Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa
File:                     eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa (raw, json)
Hash identifier:          oREm2BU1au2wLbubTl/7hfGGiO50t8g7O52UFNL9Yd4=
Subject key identifier:   78:EF:60:14:E1:76:0C:55:40:69:24:02:FA:A5:3C:09:CE:6D:52:F9
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       019EE7AFF1D6E171D896CFB6EC0F9A2F9841
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa
Signing time:             Sun 21 Jun 2026 00:58:48 +0000
ASPA not before:          Sun 21 Jun 2026 00:58:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198839
Providers:                AS: 57797
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:af:f1:d6:e1:71:d8:96:cf:b6:ec:0f:9a:2f:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Jun 21 00:58:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78ef6014e1760c5540692402faa53c09ce6d52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:25:bb:be:58:39:35:7b:d2:d2:d0:aa:45:
                    b3:c0:b9:e8:eb:3d:f2:ea:af:47:b4:d4:e3:73:69:
                    5f:fb:14:2e:d2:d3:6a:0f:6e:c9:8a:4f:28:4d:e1:
                    44:cd:25:df:ab:39:71:d7:88:8f:e4:05:20:77:3e:
                    7d:48:1d:bb:b6:5b:50:49:d0:66:2d:dd:6e:1a:1f:
                    25:3d:ea:b8:e8:fa:11:65:07:5c:0d:c1:19:d3:9d:
                    66:05:5c:eb:1f:fa:b4:81:67:b3:c5:ad:7d:d5:16:
                    12:2b:db:64:de:d6:83:3d:1b:82:04:89:6f:f0:b4:
                    78:93:0c:26:90:9b:9b:db:4f:f6:78:55:5b:e4:c4:
                    8f:f4:c8:1b:b9:8b:bd:47:b1:15:8b:a3:03:02:9f:
                    43:5f:e5:5a:e8:10:de:7e:5b:d3:38:f7:77:f3:c3:
                    89:0b:dd:61:9d:0c:d3:54:7c:28:c7:70:56:39:bf:
                    07:35:29:64:cd:6c:ce:d3:bb:81:de:21:6e:72:30:
                    07:00:2f:c6:ab:3d:84:b6:51:54:e9:33:bb:ce:ff:
                    09:d7:bd:c5:18:d0:e5:d1:51:96:fe:4c:04:4c:3e:
                    49:92:3f:59:af:d4:3e:8f:03:33:0f:d4:0f:47:0f:
                    39:2e:18:ab:7f:7a:57:c3:25:a4:89:38:f9:06:7c:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EF:60:14:E1:76:0C:55:40:69:24:02:FA:A5:3C:09:CE:6D:52:F9
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/eO9gFOF2DFVAaSQC-qU8Cc5tUvk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198839

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:ab:97:e5:46:94:78:75:b7:a0:bd:51:43:19:f8:a5:b4:
         6d:53:a7:44:18:9e:ba:93:99:26:74:62:d7:f7:56:71:e8:0c:
         fe:ce:29:a0:4d:6c:ab:96:94:6f:e0:1c:4a:a2:56:4e:75:1b:
         19:45:e7:e8:55:f7:d6:6d:e4:7a:23:75:94:73:5e:8f:da:fe:
         31:d0:a5:78:85:15:a0:96:81:6c:f0:f0:17:a0:c3:c6:7b:6a:
         09:c9:77:98:38:4f:f5:d2:23:b8:9c:8d:4e:23:20:d2:f0:9e:
         7f:c3:17:67:b4:56:51:97:81:ac:1d:59:5a:c8:74:95:c9:5f:
         3e:39:db:4b:5a:ba:29:7b:bd:df:d6:b0:cd:ba:36:be:21:fa:
         59:29:ed:83:36:3e:dc:6b:1e:da:f2:dc:2f:e8:b0:b5:40:6c:
         47:31:8a:8c:7a:56:5b:62:f5:2f:ec:b8:dd:fb:5a:50:30:e5:
         ff:d6:18:8a:2e:29:29:20:bd:11:05:a3:e0:af:e1:d3:13:9a:
         cf:3a:fb:4e:f9:fe:44:f4:97:2e:39:60:b0:59:4c:a7:4e:3d:
         48:5d:32:5b:6b:6f:4e:e3:85:a8:ac:c8:94:f4:e4:87:d8:ba:
         a4:d5:e7:26:3b:74:04:bf:49:8f:df:9f:df:fe:aa:8a:33:a2:
         bc:e6:b4:f8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ7nr/HW4XHYls+27A+aL5hBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjYwNjIxMDA1ODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGVmNjAxNGUxNzYwYzU1NDA2OTI0MDJmYWE1M2MwOWNlNmQ1MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhglu75YOTV70tLQqkWzwLno6z3y
6q9HtNTjc2lf+xQu0tNqD27Jik8oTeFEzSXfqzlx14iP5AUgdz59SB27tltQSdBm
Ld1uGh8lPeq46PoRZQdcDcEZ051mBVzrH/q0gWezxa191RYSK9tk3taDPRuCBIlv
8LR4kwwmkJub20/2eFVb5MSP9MgbuYu9R7EVi6MDAp9DX+Va6BDeflvTOPd388OJ
C91hnQzTVHwox3BWOb8HNSlkzWzO07uB3iFucjAHAC/Gqz2EtlFU6TO7zv8J173F
GNDl0VGW/kwETD5Jkj9Zr9Q+jwMzD9QPRw85Lhirf3pXwyWkiTj5Bnx1oQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHjvYBThdgxVQGkkAvqlPAnObVL5MB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvZU85Z0ZPRjJERlZBYVNRQy1xVThDYzV0VXZrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMItzANBgkqhkiG
9w0BAQsFAAOCAQEARH2rl+VGlHh1t6C9UUMZ+KW0bVOnRBieupOZJnRi1/dWcegM
/s4poE1sq5aUb+AcSqJWTnUbGUXn6FX31m3keiN1lHNej9r+MdCleIUVoJaBbPDw
F6DDxntqCcl3mDhP9dIjuJyNTiMg0vCef8MXZ7RWUZeBrB1ZWsh0lclfPjnbS1q6
KXu939awzbo2viH6WSntgzY+3Gse2vLcL+iwtUBsRzGKjHpWW2L1L+y43ftaUDDl
/9YYii4pKSC9EQWj4K/h0xOazzr7Tvn+RPSXLjlgsFlMp049SF0yW2tvTuOFqKzI
lPTkh9i6pNXnJjt0BL9Jj9+f3/6qijOivOa0+A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:53 2026 by rpki-client