Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/XaBMftLBjFkkvQ71jJh39SHdqfU.asa
File:                     XaBMftLBjFkkvQ71jJh39SHdqfU.asa (raw, json)
Hash identifier:          3+KwIxIppFC2P+GZ64hWT0moNLYa5l29ADA84gt44PQ=
Subject key identifier:   5D:A0:4C:7E:D2:C1:8C:59:24:BD:0E:F5:8C:98:77:F5:21:DD:A9:F5
Certificate issuer:       /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial:       01A13FF3B77517191850A4089785BCE13BCB
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/XaBMftLBjFkkvQ71jJh39SHdqfU.asa
Signing time:             Thu 15 Oct 2026 14:24:59 +0000
ASPA not before:          Thu 15 Oct 2026 14:24:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215223
Providers:                AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 44817
                          AS: 209022
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:f3:b7:75:17:19:18:50:a4:08:97:85:bc:e1:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
        Validity
            Not Before: Oct 15 14:24:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5da04c7ed2c18c5924bd0ef58c9877f521dda9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:f1:83:92:55:79:26:14:5b:32:48:64:73:
                    eb:9d:68:a6:1e:c2:93:0b:b5:35:96:c0:d3:b9:1e:
                    e3:f5:ff:d4:13:7b:5d:88:88:50:19:68:ab:0d:2d:
                    a3:2d:21:ea:ff:2b:ce:f8:af:0a:c3:9d:95:72:4c:
                    c7:08:e1:eb:8d:b9:09:26:2d:c1:db:4a:3c:6a:28:
                    24:e8:32:67:49:19:cd:e6:ba:d8:83:ef:75:bb:51:
                    4c:df:12:58:b4:d1:03:f6:54:96:ec:91:08:5a:b0:
                    73:a2:34:cb:ef:a9:e8:5e:da:6b:b7:43:dd:a2:f6:
                    09:ef:fc:b5:69:1e:0c:d3:11:d5:3a:0b:fb:c6:c8:
                    6f:cb:46:52:17:07:e0:8a:3a:6b:33:69:35:2c:9a:
                    3b:19:fb:72:4f:48:43:f3:de:b5:94:81:e7:c9:1f:
                    cc:0c:8a:5c:fa:f6:32:64:f0:1a:41:df:99:b5:49:
                    94:66:48:b6:bb:b8:33:54:40:3c:5a:db:f8:fc:20:
                    29:1b:10:11:00:80:16:dc:6c:6f:6d:32:15:20:f1:
                    07:07:49:5e:35:41:f3:5c:07:73:fe:f4:d7:7e:2a:
                    6e:36:be:82:6b:ae:e2:a2:8c:25:dc:22:f8:98:83:
                    17:09:c2:a4:f9:fc:35:04:91:fc:53:62:a8:5b:05:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:4C:7E:D2:C1:8C:59:24:BD:0E:F5:8C:98:77:F5:21:DD:A9:F5
            X509v3 Authority Key Identifier:
                keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/XaBMftLBjFkkvQ71jJh39SHdqfU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215223

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:0b:54:60:53:f8:0f:77:b7:06:88:f9:28:f4:23:18:8e:
         66:c8:94:59:77:31:08:de:22:8c:fa:05:36:a7:ac:c0:10:27:
         f6:ed:8e:50:42:0b:ff:b3:5c:05:cf:55:d3:c1:85:3e:6b:6d:
         7c:0f:6a:59:d0:1c:6c:ec:74:8f:5e:4d:6c:de:0e:4b:57:a6:
         43:9a:74:65:6e:c9:4b:29:63:b0:08:95:b1:b1:26:67:3b:63:
         4f:26:51:e0:fb:41:78:d0:94:b1:52:70:e4:66:fe:ea:3e:c6:
         4c:4a:69:2c:96:2d:28:db:f5:5f:f5:07:5e:25:21:48:f2:b7:
         8e:f9:97:59:b5:66:e6:fc:55:ca:6b:5e:40:1a:b2:66:fa:35:
         6a:1a:aa:7f:5b:54:b5:67:69:df:24:30:5b:d1:31:1f:c2:ed:
         6b:33:90:37:72:2a:6a:59:7e:72:74:7d:7f:06:b0:9c:60:e1:
         25:ca:62:1c:f9:83:8a:70:1d:ac:8e:bb:fc:00:2e:9e:f9:45:
         d9:a3:b3:e0:26:2a:5f:15:3f:a4:f6:2d:87:0f:fe:e2:ee:11:
         8c:8e:84:3c:5a:61:f9:5c:2d:c6:07:ff:f3:ea:a4:85:6f:68:
         cc:58:45:b0:69:ba:b2:15:97:66:99:b2:dd:be:83:22:6b:c8:
         e8:1e:ab:5f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaE/87d1FxkYUKQIl4W84TvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjYxMDE1MTQyNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGEwNGM3ZWQyYzE4YzU5MjRiZDBlZjU4Yzk4NzdmNTIxZGRhOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Dxg5JVeSYUWzJIZHPrnWimHsKT
C7U1lsDTuR7j9f/UE3tdiIhQGWirDS2jLSHq/yvO+K8Kw52VckzHCOHrjbkJJi3B
20o8aigk6DJnSRnN5rrYg+91u1FM3xJYtNED9lSW7JEIWrBzojTL76noXtprt0Pd
ovYJ7/y1aR4M0xHVOgv7xshvy0ZSFwfgijprM2k1LJo7GftyT0hD8961lIHnyR/M
DIpc+vYyZPAaQd+ZtUmUZki2u7gzVEA8Wtv4/CApGxARAIAW3GxvbTIVIPEHB0le
NUHzXAdz/vTXfipuNr6Ca67ioowl3CL4mIMXCcKk+fw1BJH8U2KoWwWLWQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF2gTH7SwYxZJL0O9YyYd/Uh3an1MB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvWGFCTWZ0TEJqRmtrdlE3MWpKaDM5U0hkcWZVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNItzANBgkqhkiG
9w0BAQsFAAOCAQEAIw4LVGBT+A93twaI+Sj0IxiOZsiUWXcxCN4ijPoFNqeswBAn
9u2OUEIL/7NcBc9V08GFPmttfA9qWdAcbOx0j15NbN4OS1emQ5p0ZW7JSyljsAiV
sbEmZztjTyZR4PtBeNCUsVJw5Gb+6j7GTEppLJYtKNv1X/UHXiUhSPK3jvmXWbVm
5vxVymteQBqyZvo1ahqqf1tUtWdp3yQwW9ExH8LtazOQN3Iqall+cnR9fwawnGDh
JcpiHPmDinAdrI67/AAunvlF2aOz4CYqXxU/pPYthw/+4u4RjI6EPFph+Vwtxgf/
8+qkhW9ozFhFsGm6shWXZpmy3b6DImvI6B6rXw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:41 2026 by rpki-client