Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa
File:                     8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa (raw, json)
Hash identifier:          B0eqzhP1emUlL5EQFCd5dAc0ZKS7qm56hxy/fQh8cL4=
Subject key identifier:   F1:92:E5:5C:1A:D1:91:19:84:65:AB:C0:81:56:F3:85:8B:8F:85:39
Certificate issuer:       /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial:       019FE644B82B89D4D6999B89F25140B6A6F1
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa
Signing time:             Sun 09 Aug 2026 11:24:50 +0000
ASPA not before:          Sun 09 Aug 2026 11:24:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202929
Providers:                AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:44:b8:2b:89:d4:d6:99:9b:89:f2:51:40:b6:a6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
        Validity
            Not Before: Aug  9 11:24:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f192e55c1ad191198465abc08156f3858b8f8539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:d6:ae:fc:0a:98:fa:e6:bd:0c:ea:68:3c:
                    02:44:8c:ef:44:8d:97:dc:d8:de:56:bf:e8:f1:07:
                    21:e7:64:bb:94:67:7c:51:eb:9a:50:3d:03:c6:b6:
                    22:26:62:0c:fc:19:97:18:58:19:df:2a:bd:99:6c:
                    0e:97:31:7e:89:62:82:eb:6e:9a:d3:f8:95:92:12:
                    11:b6:e8:7a:d7:a2:ae:72:db:f2:06:33:ad:96:0c:
                    9e:a0:9a:fb:bc:89:26:8f:41:b2:61:e7:d7:f7:e7:
                    52:9b:8e:6e:fd:2c:62:31:de:14:f7:74:99:90:d7:
                    25:bb:4a:b6:d4:ab:75:81:0f:66:e8:62:73:c3:a4:
                    d6:04:4c:97:2c:38:10:74:88:17:f1:90:61:f7:8d:
                    54:ba:9a:cc:b9:c8:2a:e6:ca:54:36:74:dc:74:fd:
                    0b:6a:71:31:bd:3d:0a:6c:b1:b2:ff:46:2a:a7:39:
                    7f:88:d6:ab:df:86:4e:6d:05:48:a6:f3:f4:49:16:
                    f5:09:9a:79:5c:ac:01:49:07:8e:9b:c5:a7:f0:d3:
                    2b:c2:aa:2c:3a:fb:fd:19:1c:87:c8:e4:13:63:ba:
                    00:fc:79:a8:d2:57:57:70:28:6c:2f:f7:64:0e:ab:
                    c1:d8:62:3f:fc:71:89:55:28:48:51:22:01:4e:7a:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:92:E5:5C:1A:D1:91:19:84:65:AB:C0:81:56:F3:85:8B:8F:85:39
            X509v3 Authority Key Identifier:
                keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202929

    Signature Algorithm: sha256WithRSAEncryption
         95:f1:0f:d9:97:fb:9d:60:e8:16:5a:1f:d6:10:7e:ed:2f:af:
         06:a4:6f:19:f7:9a:20:68:d4:4e:1a:e3:59:12:a5:5f:cf:bf:
         88:63:17:f5:f6:bf:76:dd:f6:18:69:8c:e6:0a:ed:e1:2b:64:
         2d:ff:97:94:68:09:11:38:c3:de:d4:58:53:60:66:50:db:9e:
         6f:60:ce:38:b0:3a:a5:26:3a:88:f9:e6:26:35:1b:91:e0:c8:
         b3:2f:1a:1e:6f:02:f8:9f:46:2e:c7:df:b5:1b:50:52:39:d0:
         d1:f0:88:47:61:5f:ca:7c:b3:63:c0:02:c9:54:ea:02:78:be:
         d5:0a:07:20:c2:84:79:91:e2:33:bf:31:61:74:19:5d:68:61:
         00:08:62:f9:16:2a:99:3b:8a:34:7a:e7:20:fa:bc:83:00:34:
         4a:94:ea:6f:19:62:05:8b:38:87:14:31:c4:92:41:7b:37:07:
         59:37:bb:b9:0e:80:16:24:d1:00:0c:3e:16:a9:11:cd:b8:12:
         e3:e7:08:42:5d:65:26:c3:8f:6c:5c:ba:b7:a3:f3:bf:31:87:
         12:ca:d4:6b:43:fc:a4:bb:84:42:37:5f:5c:a7:eb:d6:83:13:
         60:95:c4:73:f3:b1:f0:db:21:74:c1:ad:55:77:2b:3c:d0:d4:
         d3:50:2f:bc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/mRLgridTWmZuJ8lFAtqbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDk0MmJiN2JkMjRjYWRiNzQ4NWU4Y2VhNTkyNTA5YTNj
N2RhZjUwHhcNMjYwODA5MTEyNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTkyZTU1YzFhZDE5MTE5ODQ2NWFiYzA4MTU2ZjM4NThiOGY4NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqTWrvwKmPrmvQzqaDwCRIzvRI2X
3NjeVr/o8Qch52S7lGd8UeuaUD0DxrYiJmIM/BmXGFgZ3yq9mWwOlzF+iWKC626a
0/iVkhIRtuh616KuctvyBjOtlgyeoJr7vIkmj0GyYefX9+dSm45u/SxiMd4U93SZ
kNclu0q21Kt1gQ9m6GJzw6TWBEyXLDgQdIgX8ZBh941UuprMucgq5spUNnTcdP0L
anExvT0KbLGy/0Yqpzl/iNar34ZObQVIpvP0SRb1CZp5XKwBSQeOm8Wn8NMrwqos
Ovv9GRyHyOQTY7oA/Hmo0ldXcChsL/dkDqvB2GI//HGJVShIUSIBTnrZ1QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPGS5Vwa0ZEZhGWrwIFW84WLj4U5MB8GA1UdIwQY
MBaAFL9JQrt70kytt0hejOpZJQmjx9r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmIt
MmY5NDI1OGFiNjliLzEvOFpMbFhCclJrUm1FWmF2QWdWYnpoWXVQaFRrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmItMmY5NDI1OGFiNjli
LzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYsTANBgkqhkiG
9w0BAQsFAAOCAQEAlfEP2Zf7nWDoFlof1hB+7S+vBqRvGfeaIGjUThrjWRKlX8+/
iGMX9fa/dt32GGmM5grt4StkLf+XlGgJETjD3tRYU2BmUNueb2DOOLA6pSY6iPnm
JjUbkeDIsy8aHm8C+J9GLsfftRtQUjnQ0fCIR2FfynyzY8ACyVTqAni+1QoHIMKE
eZHiM78xYXQZXWhhAAhi+RYqmTuKNHrnIPq8gwA0SpTqbxliBYs4hxQxxJJBezcH
WTe7uQ6AFiTRAAw+FqkRzbgS4+cIQl1lJsOPbFy6t6PzvzGHEsrUa0P8pLuEQjdf
XKfr1oMTYJXEc/Ox8NshdMGtVXcrPNDU01AvvA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:38 2026 by rpki-client