Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/YRb1rJxymQrdoZNs0Yi98E1tbyI.asa
File:                     YRb1rJxymQrdoZNs0Yi98E1tbyI.asa (raw, json)
Hash identifier:          OxK5Y7erPk7xwdgOByVs1iOSMQETzfB6lXVza9DjCDA=
Subject key identifier:   61:16:F5:AC:9C:72:99:0A:DD:A1:93:6C:D1:88:BD:F0:4D:6D:6F:22
Certificate issuer:       /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial:       01A0F15B2E65F1C0D9E97024F695CCFA831B
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/YRb1rJxymQrdoZNs0Yi98E1tbyI.asa
Signing time:             Wed 30 Sep 2026 08:07:59 +0000
ASPA not before:          Wed 30 Sep 2026 08:07:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216384
Providers:                AS: 35168
                          AS: 51878
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:5b:2e:65:f1:c0:d9:e9:70:24:f6:95:cc:fa:83:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
        Validity
            Not Before: Sep 30 08:07:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6116f5ac9c72990adda1936cd188bdf04d6d6f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:6e:f9:c1:93:6e:41:6a:86:04:ca:df:db:
                    7c:97:94:95:d1:48:85:ae:52:e4:1c:67:3a:d8:68:
                    26:8d:43:eb:b2:36:2b:a8:25:e9:e9:c2:8c:6d:ef:
                    2f:33:84:9e:6c:d7:fe:a2:83:7e:11:a4:9c:0e:f8:
                    74:c2:5e:f5:1e:8a:c6:9d:02:bb:8a:7c:b9:51:ac:
                    a0:5f:02:6f:3f:6a:40:99:b7:ad:12:7d:f1:94:78:
                    6c:da:c0:80:9d:b0:ce:2c:62:99:19:2a:23:f8:d2:
                    f0:07:44:3a:8e:d9:59:09:55:a9:dd:00:86:c9:0a:
                    f8:8d:dd:47:9b:04:36:4d:6f:ba:b5:07:93:dc:05:
                    46:30:0d:69:39:50:44:07:e1:4c:a4:b9:dd:2a:58:
                    79:9d:b3:0e:8b:33:15:5e:81:d9:34:02:57:f6:f8:
                    98:07:79:83:6d:25:a5:3c:0d:30:2c:b3:8d:0c:62:
                    02:7a:68:3b:3e:35:45:9d:a1:62:db:1b:c3:8d:64:
                    3d:4c:d2:7b:85:1c:5f:1a:fb:dd:c4:f4:c8:e2:db:
                    fa:45:97:f1:09:23:8d:15:e8:53:a6:b7:64:60:30:
                    8c:fb:2b:b6:ff:3c:20:16:2b:ac:cb:9c:be:d0:02:
                    28:ec:e5:f6:8d:95:d4:95:8d:5f:51:c3:ff:3e:f8:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:16:F5:AC:9C:72:99:0A:DD:A1:93:6C:D1:88:BD:F0:4D:6D:6F:22
            X509v3 Authority Key Identifier:
                keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/YRb1rJxymQrdoZNs0Yi98E1tbyI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216384

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:60:43:fd:17:d9:a9:8e:00:d5:90:92:e1:0f:12:9a:23:
         4b:3f:6e:8d:74:a4:e7:f0:15:c4:6a:a1:fb:d6:fc:db:64:f7:
         34:17:f2:a2:0d:9a:02:ef:ba:1e:86:41:25:cc:a4:b6:43:08:
         c2:df:be:2d:5d:f5:f1:21:81:3b:88:bb:89:4b:95:cf:99:e9:
         51:c8:8c:94:58:9a:8b:e2:00:ff:00:e6:a8:a6:ef:1b:6e:43:
         08:dc:45:fe:63:3c:c0:9b:c2:e3:75:9c:5f:ca:2c:16:fa:c4:
         74:af:91:63:60:c1:89:9e:82:e5:06:3b:c0:6c:3b:cd:fc:79:
         a2:d3:16:d6:fc:60:35:5f:17:09:fc:ad:68:a4:97:97:d0:8c:
         ec:db:7f:42:e2:85:66:bb:72:f8:f4:66:b8:e9:1e:48:5e:aa:
         d1:ac:be:84:75:92:d1:66:bd:04:85:df:d2:90:01:65:cc:6e:
         f9:02:5a:ad:10:d4:49:d2:00:f5:b7:f9:80:a1:33:26:0f:23:
         69:94:14:ea:82:76:32:84:da:1c:77:5f:c3:2e:33:e4:b3:08:
         d1:0f:5e:39:67:6d:ae:1d:4a:c5:5e:a5:55:6d:7a:bd:b2:e3:
         4a:36:7d:77:71:2d:2c:44:9b:ce:77:af:96:46:54:58:8d:7e:
         79:d6:a4:e3
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDxWy5l8cDZ6XAk9pXM+oMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODg0YjhlNDYyZjNlYzEzYTQwMjRkNjY5YTk5ZDk0YWYw
NWNkYjIwHhcNMjYwOTMwMDgwNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTE2ZjVhYzljNzI5OTBhZGRhMTkzNmNkMTg4YmRmMDRkNmQ2ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvehu+cGTbkFqhgTK39t8l5SV0UiF
rlLkHGc62GgmjUPrsjYrqCXp6cKMbe8vM4SebNf+ooN+EaScDvh0wl71HorGnQK7
iny5UaygXwJvP2pAmbetEn3xlHhs2sCAnbDOLGKZGSoj+NLwB0Q6jtlZCVWp3QCG
yQr4jd1HmwQ2TW+6tQeT3AVGMA1pOVBEB+FMpLndKlh5nbMOizMVXoHZNAJX9viY
B3mDbSWlPA0wLLONDGICemg7PjVFnaFi2xvDjWQ9TNJ7hRxfGvvdxPTI4tv6RZfx
CSONFehTprdkYDCM+yu2/zwgFiusy5y+0AIo7OX2jZXUlY1fUcP/Pvj1QQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGEW9ayccpkK3aGTbNGIvfBNbW8iMB8GA1UdIwQY
MBaAFN6IS45GLz7BOkAk1mmpnZSvBc2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUt
NGFmNzA0MDJiMjcwLzEvWVJiMXJKeHltUXJkb1pOczBZaTk4RTF0YnlJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUtNGFmNzA0MDJiMjcw
LzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNQDANBgkqhkiG
9w0BAQsFAAOCAQEAhrRgQ/0X2amOANWQkuEPEpojSz9ujXSk5/AVxGqh+9b822T3
NBfyog2aAu+6HoZBJcyktkMIwt++LV318SGBO4i7iUuVz5npUciMlFiai+IA/wDm
qKbvG25DCNxF/mM8wJvC43WcX8osFvrEdK+RY2DBiZ6C5QY7wGw7zfx5otMW1vxg
NV8XCfytaKSXl9CM7Nt/QuKFZrty+PRmuOkeSF6q0ay+hHWS0Wa9BIXf0pABZcxu
+QJarRDUSdIA9bf5gKEzJg8jaZQU6oJ2MoTaHHdfwy4z5LMI0Q9eOWdtrh1KxV6l
VW16vbLjSjZ9d3EtLESbznevlkZUWI1+edak4w==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:19 2026 by rpki-client