
                    35:87:1f:44:29:aa:24:75:20:14:d6:ec:17:a2:e5:
                    5f:18:25:c0:06:a2:18:ee:d5:59:63:7e:ca:ca:c9:
                    a2:be:5b:77:dd:3c:3e:b9:3e:79:dc:dd:67:1f:19:
                    90:eb:bc:69:ea:4f:f4:58:53:36:97:6b:5b:ff:44:
                    11:1f:07:1e:9a:77:6b:79:8d:30:6f:ec:b4:9d:f5:
                    be:75:6b:3a:0d:c1:f9:03:fb:2a:ba:4a:5b:fd:82:
                    32:97:97:f2:3e:ab:72:ca:6f:9a:b2:92:c9:fe:a9:
                    d5:7e:cd:b9:ac:80:ae:ce:64:2e:70:70:f0:a4:cb:
                    6c:76:20:98:81:82:f4:30:62:0c:fd:51:be:c7:3e:
                    a3:96:f4:47:32:c7:8c:af:ae:86:c4:af:1f:39:76:
                    96:b4:fa:6a:80:49:3f:ec:2e:49:c5:42:64:93:f7:
                    9a:39:a9:eb:9d:fb:87:03:ad:bf:76:ba:9a:79:00:
                    27:9b:f8:d9:84:1e:3b:10:c8:46:43:31:16:9d:0a:
                    d2:44:4a:2a:2c:ed:8d:2b:a1:80:d6:21:e8:75:a7:
                    96:55:8f:12:3c:90:b0:00:9a:74:44:95:0c:de:5d:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:53:FC:1F:CC:F0:F4:97:41:C5:BF:74:97:02:F1:68:6E:E3:41
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dopT_B_M8PSXQcW_dJcC8Whu40E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6837

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:6e:19:e8:c6:31:55:29:f5:02:b6:01:ca:d1:c8:5c:77:
         97:12:55:a0:7b:52:56:c5:a7:e3:36:20:e9:88:5e:94:7b:1e:
         71:c6:c2:c0:8a:27:84:ce:67:db:0c:76:8e:87:66:74:79:77:
         c4:5a:cb:d9:8a:80:e1:82:38:d3:b4:9c:41:b0:4a:22:81:da:
         5e:99:d0:e7:36:00:c7:a6:02:c0:2e:4f:fe:b6:46:25:b4:d7:
         35:0b:c5:aa:8f:cc:a2:a8:99:d8:7f:07:f2:04:fa:76:af:d4:
         11:a0:8b:06:8f:bc:a0:57:a3:9d:59:af:4f:60:51:c0:4d:09:
         3a:cb:21:90:57:91:7f:72:a3:d7:fd:00:7e:d8:36:2a:9f:f7:
         0d:5d:4f:fe:78:e8:93:35:a7:62:4e:ca:9a:96:79:5b:42:b2:
         96:82:c9:17:7c:5d:a0:1f:a3:b2:fc:b7:a6:ce:98:a3:b5:34:
         99:eb:0d:a1:93:e1:bc:ff:c7:4d:dd:5f:9f:02:b6:29:02:9d:
         aa:86:a1:56:3e:10:88:76:57:59:47:ee:70:ed:f4:9b:7d:57:
         46:63:c8:b6:d1:44:54:21:fa:ad:b2:5e:c6:73:1b:31:63:27:
         82:9d:b5:fc:e5:33:b5:59:a8:8a:2c:eb:4d:2e:f7:87:a7:a3:
         31:35:df:75
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ6Iskzu66daAUUounV1hbU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjYwNjAyMTQxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjhhNTNmYzFmY2NmMGY0OTc0MWM1YmY3NDk3MDJmMTY4NmVlMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOU+TDo1h4+r5YoCIyeVCy1j85QJ
r7wBw2dcTJI1hx9EKaokdSAU1uwXouVfGCXABqIY7tVZY37Kysmivlt33Tw+uT55
3N1nHxmQ67xp6k/0WFM2l2tb/0QRHwcemndreY0wb+y0nfW+dWs6DcH5A/squkpb
/YIyl5fyPqtyym+aspLJ/qnVfs25rICuzmQucHDwpMtsdiCYgYL0MGIM/VG+xz6j
lvRHMseMr66GxK8fOXaWtPpqgEk/7C5JxUJkk/eaOanrnfuHA62/drqaeQAnm/jZ
hB47EMhGQzEWnQrSREoqLO2NK6GA1iHodaeWVY8SPJCwAJp0RJUM3l1oZQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFHaKU/wfzPD0l0HFv3SXAvFobuNBMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvZG9wVF9CX004UFNYUWNXX2RKY0M4V2h1NDBFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhq1MA0GCSqGSIb3
DQEBCwUAA4IBAQCkBm4Z6MYxVSn1ArYBytHIXHeXElWge1JWxafjNiDpiF6Uex5x
xsLAiieEzmfbDHaOh2Z0eXfEWsvZioDhgjjTtJxBsEoigdpemdDnNgDHpgLALk/+
tkYltNc1C8Wqj8yiqJnYfwfyBPp2r9QRoIsGj7ygV6OdWa9PYFHATQk6yyGQV5F/
cqPX/QB+2DYqn/cNXU/+eOiTNadiTsqalnlbQrKWgskXfF2gH6Oy/LemzpijtTSZ
6w2hk+G8/8dN3V+fArYpAp2qhqFWPhCIdldZR+5w7fSbfVdGY8i20URUIfqtsl7G
cxsxYyeCnbX85TO1WaiKLOtNLveHp6MxNd91
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:34 2026 by rpki-client