Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/wJHAsZqoYWUK-F5eoTxUudhZ0hQ.asa
File:                     wJHAsZqoYWUK-F5eoTxUudhZ0hQ.asa (raw, json)
Hash identifier:          Z+kjRIHloWgQuWfaEpSQ/CVu4Yukz0ns8AiOc09V0/s=
Subject key identifier:   C0:91:C0:B1:9A:A8:61:65:0A:F8:5E:5E:A1:3C:54:B9:D8:59:D2:14
Certificate issuer:       /CN=359e5f053eb9d429d8eb50118e439d097346cabb
Certificate serial:       01A1359C7F5B740D83D34857673EB9C38690
Authority key identifier: 35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/wJHAsZqoYWUK-F5eoTxUudhZ0hQ.asa
Signing time:             Tue 13 Oct 2026 14:13:31 +0000
ASPA not before:          Tue 13 Oct 2026 14:13:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218522
Providers:                AS: 49581
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:9c:7f:5b:74:0d:83:d3:48:57:67:3e:b9:c3:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359e5f053eb9d429d8eb50118e439d097346cabb
        Validity
            Not Before: Oct 13 14:13:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c091c0b19aa861650af85e5ea13c54b9d859d214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:fd:2e:d4:e7:8f:ce:ce:ee:2c:aa:71:fa:
                    0d:fa:d6:32:72:89:2a:6b:5f:c8:1b:2f:6c:e7:c8:
                    92:36:5e:9b:c7:81:e9:4e:e6:c4:e3:60:76:18:2b:
                    b1:6f:8d:30:b3:f2:c0:57:c0:5f:65:cc:d0:e3:f6:
                    91:96:e6:2b:9c:24:9b:6e:59:61:4f:02:d6:8b:69:
                    a7:25:53:56:c7:d7:82:59:36:e9:9e:5d:0b:3b:c4:
                    49:09:d1:e2:6e:7b:cc:63:b7:b1:b5:e9:32:ea:bb:
                    6d:db:a5:30:05:4f:3c:69:16:47:22:21:c6:d2:b3:
                    87:2a:04:3b:b3:1a:4d:a5:c7:5c:d5:4a:97:30:9e:
                    fa:1c:d0:22:23:19:02:6f:b2:7c:ef:67:6b:d5:7d:
                    db:be:91:a5:7b:94:4a:ce:f1:68:b9:0f:97:02:1e:
                    de:d0:10:86:74:f4:13:a8:66:3f:8a:96:47:f7:27:
                    af:5e:c7:7f:45:06:a2:7b:05:29:29:48:6c:56:22:
                    c4:7a:7c:57:c2:94:3b:e0:98:ca:5d:02:57:66:88:
                    ad:6b:49:46:6b:fc:2f:64:6a:d9:67:9f:da:7e:f8:
                    a6:f7:82:68:ee:e9:d2:9b:d3:de:6d:8f:fc:f2:75:
                    73:5a:31:db:79:0c:dc:69:ea:66:73:e8:cc:da:93:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:C0:B1:9A:A8:61:65:0A:F8:5E:5E:A1:3C:54:B9:D8:59:D2:14
            X509v3 Authority Key Identifier:
                keyid:35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/wJHAsZqoYWUK-F5eoTxUudhZ0hQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218522

