Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/MHpsCZyP0IVYMoHWzqfloOQWEZE.asa
File:                     MHpsCZyP0IVYMoHWzqfloOQWEZE.asa (raw, json)
Hash identifier:          hTcP8Hkd9/FsM/qMperPFuWrlLFufrbGXDvfXB44n3Y=
Subject key identifier:   30:7A:6C:09:9C:8F:D0:85:58:32:81:D6:CE:A7:E5:A0:E4:16:11:91
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       01A03250950972D5B721C289F9D71969F696
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/MHpsCZyP0IVYMoHWzqfloOQWEZE.asa
Signing time:             Mon 24 Aug 2026 05:48:56 +0000
ASPA not before:          Mon 24 Aug 2026 05:48:56 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203309
Providers:                AS: 6939
                          AS: 11421
                          AS: 34927
                          AS: 44324
                          AS: 153376
                          AS: 204211
                          AS: 204539
                          AS: 206069
                          AS: 213605
                          AS: 215172
                          AS: 402298
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 23:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:32:50:95:09:72:d5:b7:21:c2:89:f9:d7:19:69:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Aug 24 05:48:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=307a6c099c8fd085583281d6cea7e5a0e4161191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:4f:a9:16:0e:3a:43:c2:b4:e9:5b:47:4a:
                    4c:0a:42:6c:e3:9a:3f:bf:aa:00:90:dd:2b:06:b6:
                    dd:52:61:2e:ee:96:a4:8c:66:f5:57:f6:9c:d9:d4:
                    14:c2:00:88:bc:36:10:2c:fc:8e:dd:95:f8:44:a9:
                    3c:a1:1e:1e:90:51:d2:88:39:c3:85:bd:12:40:52:
                    c8:11:be:6c:5c:b2:41:9c:86:ef:16:ba:e2:92:20:
                    32:e8:ae:5a:fa:f4:32:0e:d1:e9:08:4c:ae:92:0f:
                    18:69:a0:c4:d9:0d:bb:b6:de:7e:d3:34:a0:e0:56:
                    63:f3:10:92:4d:96:f9:a0:aa:0e:1d:1c:00:c5:27:
                    04:bf:a7:2a:46:23:da:5e:b9:6c:8f:1f:27:dc:b3:
                    39:a3:c3:55:51:14:bf:e9:83:16:2f:b8:16:21:9e:
                    e4:e6:11:03:f8:00:c0:ae:86:96:14:9a:d1:87:9b:
                    d2:ff:2b:34:c8:6f:f9:24:c8:9d:23:92:e4:79:19:
                    61:50:62:17:34:f1:db:19:e9:15:44:59:ab:a0:c1:
                    00:7d:fb:35:85:1e:cc:bc:a2:29:05:9a:61:5d:96:
                    4e:80:f8:a6:69:fb:f2:31:2d:46:df:3b:33:0a:d0:
                    dd:22:e2:7b:5c:88:80:92:23:45:a0:44:01:00:d1:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7A:6C:09:9C:8F:D0:85:58:32:81:D6:CE:A7:E5:A0:E4:16:11:91
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/MHpsCZyP0IVYMoHWzqfloOQWEZE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203309

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:31:15:42:10:15:5f:86:da:29:a5:0e:47:3e:7d:5b:dc:
         43:66:b6:36:8d:e8:4a:57:be:d8:4e:75:5c:46:b8:4b:03:b0:
         93:16:1a:26:ee:4a:ef:30:12:d9:6f:bd:42:18:73:e1:0a:af:
         0d:c1:6e:02:4f:88:54:d0:d4:5d:c8:75:8f:85:53:a6:f4:10:
         07:a2:5c:92:92:5d:f1:91:65:d1:63:d6:66:0e:ef:e7:98:e4:
         dd:a7:4c:4d:83:f4:c3:b9:c9:4c:24:1b:ee:18:aa:db:7a:92:
         be:a3:55:0c:a8:f9:8d:65:89:42:a8:d1:85:46:e3:d0:fc:a6:
         a4:ff:b7:bb:5f:ae:86:00:d1:31:fc:a5:d1:c0:05:03:dc:5e:
         eb:aa:3c:19:e7:25:77:3d:48:9c:ea:1b:09:32:58:0c:e1:eb:
         fa:11:26:05:c5:09:f9:a3:28:bd:12:60:29:dd:1d:97:d7:32:
         2c:34:4f:40:3e:20:5d:37:6c:37:d7:86:37:ea:14:90:01:09:
         4e:36:53:96:dd:ad:73:79:fc:cd:f8:98:26:b1:92:9a:9f:91:
         3b:b4:7c:a4:19:c2:e5:17:e4:93:e5:3f:30:3a:9b:f3:90:b1:
         cc:48:57:7e:fe:c1:31:8b:f7:28:b2:8f:65:02:5e:6f:30:a3:
         03:d9:fb:5b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaAyUJUJctW3IcKJ+dcZafaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2MwYmYzOTE5MzM5Mjc3ZWFkNmJhMWQ5NTVjYjVmNmMz
OThkZGUwHhcNMjYwODI0MDU0ODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDdhNmMwOTljOGZkMDg1NTgzMjgxZDZjZWE3ZTVhMGU0MTYxMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRtPqRYOOkPCtOlbR0pMCkJs45o/
v6oAkN0rBrbdUmEu7pakjGb1V/ac2dQUwgCIvDYQLPyO3ZX4RKk8oR4ekFHSiDnD
hb0SQFLIEb5sXLJBnIbvFrrikiAy6K5a+vQyDtHpCEyukg8YaaDE2Q27tt5+0zSg
4FZj8xCSTZb5oKoOHRwAxScEv6cqRiPaXrlsjx8n3LM5o8NVURS/6YMWL7gWIZ7k
5hED+ADAroaWFJrRh5vS/ys0yG/5JMidI5LkeRlhUGIXNPHbGekVRFmroMEAffs1
hR7MvKIpBZphXZZOgPimafvyMS1G3zszCtDdIuJ7XIiAkiNFoEQBANFWsQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDB6bAmcj9CFWDKB1s6n5aDkFhGRMB8GA1UdIwQY
MBaAFP7MC/ORkzknfq1rodlVy19sOY3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUt
ZTFlNmU5NWI0YjdjLzEvTUhwc0NaeVAwSVZZTW9IV3pxZmxvT1FXRVpFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUtZTFlNmU5NWI0Yjdj
LzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMaLTANBgkqhkiG
9w0BAQsFAAOCAQEAN14xFUIQFV+G2imlDkc+fVvcQ2a2No3oSle+2E51XEa4SwOw
kxYaJu5K7zAS2W+9Qhhz4QqvDcFuAk+IVNDUXch1j4VTpvQQB6JckpJd8ZFl0WPW
Zg7v55jk3adMTYP0w7nJTCQb7hiq23qSvqNVDKj5jWWJQqjRhUbj0PympP+3u1+u
hgDRMfyl0cAFA9xe66o8Gecldz1InOobCTJYDOHr+hEmBcUJ+aMovRJgKd0dl9cy
LDRPQD4gXTdsN9eGN+oUkAEJTjZTlt2tc3n8zfiYJrGSmp+RO7R8pBnC5Rfkk+U/
MDqb85CxzEhXfv7BMYv3KLKPZQJebzCjA9n7Ww==
-----END CERTIFICATE-----
Generated at Wed Sep 9 09:31:54 2026 by rpki-client