Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/zWz2EQyWVwiMIMfp3Hy3g3Hk0CU.asa
File:                     zWz2EQyWVwiMIMfp3Hy3g3Hk0CU.asa (raw, json)
Hash identifier:          oDeUBRJakpIHsQrPONNeQWxCczJYr0zVwIZOh3InMp4=
Subject key identifier:   CD:6C:F6:11:0C:96:57:08:8C:20:C7:E9:DC:7C:B7:83:71:E4:D0:25
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019F19013E121D5F368729752022F2EE6E9F
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/zWz2EQyWVwiMIMfp3Hy3g3Hk0CU.asa
Signing time:             Tue 30 Jun 2026 14:48:59 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            43615
Providers:                AS: 2588
                          AS: 12578
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:3e:12:1d:5f:36:87:29:75:20:22:f2:ee:6e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Jun 30 14:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd6cf6110c9657088c20c7e9dc7cb78371e4d025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:da:a5:b5:50:73:16:37:f6:7b:ec:25:18:
                    d5:9a:f5:67:15:0c:63:9c:88:e8:ec:1c:d2:1e:54:
                    f0:90:23:59:56:5a:10:9d:85:05:a2:ce:a6:45:d4:
                    81:6f:28:9c:aa:8d:92:91:e2:ee:b8:ac:02:a1:45:
                    24:0d:d6:6b:15:6d:45:68:55:49:ee:b0:54:6c:27:
                    c8:82:64:c3:8b:0c:03:96:34:9f:34:3c:a4:ec:9d:
                    f8:5e:ac:2a:15:38:f0:bd:1a:f0:1d:da:84:7a:36:
                    20:a4:66:f8:32:89:f6:6f:cb:ed:cf:3b:bd:cc:8d:
                    37:b0:d4:b4:13:5a:cb:0f:47:2b:72:9a:45:5c:a5:
                    d9:0f:8d:47:5a:d6:c9:6f:2e:1d:35:43:d7:bc:af:
                    3c:a1:cb:35:bf:e4:b2:ef:e9:d1:28:bd:a0:5f:ad:
                    bd:cd:93:b3:16:8c:4b:2a:c5:49:8c:c2:20:5c:26:
                    74:50:a8:33:f7:73:4b:d3:9a:b0:5e:33:27:15:ff:
                    10:f0:5f:da:87:b1:46:88:1c:e9:99:2a:98:5c:b1:
                    d2:58:22:ff:93:33:ea:0e:0e:59:66:7e:9f:14:70:
                    2e:d2:38:9f:9f:3b:35:d0:87:9d:74:25:d1:fe:e6:
                    4d:5d:b2:2a:c1:d4:75:3f:e1:47:59:90:4a:66:d0:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:F6:11:0C:96:57:08:8C:20:C7:E9:DC:7C:B7:83:71:E4:D0:25
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/zWz2EQyWVwiMIMfp3Hy3g3Hk0CU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43615

    Signature Algorithm: sha256WithRSAEncryption
         dc:ba:63:1c:90:f0:b9:25:a3:93:30:2d:85:dd:21:5f:5c:f4:
         cc:38:2f:80:12:73:bd:51:a9:0b:2f:0d:1f:50:5a:4d:9a:30:
         ed:ab:cd:fb:83:a5:88:be:67:58:4b:c8:70:60:36:f6:d5:41:
         75:6c:a7:40:a5:c9:26:a0:6e:0d:a0:1a:c0:3b:f3:62:b9:37:
         c8:97:6f:d3:78:a3:c5:ce:05:3b:b5:7a:13:07:c3:fa:8a:1b:
         97:5e:00:e2:4a:11:1d:04:fc:4e:61:d2:9d:6a:ec:cf:60:65:
         04:89:7c:dc:9d:03:33:68:b4:df:ef:9f:12:0a:76:03:50:6e:
         a9:df:cd:0b:55:6c:b6:76:0f:d5:71:54:b0:9c:ab:21:85:df:
         b6:23:7d:d1:cc:cb:b5:55:2c:7f:84:06:8d:60:6c:ba:73:db:
         ad:56:28:70:3d:d6:57:d4:de:a6:81:ca:07:62:f7:c5:92:00:
         2f:da:88:c4:db:4c:20:61:d6:b1:b2:21:8f:eb:d0:49:ee:53:
         42:e7:c7:f6:b0:0e:f4:3f:35:72:86:cc:ce:66:31:d9:d1:82:
         a2:9a:fc:9d:eb:e3:00:cb:b0:84:e8:78:cb:eb:98:96:0b:58:
         22:48:65:92:6a:5f:d3:e6:b1:9a:3e:23:ba:3f:b9:c5:87:95:
         c7:98:44:82
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAT4SHV82hyl1ICLy7m6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTNjYWNlYThjNWQxZDk4OWIwN2VhNmUwOTc0YTAwZGEw
MzZhNGEwHhcNMjYwNjMwMTQ0ODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDZjZjYxMTBjOTY1NzA4OGMyMGM3ZTlkYzdjYjc4MzcxZTRkMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTHapbVQcxY39nvsJRjVmvVnFQxj
nIjo7BzSHlTwkCNZVloQnYUFos6mRdSBbyicqo2SkeLuuKwCoUUkDdZrFW1FaFVJ
7rBUbCfIgmTDiwwDljSfNDyk7J34XqwqFTjwvRrwHdqEejYgpGb4Mon2b8vtzzu9
zI03sNS0E1rLD0crcppFXKXZD41HWtbJby4dNUPXvK88ocs1v+Sy7+nRKL2gX629
zZOzFoxLKsVJjMIgXCZ0UKgz93NL05qwXjMnFf8Q8F/ah7FGiBzpmSqYXLHSWCL/
kzPqDg5ZZn6fFHAu0jifnzs10IeddCXR/uZNXbIqwdR1P+FHWZBKZtAJQQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFM1s9hEMllcIjCDH6dx8t4Nx5NAlMB8GA1UdIwQY
MBaAFIOjys6oxdHZibB+puCXSgDaA2pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgt
YmQwZGVlODQ0MDQ3LzEveld6MkVReVdWd2lNSU1mcDNIeTNnM0hrMENVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgtYmQwZGVlODQ0MDQ3
LzEvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqXzANBgkqhkiG
9w0BAQsFAAOCAQEA3LpjHJDwuSWjkzAthd0hX1z0zDgvgBJzvVGpCy8NH1BaTZow
7avN+4OliL5nWEvIcGA29tVBdWynQKXJJqBuDaAawDvzYrk3yJdv03ijxc4FO7V6
EwfD+oobl14A4koRHQT8TmHSnWrsz2BlBIl83J0DM2i03++fEgp2A1Buqd/NC1Vs
tnYP1XFUsJyrIYXftiN90czLtVUsf4QGjWBsunPbrVYocD3WV9TepoHKB2L3xZIA
L9qIxNtMIGHWsbIhj+vQSe5TQufH9rAO9D81cobMzmYx2dGCopr8nevjAMuwhOh4
y+uYlgtYIkhlkmpf0+axmj4juj+5xYeVx5hEgg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client