Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pX2BLV73ZA1--bHg570MWb7LT3Y.asa
File:                     pX2BLV73ZA1--bHg570MWb7LT3Y.asa (raw, json)
Hash identifier:          4OwO4p8LtLY/CQnIDarXvEFkSUeHXEPMqFHsgef2Z58=
Subject key identifier:   A5:7D:81:2D:5E:F7:64:0D:7E:F9:B1:E0:E7:BD:0C:59:BE:CB:4F:76
Certificate issuer:       /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial:       019EFA286FC2EB4F924845B3ED4E35684D81
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pX2BLV73ZA1--bHg570MWb7LT3Y.asa
Signing time:             Wed 24 Jun 2026 15:03:34 +0000
ASPA not before:          Wed 24 Jun 2026 15:03:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201043
Providers:                AS: 15965
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fa:28:6f:c2:eb:4f:92:48:45:b3:ed:4e:35:68:4d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
        Validity
            Not Before: Jun 24 15:03:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a57d812d5ef7640d7ef9b1e0e7bd0c59becb4f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:d4:19:81:7e:c9:cb:23:9e:48:b2:36:18:
                    6b:29:f5:7a:67:a7:8c:af:6d:e1:a8:91:58:aa:2b:
                    ea:b3:91:06:61:16:bf:27:9a:01:53:f3:bb:af:85:
                    b2:25:c6:2a:0a:72:1d:93:3b:88:74:04:e8:6d:07:
                    f6:80:4f:fc:67:19:14:91:60:4b:54:e3:c0:df:b8:
                    d8:31:b1:db:92:14:d7:a9:6f:63:8f:66:73:47:30:
                    52:1a:95:da:34:43:27:05:98:e5:e6:38:aa:37:1c:
                    57:0f:86:9f:40:6c:98:7c:be:75:8e:bd:dd:3a:d5:
                    55:5d:e8:f6:35:b6:e4:d3:7e:43:91:7f:a7:d7:26:
                    a2:1e:fa:00:28:10:d2:bc:1c:64:9f:11:7a:3c:94:
                    ac:f4:67:f4:e7:3a:b4:e9:a2:6b:ef:10:fd:c4:61:
                    38:f6:5d:fa:a7:04:57:c0:15:36:b4:6f:fe:ac:63:
                    b3:44:a0:e5:c7:51:18:1a:1c:2e:c5:63:76:00:6f:
                    ea:6d:0c:40:b8:9f:50:10:72:5a:b4:a8:ab:f4:ea:
                    6e:7f:ae:26:a6:ee:73:4a:49:f2:c2:56:88:32:4d:
                    4f:54:d1:ae:98:a0:e4:8d:25:13:f3:3a:b2:16:6f:
                    89:f9:22:4e:f0:99:f3:cb:30:57:a0:a3:a1:c7:83:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:81:2D:5E:F7:64:0D:7E:F9:B1:E0:E7:BD:0C:59:BE:CB:4F:76
            X509v3 Authority Key Identifier:
                keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pX2BLV73ZA1--bHg570MWb7LT3Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201043

    Signature Algorithm: sha256WithRSAEncryption
         32:7c:02:0d:e6:bf:d7:21:d2:4f:c6:bd:60:56:e4:b1:14:ba:
         49:73:6c:2e:9b:4e:29:1e:ad:fc:26:67:24:2c:fd:ce:96:aa:
         10:6c:8c:81:0e:52:e4:25:fa:4f:cf:47:7c:0c:0b:2c:de:0e:
         ad:12:f3:2b:4f:78:05:8c:1d:ec:41:77:04:dd:62:b2:bf:85:
         fe:5e:0b:cb:83:1a:ab:74:3d:06:9e:83:3f:53:d7:52:b6:68:
         2d:a5:96:f3:b9:b0:f5:d4:0c:3c:dc:14:08:c2:9c:7e:19:47:
         fc:64:87:cb:8b:18:fb:dc:a6:3d:bf:10:60:f4:06:6e:82:36:
         6e:65:44:7e:25:3f:5c:5f:d5:ee:b4:46:7b:91:74:42:31:3e:
         22:a3:b1:6a:05:41:d1:d6:0d:50:f6:e7:fd:ad:05:99:6b:70:
         8e:8d:17:02:a4:fa:cd:6f:40:54:e2:a5:b7:71:90:fe:e1:ae:
         a1:38:94:ee:00:07:2b:e4:d6:8d:f5:43:31:3e:19:53:a5:a0:
         37:ec:57:27:b5:a1:df:08:de:61:16:1c:c6:34:a8:e5:1e:d7:
         11:a8:08:ea:d9:2a:e4:80:59:d4:7e:39:36:e3:b7:5b:6f:4d:
         26:55:1c:e6:08:d3:86:37:19:cf:19:30:a3:82:cf:12:aa:ac:
         85:77:4b:d1
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ76KG/C60+SSEWz7U41aE2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2IwN2ViZDM3NDdlNjAwZjhjMjY0ZDk3OTJkZTM0NGY4
YWE3YWQwHhcNMjYwNjI0MTUwMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTdkODEyZDVlZjc2NDBkN2VmOWIxZTBlN2JkMGM1OWJlY2I0Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHUGYF+ycsjnkiyNhhrKfV6Z6eM
r23hqJFYqivqs5EGYRa/J5oBU/O7r4WyJcYqCnIdkzuIdATobQf2gE/8ZxkUkWBL
VOPA37jYMbHbkhTXqW9jj2ZzRzBSGpXaNEMnBZjl5jiqNxxXD4afQGyYfL51jr3d
OtVVXej2Nbbk035DkX+n1yaiHvoAKBDSvBxknxF6PJSs9Gf05zq06aJr7xD9xGE4
9l36pwRXwBU2tG/+rGOzRKDlx1EYGhwuxWN2AG/qbQxAuJ9QEHJatKir9Opuf64m
pu5zSknywlaIMk1PVNGumKDkjSUT8zqyFm+J+SJO8JnzyzBXoKOhx4M5QQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKV9gS1e92QNfvmx4Oe9DFm+y092MB8GA1UdIwQY
MBaAFKY7B+vTdH5gD4wmTZeS3jRPiqetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpzSDY5TjBmbUFQakNaTmw1TGVORS1LcDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NDE1MWEtZmQ5Ny00OTFhLWFmM2It
NDBmNDgyMjZlY2VmLzEvcFgyQkxWNzNaQTEtLWJIZzU3ME1XYjdMVDNZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81NDE1MWEtZmQ5Ny00OTFhLWFmM2ItNDBmNDgyMjZlY2Vm
LzEvcGpzSDY5TjBmbUFQakNaTmw1TGVORS1LcDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRUzANBgkqhkiG
9w0BAQsFAAOCAQEAMnwCDea/1yHST8a9YFbksRS6SXNsLptOKR6t/CZnJCz9zpaq
EGyMgQ5S5CX6T89HfAwLLN4OrRLzK094BYwd7EF3BN1isr+F/l4Ly4Maq3Q9Bp6D
P1PXUrZoLaWW87mw9dQMPNwUCMKcfhlH/GSHy4sY+9ymPb8QYPQGboI2bmVEfiU/
XF/V7rRGe5F0QjE+IqOxagVB0dYNUPbn/a0FmWtwjo0XAqT6zW9AVOKlt3GQ/uGu
oTiU7gAHK+TWjfVDMT4ZU6WgN+xXJ7Wh3wjeYRYcxjSo5R7XEagI6tkq5IBZ1H45
NuO3W29NJlUc5gjThjcZzxkwo4LPEqqshXdL0Q==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:37 2026 by rpki-client