Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/rq8fVy_3dv_hEfgcgLt4mNXf4U0.asa
File:                     rq8fVy_3dv_hEfgcgLt4mNXf4U0.asa (raw, json)
Hash identifier:          lh12xKEgsspU1dqaHHeAh416Bc+pwI6DydGksLG3AAE=
Subject key identifier:   AE:AF:1F:57:2F:F7:76:FF:E1:11:F8:1C:80:BB:78:98:D5:DF:E1:4D
Certificate issuer:       /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial:       019FD62B108CD0816D08821ABA8BDBD3DB28
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/rq8fVy_3dv_hEfgcgLt4mNXf4U0.asa
Signing time:             Thu 06 Aug 2026 08:22:54 +0000
ASPA not before:          Thu 06 Aug 2026 08:22:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212855
Providers:                AS: 8283
                          AS: 8298
                          AS: 41051
                          AS: 50869
                          AS: 200132
                          AS: 203291
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:2b:10:8c:d0:81:6d:08:82:1a:ba:8b:db:d3:db:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
        Validity
            Not Before: Aug  6 08:22:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aeaf1f572ff776ffe111f81c80bb7898d5dfe14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:76:8d:50:55:10:ac:f3:9b:65:64:0d:a9:
                    03:e5:f6:35:29:8e:9c:3f:77:65:2f:27:0a:dd:07:
                    58:a1:d3:19:b0:c4:75:06:7d:fc:ab:0b:b6:c5:2b:
                    58:59:d3:8e:3c:f5:6a:bf:a3:4b:4f:30:34:a5:5d:
                    42:74:a0:43:de:b9:09:f0:b3:80:b6:45:8e:5f:92:
                    9f:83:3d:c3:4a:86:bd:1d:22:79:e3:11:08:20:53:
                    23:85:16:d7:25:26:47:84:36:91:60:96:2b:1b:ff:
                    bf:9a:c3:a7:7d:e8:cd:67:1f:46:a1:cb:e3:ca:52:
                    f7:2e:8e:f9:e5:50:d9:31:80:a2:60:20:16:54:cf:
                    c9:ed:e6:65:d8:95:d5:9a:f1:31:53:4d:35:af:44:
                    91:87:96:04:6c:7c:3f:6f:fb:39:94:23:b1:eb:e6:
                    34:d5:d7:44:2b:8b:15:89:1f:85:9f:17:7f:cb:00:
                    df:54:26:57:60:be:e0:92:0e:63:f2:27:f3:e1:77:
                    e5:85:e0:a9:09:aa:0b:ae:da:92:3a:ad:56:82:a8:
                    35:4b:6c:33:85:dd:da:96:6c:fd:7e:e4:01:ed:97:
                    90:d6:ab:1d:d3:c1:b9:2e:d8:88:e2:a6:c8:90:8b:
                    a1:84:09:6d:4f:04:76:e5:30:19:29:66:d6:62:2e:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AF:1F:57:2F:F7:76:FF:E1:11:F8:1C:80:BB:78:98:D5:DF:E1:4D
            X509v3 Authority Key Identifier:
                keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/rq8fVy_3dv_hEfgcgLt4mNXf4U0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212855

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:fe:f8:44:47:97:0c:eb:58:70:55:e8:33:10:ea:b9:70:
         b2:0e:3b:57:bc:07:92:42:ab:f8:04:49:b8:a8:d2:eb:41:41:
         09:2e:99:1d:58:24:42:89:21:92:8f:40:7c:f6:ac:22:a5:ff:
         c7:0b:f7:2a:f6:cc:46:10:8c:09:51:d1:60:cf:f2:6b:fe:70:
         80:48:0f:02:fc:4a:94:c1:7b:60:74:c0:a8:ff:35:2f:78:8e:
         99:e2:95:e3:6d:60:f2:6d:cb:ac:ee:88:df:fd:c4:67:e7:2f:
         7f:31:59:5e:b8:87:c8:5c:df:b2:3e:70:da:61:56:9a:47:1e:
         3d:17:48:a4:cd:51:87:a9:57:b5:3f:8c:3f:60:0b:65:45:81:
         d8:35:58:49:60:e3:1c:18:6f:9e:2f:f3:92:29:04:b5:53:23:
         f3:a9:25:10:5c:93:d8:d9:4f:36:78:56:45:94:80:6b:ee:d8:
         e7:99:e2:22:7a:63:22:31:88:10:4d:a5:17:5a:cc:58:6d:08:
         32:f0:d9:c1:bf:24:c6:48:fd:40:f9:8b:8b:7d:21:52:db:ae:
         08:7e:15:c9:a4:d8:7a:e0:d4:eb:51:1c:91:8a:b5:b5:f2:db:
         04:ed:1e:ed:10:e7:05:03:a6:6b:d5:53:61:5f:bb:cd:c5:ee:
         3e:7c:7e:10
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/WKxCM0IFtCIIauovb09soMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlkMDVlMmEzMjFhZWNiYTRlY2M0YWJlYzBmNzhlYWNk
ZTU1YjAwHhcNMjYwODA2MDgyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWFmMWY1NzJmZjc3NmZmZTExMWY4MWM4MGJiNzg5OGQ1ZGZlMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGF2jVBVEKzzm2VkDakD5fY1KY6c
P3dlLycK3QdYodMZsMR1Bn38qwu2xStYWdOOPPVqv6NLTzA0pV1CdKBD3rkJ8LOA
tkWOX5Kfgz3DSoa9HSJ54xEIIFMjhRbXJSZHhDaRYJYrG/+/msOnfejNZx9Gocvj
ylL3Lo755VDZMYCiYCAWVM/J7eZl2JXVmvExU001r0SRh5YEbHw/b/s5lCOx6+Y0
1ddEK4sViR+Fnxd/ywDfVCZXYL7gkg5j8ifz4XflheCpCaoLrtqSOq1Wgqg1S2wz
hd3almz9fuQB7ZeQ1qsd08G5LtiI4qbIkIuhhAltTwR25TAZKWbWYi6BKQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFK6vH1cv93b/4RH4HIC7eJjV3+FNMB8GA1UdIwQY
MBaAFI+p0F4qMhrsuk7MSr7A946s3lWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYt
ODNmYmQ4NjY2OTk0LzEvcnE4ZlZ5XzNkdl9oRWZnY2dMdDRtTlhmNFUwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYtODNmYmQ4NjY2OTk0
LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/dzANBgkqhkiG
9w0BAQsFAAOCAQEAMfT++ERHlwzrWHBV6DMQ6rlwsg47V7wHkkKr+ARJuKjS60FB
CS6ZHVgkQokhko9AfPasIqX/xwv3KvbMRhCMCVHRYM/ya/5wgEgPAvxKlMF7YHTA
qP81L3iOmeKV421g8m3LrO6I3/3EZ+cvfzFZXriHyFzfsj5w2mFWmkcePRdIpM1R
h6lXtT+MP2ALZUWB2DVYSWDjHBhvni/zkikEtVMj86klEFyT2NlPNnhWRZSAa+7Y
55niInpjIjGIEE2lF1rMWG0IMvDZwb8kxkj9QPmLi30hUtuuCH4VyaTYeuDU61Ec
kYq1tfLbBO0e7RDnBQOma9VTYV+7zcXuPnx+EA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:20 2026 by rpki-client