Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/yWZjwgK_zBlNd2juVD4oVapdlMg.asa
File:                     yWZjwgK_zBlNd2juVD4oVapdlMg.asa (raw, json)
Hash identifier:          U4eiI8+MSAZPx+jFMOc1Ujl5VwHHTNfYAQ0NIwtlr90=
Subject key identifier:   C9:66:63:C2:02:BF:CC:19:4D:77:68:EE:54:3E:28:55:AA:5D:94:C8
Certificate issuer:       /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial:       01A04DE9069FC7579DFB28713732D5CC61A1
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/yWZjwgK_zBlNd2juVD4oVapdlMg.asa
Signing time:             Sat 29 Aug 2026 14:25:12 +0000
ASPA not before:          Sat 29 Aug 2026 14:25:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214382
Providers:                AS: 59796
                          AS: 60446
                          AS: 208972
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4d:e9:06:9f:c7:57:9d:fb:28:71:37:32:d5:cc:61:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
        Validity
            Not Before: Aug 29 14:25:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c96663c202bfcc194d7768ee543e2855aa5d94c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:87:d9:a6:95:8b:48:9b:1f:87:97:ba:02:
                    b4:ac:d1:4e:78:32:db:b7:72:66:d2:6e:39:27:5d:
                    57:9a:88:e2:34:2c:e7:7c:b8:5e:4f:0c:e3:5f:25:
                    92:d0:96:a8:4c:a0:1d:1a:13:17:ec:fe:ca:1d:08:
                    95:71:58:c9:4c:07:3a:08:1e:26:5d:81:78:8e:a1:
                    b1:be:c7:89:dc:bd:29:b0:44:c8:95:83:e9:fc:9e:
                    66:d5:01:27:58:ee:a1:dc:ce:8d:fa:cf:1c:99:59:
                    89:0a:f9:25:ac:30:5d:2b:d3:58:d3:fe:6d:1a:31:
                    98:f4:b0:bc:8c:05:2e:f5:97:83:0c:f4:30:ad:47:
                    8f:1c:2d:15:81:40:9e:d9:d7:c1:fa:05:ec:8a:c0:
                    c5:cb:e2:0b:a3:4d:ee:97:7c:8a:eb:f0:d3:c5:12:
                    10:e2:20:e8:e5:f4:34:0c:ac:2b:80:f9:46:05:b5:
                    6c:14:40:40:30:49:1a:d4:e9:4a:24:e5:f4:bd:75:
                    b6:ef:e7:19:06:a0:f0:b1:08:a8:2e:9f:8b:cd:83:
                    98:dd:4d:c9:4c:bb:ef:ec:5b:43:dd:8a:8b:dd:21:
                    2d:5e:3d:dd:cd:df:81:10:b3:b0:ca:8e:5d:20:75:
                    f4:e5:2e:08:15:26:b5:f6:d8:84:d6:47:47:01:b7:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:63:C2:02:BF:CC:19:4D:77:68:EE:54:3E:28:55:AA:5D:94:C8
            X509v3 Authority Key Identifier:
                keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/yWZjwgK_zBlNd2juVD4oVapdlMg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214382

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:48:9c:00:86:fc:2f:cc:78:20:c4:7a:0d:bb:7c:80:c4:
         e3:20:01:86:d5:92:c7:24:0b:ec:ce:08:88:0d:ec:2a:9a:5c:
         ef:34:26:7f:4b:04:b6:58:ee:ac:35:ee:18:77:d9:45:2a:b7:
         04:e7:c6:4c:3e:97:f6:10:02:08:2f:73:c1:1b:fa:80:ea:02:
         d4:39:88:6e:55:3f:d5:d2:65:af:97:56:ad:2f:71:75:10:3e:
         d0:7c:86:18:07:fc:44:85:41:f6:3f:8f:b3:41:57:b3:9e:a1:
         27:e1:18:08:e7:4a:c6:9f:3a:59:f9:3f:f6:53:1a:9e:8d:c6:
         92:18:49:df:9b:ad:70:f5:2d:2d:32:43:b0:ef:c6:60:0d:51:
         5c:ef:54:47:57:e9:75:d9:50:f0:a0:f7:d0:e6:b0:d5:e6:42:
         f0:f7:a7:26:da:e8:56:9d:22:8b:66:b8:0e:ff:f1:30:aa:e5:
         f0:33:a0:69:05:c1:c2:49:a2:24:04:19:76:83:f6:ac:89:e8:
         95:12:1f:f3:d9:8b:b0:d5:b3:97:5d:4b:c9:98:5c:69:69:66:
         ca:d4:9f:fe:c7:01:7a:0c:93:62:38:66:3d:9c:62:ba:4d:82:
         85:fe:ee:69:74:91:bc:16:18:8a:80:cf:d8:63:cc:47:11:d2:
         a3:31:d5:e2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBN6Qafx1ed+yhxNzLVzGGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjU1MTBkYTE0YTkzMGFkNzFlMWRlM2E1MjljN2NjMWJm
NGM1YWMwHhcNMjYwODI5MTQyNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTY2NjNjMjAyYmZjYzE5NGQ3NzY4ZWU1NDNlMjg1NWFhNWQ5NGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VKH2aaVi0ibH4eXugK0rNFOeDLb
t3Jm0m45J11XmojiNCznfLheTwzjXyWS0JaoTKAdGhMX7P7KHQiVcVjJTAc6CB4m
XYF4jqGxvseJ3L0psETIlYPp/J5m1QEnWO6h3M6N+s8cmVmJCvklrDBdK9NY0/5t
GjGY9LC8jAUu9ZeDDPQwrUePHC0VgUCe2dfB+gXsisDFy+ILo03ul3yK6/DTxRIQ
4iDo5fQ0DKwrgPlGBbVsFEBAMEka1OlKJOX0vXW27+cZBqDwsQioLp+LzYOY3U3J
TLvv7FtD3YqL3SEtXj3dzd+BELOwyo5dIHX05S4IFSa19tiE1kdHAbfnAwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMlmY8ICv8wZTXdo7lQ+KFWqXZTIMB8GA1UdIwQY
MBaAFES1UQ2hSpMK1x4d46Upx8wb9MWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUt
ODZjM2IzMWEyZjhjLzEveVdaandnS196QmxOZDJqdVZENG9WYXBkbE1nLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUtODZjM2IzMWEyZjhj
LzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNFbjANBgkqhkiG
9w0BAQsFAAOCAQEACiJInACG/C/MeCDEeg27fIDE4yABhtWSxyQL7M4IiA3sKppc
7zQmf0sEtljurDXuGHfZRSq3BOfGTD6X9hACCC9zwRv6gOoC1DmIblU/1dJlr5dW
rS9xdRA+0HyGGAf8RIVB9j+Ps0FXs56hJ+EYCOdKxp86Wfk/9lMano3GkhhJ35ut
cPUtLTJDsO/GYA1RXO9UR1fpddlQ8KD30Oaw1eZC8PenJtroVp0ii2a4Dv/xMKrl
8DOgaQXBwkmiJAQZdoP2rInolRIf89mLsNWzl11LyZhcaWlmytSf/scBegyTYjhm
PZxiuk2Chf7uaXSRvBYYioDP2GPMRxHSozHV4g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:25:29 2026 by rpki-client