Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/lXV32X79w4UTFHhLN_yUCd-Dpt8.asa
File:                     lXV32X79w4UTFHhLN_yUCd-Dpt8.asa (raw, json)
Hash identifier:          ePLhNqdI3ZuZTZSWnit7eTonIRBYqpL6u07KsloVVUQ=
Subject key identifier:   95:75:77:D9:7E:FD:C3:85:13:14:78:4B:37:FC:94:09:DF:83:A6:DF
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019F0FDCCC7047C4C8FC424B708B57BE9DA3
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/lXV32X79w4UTFHhLN_yUCd-Dpt8.asa
Signing time:             Sun 28 Jun 2026 20:12:36 +0000
ASPA not before:          Sun 28 Jun 2026 20:12:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206345
Providers:                AS: 12880
                          AS: 24631
                          AS: 42337
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0f:dc:cc:70:47:c4:c8:fc:42:4b:70:8b:57:be:9d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Jun 28 20:12:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=957577d97efdc3851314784b37fc9409df83a6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:3c:ad:ba:08:3e:ea:c4:4e:83:9d:29:39:
                    67:48:5a:f6:42:82:94:8c:64:0a:17:e3:76:9f:09:
                    6c:43:29:ce:4a:54:b4:e3:c2:76:54:9c:f3:d0:e8:
                    66:85:71:44:4d:c5:64:fb:c2:e3:56:02:95:29:d2:
                    6f:6e:21:1e:73:c9:68:ba:5c:b5:69:05:c5:db:99:
                    a3:14:2e:c6:f5:ae:0c:f1:83:1c:60:1f:a6:1d:f1:
                    bc:12:fe:14:3f:77:48:a2:20:21:da:4b:77:85:39:
                    35:68:af:bf:5c:6c:bc:4c:dd:d9:3b:db:1f:aa:05:
                    ce:c3:ae:89:f8:84:eb:43:ea:5b:17:0a:51:09:2b:
                    1e:b9:cb:2b:a0:7a:e4:3c:dd:84:9a:f5:8f:7b:f8:
                    14:75:9c:6c:59:07:f9:d8:6d:69:8d:77:68:66:1a:
                    35:de:71:34:40:da:4a:1e:b0:38:be:64:27:53:3a:
                    76:81:60:fc:f0:b6:5d:88:1d:15:68:40:aa:96:b5:
                    79:a6:14:9b:ee:55:23:94:35:1e:60:cb:b2:f4:95:
                    bb:16:51:eb:32:ba:33:65:8b:0d:43:d3:3b:1a:87:
                    99:1a:88:60:a4:89:76:0a:6c:54:3a:0a:b6:d4:e9:
                    ab:06:e9:eb:88:a6:0d:38:41:ef:c5:a8:db:e4:43:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:75:77:D9:7E:FD:C3:85:13:14:78:4B:37:FC:94:09:DF:83:A6:DF
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/lXV32X79w4UTFHhLN_yUCd-Dpt8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206345

    Signature Algorithm: sha256WithRSAEncryption
         23:80:1f:08:d6:d5:95:dc:97:e9:c2:42:2c:75:bc:c0:e0:ba:
         2a:8a:13:44:38:11:97:90:f4:b4:61:e0:f9:d6:87:f4:ed:7d:
         32:32:82:09:a7:36:68:5f:f4:8e:2d:f1:e3:50:d5:bf:ff:ec:
         c0:12:f6:15:aa:94:ff:f7:37:83:2b:ce:d7:51:ec:b8:a8:c3:
         97:90:53:5b:ed:0d:90:e8:de:a0:45:99:8d:36:14:dd:12:3e:
         5e:16:69:ef:a4:ad:b2:87:77:6b:b5:ef:c1:67:35:2a:5c:09:
         c8:f4:67:a5:bd:15:16:bd:34:60:7a:73:74:04:84:af:2e:f8:
         3b:ca:d0:86:6b:98:ef:f9:27:9c:c8:d6:ae:28:77:ab:6d:a3:
         13:11:f8:92:41:f6:3f:e7:74:ed:1f:68:cb:6c:2e:73:e4:6c:
         4e:57:45:b2:23:4e:d4:55:68:1e:13:fc:a5:de:01:c2:2b:c7:
         55:5b:86:a6:54:72:80:d6:14:7c:ae:05:56:bc:3b:e0:a6:40:
         1c:90:9f:6c:49:9c:1e:97:15:00:d3:6e:e9:55:c9:22:83:d1:
         cf:87:9a:56:73:62:1d:5f:35:95:f1:73:22:6a:c3:66:5f:fc:
         0e:1b:51:ce:1a:26:f9:81:fd:32:c9:d3:70:fd:12:19:59:d0:
         da:6c:75:22
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8P3MxwR8TI/EJLcItXvp2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVjOGVkOGZjOTNmNzIzMzRmN2E5NzRhNDZiYzI3ZDEx
MDI5MjMwHhcNMjYwNjI4MjAxMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTc1NzdkOTdlZmRjMzg1MTMxNDc4NGIzN2ZjOTQwOWRmODNhNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjA8rboIPurEToOdKTlnSFr2QoKU
jGQKF+N2nwlsQynOSlS048J2VJzz0OhmhXFETcVk+8LjVgKVKdJvbiEec8louly1
aQXF25mjFC7G9a4M8YMcYB+mHfG8Ev4UP3dIoiAh2kt3hTk1aK+/XGy8TN3ZO9sf
qgXOw66J+ITrQ+pbFwpRCSseucsroHrkPN2EmvWPe/gUdZxsWQf52G1pjXdoZho1
3nE0QNpKHrA4vmQnUzp2gWD88LZdiB0VaECqlrV5phSb7lUjlDUeYMuy9JW7FlHr
MrozZYsNQ9M7GoeZGohgpIl2CmxUOgq21OmrBunriKYNOEHvxajb5ENWJQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJV1d9l+/cOFExR4Szf8lAnfg6bfMB8GA1UdIwQY
MBaAFAtuyO2PyT9yM096l0pGvCfRECkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMt
MDQ3Nzc1MTI5MTQ4LzEvbFhWMzJYNzl3NFVURkhoTE5feVVDZC1EcHQ4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMtMDQ3Nzc1MTI5MTQ4
LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmCTANBgkqhkiG
9w0BAQsFAAOCAQEAI4AfCNbVldyX6cJCLHW8wOC6KooTRDgRl5D0tGHg+daH9O19
MjKCCac2aF/0ji3x41DVv//swBL2FaqU//c3gyvO11HsuKjDl5BTW+0NkOjeoEWZ
jTYU3RI+XhZp76Stsod3a7XvwWc1KlwJyPRnpb0VFr00YHpzdASEry74O8rQhmuY
7/knnMjWrih3q22jExH4kkH2P+d07R9oy2wuc+RsTldFsiNO1FVoHhP8pd4BwivH
VVuGplRygNYUfK4FVrw74KZAHJCfbEmcHpcVANNu6VXJIoPRz4eaVnNiHV81lfFz
ImrDZl/8DhtRzhom+YH9MsnTcP0SGVnQ2mx1Ig==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:29 2026 by rpki-client