Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa
File:                     cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa (raw, json)
Hash identifier:          FK9I5rimcLzHZdpfkaUGYs6IrGmTI38YsRySON+jkaM=
Subject key identifier:   71:6A:24:E2:65:31:18:EC:DF:6F:A5:FF:22:1F:F1:58:7C:F1:1F:31
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       019E3EF9C4C5B786F03370DD99332D8CCDA8
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa
Signing time:             Tue 19 May 2026 06:43:36 +0000
ASPA not before:          Tue 19 May 2026 06:43:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214232
Providers:                AS: 30781
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3e:f9:c4:c5:b7:86:f0:33:70:dd:99:33:2d:8c:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: May 19 06:43:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=716a24e2653118ecdf6fa5ff221ff1587cf11f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:7f:8d:5b:ef:db:55:e8:56:0c:19:e3:6b:
                    b2:c6:d5:45:65:71:0a:7e:ce:02:93:df:e6:8f:f3:
                    24:79:28:d9:8d:dc:98:35:1b:0b:3c:63:8b:63:4f:
                    9b:57:b4:b8:7b:56:a1:2f:1b:82:65:42:94:47:a5:
                    a9:1b:09:30:7e:3c:6b:0d:4b:3e:a4:04:6a:30:40:
                    e7:cc:15:1c:f6:ad:b2:10:2d:ff:67:11:93:d5:2f:
                    e5:69:5b:ff:c4:c9:ce:ee:06:d4:b4:84:92:8e:42:
                    d2:1d:d3:e8:7d:c2:34:67:aa:45:62:80:b1:e7:bf:
                    30:a7:cc:2b:5a:83:ea:76:5a:f3:c7:79:c3:3d:00:
                    bf:d7:9c:fc:58:a9:62:d5:98:3f:10:f1:99:34:1e:
                    0c:b3:0a:f3:cf:9a:a6:8c:ac:29:0a:b7:a8:b7:43:
                    16:d5:b8:21:98:0a:e0:7c:25:6c:65:4c:ab:99:2d:
                    9b:38:da:b3:bc:f1:5b:7c:fc:93:43:9e:e5:d3:45:
                    bd:1b:54:ea:34:25:f8:4a:0b:08:9d:bd:df:6b:ba:
                    ea:2b:50:5c:74:f4:64:8e:9e:a0:f8:75:bf:c7:a5:
                    47:36:d5:81:b3:4c:7f:ad:69:d1:8b:8a:20:3e:ea:
                    f6:e3:ba:57:be:f1:b0:cb:aa:41:47:61:76:07:23:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6A:24:E2:65:31:18:EC:DF:6F:A5:FF:22:1F:F1:58:7C:F1:1F:31
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cWok4mUxGOzfb6X_Ih_xWHzxHzE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214232

    Signature Algorithm: sha256WithRSAEncryption
         1d:ac:b6:85:ad:a8:8d:1f:bb:7e:a4:3b:95:8e:33:ee:cf:83:
         e1:92:60:bf:44:8c:d7:4f:e8:41:18:54:d0:4f:be:9c:58:83:
         3f:70:40:b8:b2:a2:87:fd:e7:ef:4a:fc:62:04:d8:0d:a4:35:
         d1:d5:57:45:e0:41:11:e2:67:b1:b1:99:3a:fa:ac:c5:5e:e6:
         da:26:6d:83:35:34:cf:9b:52:96:24:41:24:36:4d:36:37:ae:
         a6:19:97:d7:23:bc:5d:bc:f6:95:a0:71:ad:81:43:ee:80:2b:
         4b:c8:01:8e:9d:fe:f5:a3:2e:03:65:60:14:cc:9d:d6:1f:a3:
         dd:68:c2:ba:45:08:7a:61:63:53:ab:80:b4:05:06:29:ad:e3:
         3c:df:e9:84:c1:19:cf:ba:29:ba:24:25:73:e0:e7:01:de:1b:
         4b:2f:5b:15:9b:af:e9:c5:63:03:5b:e3:12:0e:c1:4d:e9:f4:
         4d:16:4c:62:6b:3b:1b:c2:aa:81:ce:a0:88:a3:3b:fb:32:c7:
         00:2c:39:5a:1f:69:41:46:3e:80:93:69:e6:b9:b7:3c:9d:7e:
         9e:94:1f:16:36:7b:ad:a2:fd:4c:21:2c:93:dd:30:df:75:eb:
         a9:68:6a:0d:34:97:7c:5c:9b:b9:bf:c9:b4:9e:b5:db:99:ca:
         a8:39:dd:53
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4++cTFt4bwM3DdmTMtjM2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky
NzE2NTIwHhcNMjYwNTE5MDY0MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTZhMjRlMjY1MzExOGVjZGY2ZmE1ZmYyMjFmZjE1ODdjZjExZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1N/jVvv21XoVgwZ42uyxtVFZXEK
fs4Ck9/mj/MkeSjZjdyYNRsLPGOLY0+bV7S4e1ahLxuCZUKUR6WpGwkwfjxrDUs+
pARqMEDnzBUc9q2yEC3/ZxGT1S/laVv/xMnO7gbUtISSjkLSHdPofcI0Z6pFYoCx
578wp8wrWoPqdlrzx3nDPQC/15z8WKli1Zg/EPGZNB4Mswrzz5qmjKwpCreot0MW
1bghmArgfCVsZUyrmS2bONqzvPFbfPyTQ57l00W9G1TqNCX4SgsInb3fa7rqK1Bc
dPRkjp6g+HW/x6VHNtWBs0x/rWnRi4ogPur247pXvvGwy6pBR2F2ByMKyQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHFqJOJlMRjs32+l/yIf8Vh88R8xMB8GA1UdIwQY
MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt
NGZiNDA0ODVmZjdiLzEvY1dvazRtVXhHT3pmYjZYX0loX3hXSHp4SHpFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi
LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNE2DANBgkqhkiG
9w0BAQsFAAOCAQEAHay2ha2ojR+7fqQ7lY4z7s+D4ZJgv0SM10/oQRhU0E++nFiD
P3BAuLKih/3n70r8YgTYDaQ10dVXReBBEeJnsbGZOvqsxV7m2iZtgzU0z5tSliRB
JDZNNjeuphmX1yO8Xbz2laBxrYFD7oArS8gBjp3+9aMuA2VgFMyd1h+j3WjCukUI
emFjU6uAtAUGKa3jPN/phMEZz7opuiQlc+DnAd4bSy9bFZuv6cVjA1vjEg7BTen0
TRZMYms7G8Kqgc6giKM7+zLHACw5Wh9pQUY+gJNp5rm3PJ1+npQfFjZ7raL9TCEs
k90w33XrqWhqDTSXfFybub/JtJ6125nKqDndUw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:42 2026 by rpki-client