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:f1:7b:bd:0c:44:f9:b3:6a:45:6d:69:44:b5:00:05:3f:
         b3:eb:8c:85:ed:d8:e3:82:3f:53:70:9d:ec:e1:1f:ac:3d:20:
         15:9d:31:6e:db:a1:a2:0a:eb:c2:28:7c:48:bc:47:cd:b3:bf:
         9e:a0:2f:89:41:26:fa:74:20:08:36:9c:ae:1a:d2:6e:a6:e6:
         39:10:d0:49:8d:74:e2:5e:9f:d1:7a:a9:cb:a3:97:65:9e:a8:
         84:b7:da:04:b2:c3:95:de:8c:72:68:b6:5b:66:03:e8:51:02:
         62:bc:0d:3c:38:cd:d0:55:18:62:2d:0e:ea:54:4a:48:42:f0:
         cf:48:06:e8:ee:46:87:9b:c9:6e:46:70:cc:09:f9:2d:c1:3c:
         21:8b:11:35:0e:9d:c3:fc:cd:60:ca:9a:51:d5:55:01:ac:b8:
         83:50:b6:ca:4f:b2:fb:0e:bb:d1:ba:dd:1e:d9:57:b9:e8:d0:
         64:10:2b:c1:da:0c:d5:aa:1a:02:71:7e:56:22:f5:11:3d:b7:
         83:00:29:9d:ff:45:55:43:9c:25:97:93:a2:03:c4:ae:b5:97:
         54:2e:0b:31:78:ee:e5:19:ab:9f:9f:e7:13:35:9c:26:94:7d:
         c8:7a:11:c7:96:06:1c:46:5c:dd:03:d9:63:e5:22:9f:34:47:
         1d:a3:81:4e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaE1nH9bdA2D00hXZz65w4aQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWU1ZjA1M2ViOWQ0MjlkOGViNTAxMThlNDM5ZDA5NzM0
NmNhYmIwHhcNMjYxMDEzMTQxMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDkxYzBiMTlhYTg2MTY1MGFmODVlNWVhMTNjNTRiOWQ4NTlkMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5D9LtTnj87O7iyqcfoN+tYycokq
a1/IGy9s58iSNl6bx4HpTubE42B2GCuxb40ws/LAV8BfZczQ4/aRluYrnCSbbllh
TwLWi2mnJVNWx9eCWTbpnl0LO8RJCdHibnvMY7exteky6rtt26UwBU88aRZHIiHG
0rOHKgQ7sxpNpcdc1UqXMJ76HNAiIxkCb7J872dr1X3bvpGle5RKzvFouQ+XAh7e
0BCGdPQTqGY/ipZH9yevXsd/RQaiewUpKUhsViLEenxXwpQ74JjKXQJXZoita0lG
a/wvZGrZZ5/afvim94Jo7unSm9PebY/88nVzWjHbeQzcaepmc+jM2pMMLwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMCRwLGaqGFlCvheXqE8VLnYWdIUMB8GA1UdIwQY
MBaAFDWeXwU+udQp2OtQEY5DnQlzRsq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo1ZkJUNjUxQ25ZNjFBUmprT2RDWE5HeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMDZkMTktYjRlNy00M2UzLWI2ZGYt
NzM1MzE2MzBmMTViLzEvd0pIQXNacW9ZV1VLLUY1ZW9UeFV1ZGhaMGhRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMDZkMTktYjRlNy00M2UzLWI2ZGYtNzM1MzE2MzBmMTVi
LzEvTlo1ZkJUNjUxQ25ZNjFBUmprT2RDWE5HeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNVmjANBgkqhkiG
9w0BAQsFAAOCAQEAex/xe70MRPmzakVtaUS1AAU/s+uMhe3Y44I/U3Cd7OEfrD0g
FZ0xbtuhogrrwih8SLxHzbO/nqAviUEm+nQgCDacrhrSbqbmORDQSY104l6f0Xqp
y6OXZZ6ohLfaBLLDld6Mcmi2W2YD6FECYrwNPDjN0FUYYi0O6lRKSELwz0gG6O5G
h5vJbkZwzAn5LcE8IYsRNQ6dw/zNYMqaUdVVAay4g1C2yk+y+w670brdHtlXuejQ
ZBArwdoM1aoaAnF+ViL1ET23gwApnf9FVUOcJZeTogPErrWXVC4LMXju5Rmrn5/n
EzWcJpR9yHoRx5YGHEZc3QPZY+UinzRHHaOBTg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:01:04 2026 by rpki-client