Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/4n02TxuOf2ywJSAjKw6VPCZcn9E.asa
File:                     4n02TxuOf2ywJSAjKw6VPCZcn9E.asa (raw, json)
Hash identifier:          OQDIVrvJye3nEoAmjwb/FmK9E09Wjl5aNHmQrS/hccM=
Subject key identifier:   E2:7D:36:4F:1B:8E:7F:6C:B0:25:20:23:2B:0E:95:3C:26:5C:9F:D1
Certificate issuer:       /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial:       019FE60676C069A15E7771329BF7354BE064
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/4n02TxuOf2ywJSAjKw6VPCZcn9E.asa
Signing time:             Sun 09 Aug 2026 10:16:51 +0000
ASPA not before:          Sun 09 Aug 2026 10:16:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215007
Providers:                AS: 20473
                          AS: 34927
                          AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:06:76:c0:69:a1:5e:77:71:32:9b:f7:35:4b:e0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
        Validity
            Not Before: Aug  9 10:16:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e27d364f1b8e7f6cb02520232b0e953c265c9fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:04:2d:c3:86:aa:4f:b4:ad:27:c3:1e:2a:
                    83:04:d7:19:0a:7d:75:1b:11:77:17:bd:6f:92:98:
                    fb:85:45:7d:f4:81:07:cf:92:09:f0:4b:2f:dc:d1:
                    2c:c1:c6:76:0d:0d:97:1d:c3:dc:db:04:53:1d:4a:
                    6e:f5:81:a5:77:e7:85:03:20:46:80:ae:f4:fd:8c:
                    30:33:10:0c:ed:6c:23:1c:cc:5a:e3:e5:d8:dd:08:
                    4d:0b:75:36:d2:a1:fd:17:05:b0:cc:26:7c:ee:6a:
                    56:cb:e3:4f:41:13:40:da:7e:37:c7:2b:ba:a1:38:
                    8d:8a:52:71:a9:e8:30:92:db:a4:b7:9a:3d:65:bf:
                    4e:73:38:7c:f5:1a:2b:48:17:57:20:46:35:8c:b6:
                    95:19:2e:8c:82:3b:39:cd:4c:7e:24:79:78:68:c5:
                    39:0f:17:d5:46:20:fe:4d:42:35:4a:57:57:a8:eb:
                    0b:3d:9d:6a:17:7e:28:68:3f:f8:f2:5c:e5:b7:93:
                    5a:29:92:2a:07:c4:ec:de:12:59:98:24:8b:d5:0f:
                    09:b5:c2:6c:2e:5b:c8:80:bf:24:60:97:d6:24:ce:
                    9c:f8:7c:67:c5:3e:6f:05:b1:e1:d1:92:70:90:43:
                    75:e0:1e:03:db:b8:11:b4:b9:62:e5:28:50:59:65:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7D:36:4F:1B:8E:7F:6C:B0:25:20:23:2B:0E:95:3C:26:5C:9F:D1
            X509v3 Authority Key Identifier:
                keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/4n02TxuOf2ywJSAjKw6VPCZcn9E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215007

    Signature Algorithm: sha256WithRSAEncryption
         76:90:0e:bf:3d:6c:d9:ec:5e:2d:51:bf:58:82:89:60:33:a0:
         dc:0e:6c:21:85:e4:26:23:18:0d:fc:49:83:1c:c2:61:97:46:
         c4:cf:22:5f:54:3f:b4:06:b8:e1:86:73:e4:05:e5:32:27:5c:
         65:80:2a:55:4d:77:0d:3e:1a:f1:31:82:b5:a9:e6:d8:a1:33:
         e6:f8:72:01:1f:00:7e:d9:c8:7b:4c:1d:00:75:48:45:c7:2d:
         94:1d:b6:01:4e:c4:eb:cd:07:1c:ec:78:42:2a:dd:05:c9:63:
         71:9d:c6:71:2f:13:6f:b2:82:99:4d:23:2a:ef:fb:64:78:fd:
         69:10:01:64:10:b8:f2:1e:b9:3f:54:48:fb:fa:7c:e1:10:e8:
         30:11:79:d2:59:5a:09:a2:57:00:e9:88:58:63:80:bd:04:17:
         0f:c5:63:7c:db:47:a9:81:24:e5:c1:a3:d2:56:4d:cf:55:58:
         04:78:1c:f6:94:1f:1e:4d:13:01:81:80:23:db:d8:58:57:80:
         21:9f:47:ec:48:a3:8d:9b:fc:25:73:6a:cf:ce:01:74:23:dd:
         09:fc:3a:ef:32:ab:dd:6d:47:0a:e0:f9:4c:15:2c:11:c4:87:
         86:8f:d3:cb:0e:04:7f:77:d6:3a:4d:8e:9e:a2:00:6f:0d:fd:
         2b:7a:4a:08
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/mBnbAaaFed3Eym/c1S+BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3
NWZmOTMwHhcNMjYwODA5MTAxNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjdkMzY0ZjFiOGU3ZjZjYjAyNTIwMjMyYjBlOTUzYzI2NWM5ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8ELcOGqk+0rSfDHiqDBNcZCn11
GxF3F71vkpj7hUV99IEHz5IJ8Esv3NEswcZ2DQ2XHcPc2wRTHUpu9YGld+eFAyBG
gK70/YwwMxAM7WwjHMxa4+XY3QhNC3U20qH9FwWwzCZ87mpWy+NPQRNA2n43xyu6
oTiNilJxqegwktukt5o9Zb9Oczh89RorSBdXIEY1jLaVGS6Mgjs5zUx+JHl4aMU5
DxfVRiD+TUI1SldXqOsLPZ1qF34oaD/48lzlt5NaKZIqB8Ts3hJZmCSL1Q8JtcJs
LlvIgL8kYJfWJM6c+HxnxT5vBbHh0ZJwkEN14B4D27gRtLli5ShQWWWyOwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOJ9Nk8bjn9ssCUgIysOlTwmXJ/RMB8GA1UdIwQY
MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt
ZjI4ZDk3MmM4ODA4LzEvNG4wMlR4dU9mMnl3SlNBakt3NlZQQ1pjbjlFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4
LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNH3zANBgkqhkiG
9w0BAQsFAAOCAQEAdpAOvz1s2exeLVG/WIKJYDOg3A5sIYXkJiMYDfxJgxzCYZdG
xM8iX1Q/tAa44YZz5AXlMidcZYAqVU13DT4a8TGCtanm2KEz5vhyAR8AftnIe0wd
AHVIRcctlB22AU7E680HHOx4QirdBcljcZ3GcS8Tb7KCmU0jKu/7ZHj9aRABZBC4
8h65P1RI+/p84RDoMBF50llaCaJXAOmIWGOAvQQXD8VjfNtHqYEk5cGj0lZNz1VY
BHgc9pQfHk0TAYGAI9vYWFeAIZ9H7EijjZv8JXNqz84BdCPdCfw67zKr3W1HCuD5
TBUsEcSHho/Tyw4Ef3fWOk2OnqIAbw39K3pKCA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:21 2026 by rpki-client