Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa
File:                     4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (raw, json)
Hash identifier:          B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=
Subject key identifier:   E2:83:1F:C0:14:F4:54:2A:80:A6:AD:0C:CF:D0:79:BB:CA:04:76:06
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       019CBD9864FF5E535430D5FCA6BD87B1850A
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa
Signing time:             Thu 05 Mar 2026 10:43:26 +0000
ASPA not before:          Thu 05 Mar 2026 10:43:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24643
Providers:                AS: 6830
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:98:64:ff:5e:53:54:30:d5:fc:a6:bd:87:b1:85:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Mar  5 10:43:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2831fc014f4542a80a6ad0ccfd079bbca047606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:60:25:31:6d:48:f1:5a:55:16:00:ff:88:
                    1a:d4:d2:c9:57:b9:b7:c1:1d:73:50:de:ef:0e:aa:
                    ed:ba:ee:42:79:b0:58:12:c3:3d:f3:fa:f2:b0:fd:
                    e1:46:d0:59:6e:00:01:33:23:7c:69:c8:66:8e:d0:
                    92:69:ad:4a:6b:45:27:48:12:1c:59:1b:b6:f8:0c:
                    c5:1e:19:98:1d:f3:46:d0:af:1d:d1:bf:45:48:53:
                    86:85:d3:ee:16:92:17:8b:00:50:32:bd:b3:eb:aa:
                    20:0c:c1:2b:c9:d3:0f:8d:b5:8d:57:03:aa:ef:15:
                    9e:7e:3b:95:49:4a:b5:6e:9f:6c:ec:3d:cd:c4:e1:
                    bd:71:0c:6f:7d:92:a9:08:9e:1c:fb:f8:b7:7a:bf:
                    a8:2e:7a:bf:7c:f6:f5:f2:e8:5f:6b:b9:1e:fd:1c:
                    b8:49:b1:c3:66:a2:20:95:ed:a5:f4:fe:b2:66:8a:
                    19:85:2c:ba:d8:c5:57:25:9e:87:de:78:51:e5:85:
                    fb:eb:39:98:d6:be:00:c0:e4:fc:9d:08:0f:73:eb:
                    fa:d1:30:de:a7:ae:e2:9b:ad:c3:e2:53:39:57:34:
                    0b:ed:2f:a4:86:62:d4:8e:fd:4c:2b:5d:ec:29:b6:
                    ae:16:50:22:d3:e5:17:e9:80:4b:05:7b:e2:f6:bb:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:83:1F:C0:14:F4:54:2A:80:A6:AD:0C:CF:D0:79:BB:CA:04:76:06
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24643

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:78:2a:c1:1d:65:b8:a7:91:8d:78:c3:1f:3f:e7:15:84:
         0b:9d:ff:98:f6:17:e5:02:95:2e:1d:e5:e3:6b:41:86:bc:9e:
         22:90:15:e0:de:9d:1f:cf:cd:77:52:eb:48:13:99:6c:14:9d:
         99:f5:d3:a4:f4:6a:54:cc:7a:f4:20:18:ed:aa:58:96:03:30:
         af:4f:67:d8:28:ec:a3:bd:9b:09:d0:bd:87:1c:ca:4e:e2:8e:
         76:1d:67:ef:9b:01:98:fa:8b:3f:c1:f1:58:29:fd:94:8e:63:
         84:a7:4e:18:2f:ef:0b:76:88:31:34:4b:62:b7:7d:f8:39:f0:
         60:7c:b5:a9:a3:e3:35:22:62:fa:89:f3:00:c8:db:b1:fb:91:
         fa:bc:1b:47:c4:88:4c:26:31:ed:6b:5f:57:93:36:67:3f:da:
         88:df:4e:c8:7b:48:43:43:73:2a:30:45:26:5a:1b:d1:7f:65:
         6b:df:12:e5:03:64:2a:9d:13:5d:5b:20:10:c7:62:d7:33:09:
         4d:34:fd:7c:16:3f:6b:de:9d:df:b7:86:c6:41:41:b6:3b:b5:
         e5:20:8b:68:62:1d:56:c4:35:ca:71:e2:fe:73:6e:ce:29:df:
         ce:a0:ab:7b:ab:2a:f0:c8:0a:e9:65:75:86:f6:24:03:21:1e:
         13:5d:28:13
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZy9mGT/XlNUMNX8pr2HsYUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjYwMzA1MTA0MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjgzMWZjMDE0ZjQ1NDJhODBhNmFkMGNjZmQwNzliYmNhMDQ3NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgpgJTFtSPFaVRYA/4ga1NLJV7m3
wR1zUN7vDqrtuu5CebBYEsM98/rysP3hRtBZbgABMyN8achmjtCSaa1Ka0UnSBIc
WRu2+AzFHhmYHfNG0K8d0b9FSFOGhdPuFpIXiwBQMr2z66ogDMErydMPjbWNVwOq
7xWefjuVSUq1bp9s7D3NxOG9cQxvfZKpCJ4c+/i3er+oLnq/fPb18uhfa7ke/Ry4
SbHDZqIgle2l9P6yZooZhSy62MVXJZ6H3nhR5YX76zmY1r4AwOT8nQgPc+v60TDe
p67im63D4lM5VzQL7S+khmLUjv1MK13sKbauFlAi0+UX6YBLBXvi9ruZDwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFOKDH8AU9FQqgKatDM/QebvKBHYGMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEvNG9NZndCVDBWQ3FBcHEwTXo5QjV1OG9FZGdZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmBDMA0GCSqGSIb3
DQEBCwUAA4IBAQA9RHgqwR1luKeRjXjDHz/nFYQLnf+Y9hflApUuHeXja0GGvJ4i
kBXg3p0fz813UutIE5lsFJ2Z9dOk9GpUzHr0IBjtqliWAzCvT2fYKOyjvZsJ0L2H
HMpO4o52HWfvmwGY+os/wfFYKf2UjmOEp04YL+8LdogxNEtit334OfBgfLWpo+M1
ImL6ifMAyNux+5H6vBtHxIhMJjHta19XkzZnP9qI307Ie0hDQ3MqMEUmWhvRf2Vr
3xLlA2QqnRNdWyAQx2LXMwlNNP18Fj9r3p3ft4bGQUG2O7XlIItoYh1WxDXKceL+
c27OKd/OoKt7qyrwyArpZXWG9iQDIR4TXSgT
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:30 2026 by rpki-client