Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ds0n2ZSGr6lzH_BKgSBM0s4IR00.asa
File:                     ds0n2ZSGr6lzH_BKgSBM0s4IR00.asa (raw, json)
Hash identifier:          0XZ+NfANmGAu3bQUiYLMW90HY2aS/IFGB0s76ds+jSg=
Subject key identifier:   76:CD:27:D9:94:86:AF:A9:73:1F:F0:4A:81:20:4C:D2:CE:08:47:4D
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       019E88D083E3F501C88F30D80EE39D04448A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ds0n2ZSGr6lzH_BKgSBM0s4IR00.asa
Signing time:             Tue 02 Jun 2026 14:50:27 +0000
ASPA not before:          Tue 02 Jun 2026 14:50:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205762
Providers:                AS: 3303
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:d0:83:e3:f5:01:c8:8f:30:d8:0e:e3:9d:04:44:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jun  2 14:50:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76cd27d99486afa9731ff04a81204cd2ce08474d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:2f:2d:0b:4c:b6:e5:5a:b1:bb:36:e4:f1:
                    8f:7c:3a:2d:15:ea:9d:e7:f5:a3:32:de:fb:ce:ea:
                    43:17:b0:67:b6:a8:36:31:08:6e:5e:93:30:96:d5:
                    d7:e9:da:3c:98:cb:d1:b2:24:1f:a0:a0:80:4a:bc:
                    99:5d:c1:94:49:0d:e0:6c:96:7b:a4:1b:01:4c:9e:
                    fc:5d:ed:66:3d:85:28:c5:55:3e:65:64:86:bf:8f:
                    b2:42:ca:21:c2:99:67:00:23:49:0b:31:87:00:9c:
                    98:f3:63:83:13:3e:9c:ee:cf:60:cc:16:ef:7e:44:
                    4e:9c:aa:c8:42:6b:6b:fb:df:44:cd:52:93:19:c9:
                    20:49:03:3a:e5:c6:63:ec:98:5f:54:f8:fc:41:fa:
                    18:3f:6e:55:8c:0f:f7:55:a1:01:3f:2c:5f:61:d7:
                    7b:6e:9a:f6:bf:7a:ee:c0:79:15:99:cb:a4:9f:92:
                    1f:8a:1c:2f:fd:18:50:2e:1e:09:24:69:f0:56:be:
                    57:de:26:92:9d:62:b2:51:f1:da:51:f1:59:0b:cd:
                    e1:66:d4:c8:a9:fc:ad:11:e2:4c:50:1d:66:13:d3:
                    79:11:c0:ff:29:78:8c:10:f8:48:d6:4f:9c:c4:ab:
                    88:8d:9e:be:e3:e1:fa:d6:91:a2:61:34:50:71:48:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:27:D9:94:86:AF:A9:73:1F:F0:4A:81:20:4C:D2:CE:08:47:4D
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ds0n2ZSGr6lzH_BKgSBM0s4IR00.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205762

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:f6:94:15:42:0f:64:83:2d:f8:53:88:2e:42:ca:88:2e:
         a9:82:ca:2b:58:ee:4f:60:7f:f5:46:eb:94:62:1e:70:4e:43:
         74:24:ca:5f:f9:4e:d2:7a:37:e3:b2:82:c3:1d:d5:78:da:08:
         a1:c5:f5:55:32:b2:e9:25:6c:8a:83:e0:ce:e7:0c:76:64:c0:
         41:c6:b7:6e:07:31:84:6d:1a:c4:04:7c:2c:42:71:3e:7f:e5:
         f4:ef:4e:a3:50:c2:1c:2e:55:f6:ac:e9:bf:0a:bf:25:46:09:
         64:c4:a9:1f:dd:f9:4f:ed:f0:df:d7:4f:bf:75:e5:f1:4a:a3:
         0e:e6:fe:e9:bb:69:69:91:74:06:dd:91:27:53:cd:62:5d:1d:
         4e:98:a5:97:75:10:43:d9:8b:4c:1a:b5:6a:6a:c6:98:27:29:
         ae:fb:af:e2:22:70:b7:03:a2:a9:06:5d:02:32:d4:5f:da:d6:
         c7:37:94:77:96:5c:42:d9:f3:a8:a3:30:da:eb:61:d5:60:92:
         b6:76:4c:72:b9:53:ff:e2:d9:c3:01:b7:68:42:a6:04:ba:dc:
         bb:45:e5:04:bc:1c:ba:98:11:9f:a4:b8:d0:92:6c:3c:34:0e:
         fb:5c:c4:85:2c:9c:13:58:f0:af:2e:71:ce:9c:cc:f4:78:de:
         c1:99:39:5e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6I0IPj9QHIjzDYDuOdBESKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjYwNjAyMTQ1MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmNkMjdkOTk0ODZhZmE5NzMxZmYwNGE4MTIwNGNkMmNlMDg0NzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYMvLQtMtuVasbs25PGPfDotFeqd
5/WjMt77zupDF7Bntqg2MQhuXpMwltXX6do8mMvRsiQfoKCASryZXcGUSQ3gbJZ7
pBsBTJ78Xe1mPYUoxVU+ZWSGv4+yQsohwplnACNJCzGHAJyY82ODEz6c7s9gzBbv
fkROnKrIQmtr+99EzVKTGckgSQM65cZj7JhfVPj8QfoYP25VjA/3VaEBPyxfYdd7
bpr2v3ruwHkVmcukn5Ifihwv/RhQLh4JJGnwVr5X3iaSnWKyUfHaUfFZC83hZtTI
qfytEeJMUB1mE9N5EcD/KXiMEPhI1k+cxKuIjZ6+4+H61pGiYTRQcUiedQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHbNJ9mUhq+pcx/wSoEgTNLOCEdNMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvZHMwbjJaU0dyNmx6SF9CS2dTQk0wczRJUjAwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjwjANBgkqhkiG
9w0BAQsFAAOCAQEAD9P2lBVCD2SDLfhTiC5CyoguqYLKK1juT2B/9UbrlGIecE5D
dCTKX/lO0no347KCwx3VeNoIocX1VTKy6SVsioPgzucMdmTAQca3bgcxhG0axAR8
LEJxPn/l9O9Oo1DCHC5V9qzpvwq/JUYJZMSpH935T+3w39dPv3Xl8UqjDub+6btp
aZF0Bt2RJ1PNYl0dTpill3UQQ9mLTBq1amrGmCcprvuv4iJwtwOiqQZdAjLUX9rW
xzeUd5ZcQtnzqKMw2uth1WCStnZMcrlT/+LZwwG3aEKmBLrcu0XlBLwcupgRn6S4
0JJsPDQO+1zEhSycE1jwry5xzpzM9HjewZk5Xg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:37 2026 by rpki-client