Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/sz9G7DpWjEEMUVJVVxcUaKAB47w.asa
File:                     sz9G7DpWjEEMUVJVVxcUaKAB47w.asa (raw, json)
Hash identifier:          qMSm9Lo5lhWN3TZsyk9ikcvCy7eunxVm7Ys7+c4vy5w=
Subject key identifier:   B3:3F:46:EC:3A:56:8C:41:0C:51:52:55:57:17:14:68:A0:01:E3:BC
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       01A00F8E272CE9C429109BB44AEA058EAE66
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/sz9G7DpWjEEMUVJVVxcUaKAB47w.asa
Signing time:             Mon 17 Aug 2026 11:49:29 +0000
ASPA not before:          Mon 17 Aug 2026 11:49:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208755
Providers:                AS: 20473
                          AS: 52025
                          AS: 212683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0f:8e:27:2c:e9:c4:29:10:9b:b4:4a:ea:05:8e:ae:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Aug 17 11:49:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b33f46ec3a568c410c51525557171468a001e3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:5f:2d:b7:4f:8c:53:b8:eb:10:7c:06:e4:
                    ac:2b:6f:09:dd:da:5e:72:83:d2:e3:a7:38:82:a7:
                    26:0a:54:ba:fb:7a:04:26:fb:f4:8e:97:04:b9:4e:
                    eb:68:08:d9:cf:d4:b9:8e:8a:5f:0a:38:11:87:39:
                    da:e1:e8:2c:24:9a:88:1d:06:2c:57:4d:dd:82:55:
                    ac:fa:89:51:be:04:ff:27:72:79:92:33:05:09:67:
                    50:e5:66:4e:0d:56:82:c9:4a:79:36:16:6f:09:e6:
                    68:ad:10:5c:c7:1d:03:35:fa:6b:22:6b:4f:d8:bb:
                    6e:b2:f4:7f:2b:77:cb:62:56:ea:68:41:ed:76:ff:
                    86:58:83:14:15:0f:0a:fc:8a:22:77:7a:df:4f:3b:
                    29:12:d7:25:06:13:80:14:98:2c:3e:32:fd:81:c5:
                    93:91:f7:a2:a3:ab:22:32:6b:76:2f:4b:a1:98:8e:
                    33:ef:08:43:13:76:48:73:23:ad:41:ef:a4:67:fe:
                    84:02:2d:92:4e:4a:37:f0:93:eb:aa:b2:0b:bb:bc:
                    fa:4c:1f:45:26:ce:57:53:7e:ef:0a:e5:5d:28:52:
                    8a:34:57:02:4b:c8:fe:18:28:7c:5c:e1:95:bb:ac:
                    74:93:f0:52:b4:7b:f4:d1:3e:9b:19:df:25:a5:35:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3F:46:EC:3A:56:8C:41:0C:51:52:55:57:17:14:68:A0:01:E3:BC
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/sz9G7DpWjEEMUVJVVxcUaKAB47w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208755

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:91:8e:91:73:96:23:b0:df:0d:02:aa:03:91:19:ee:ff:
         75:11:a5:d2:0a:a9:54:3b:11:44:3f:37:ec:ee:70:d2:f5:dd:
         15:75:e9:6a:f1:32:6e:db:0f:9f:45:0f:3f:cf:f8:86:c9:ad:
         a6:b5:67:04:ac:07:a5:ad:0d:72:eb:f5:ad:f4:d2:d3:4e:d1:
         cf:24:fe:56:90:3a:6c:a2:25:fb:37:df:1d:73:ad:9d:0c:3c:
         25:e9:44:5a:bd:78:53:88:39:23:42:66:e9:66:6d:6e:58:3f:
         cb:75:d3:2b:c0:d6:6d:64:b3:d2:f4:9f:92:86:65:1e:2d:80:
         90:4a:4c:82:a6:64:bc:c6:ff:cf:d1:0e:d3:f8:c9:2f:22:ab:
         15:11:97:2f:7c:0e:a0:e2:cf:f6:ab:9b:9e:41:2d:fc:b1:8f:
         ae:cf:7a:15:3a:d6:7d:f0:9b:3f:2a:19:0a:51:09:a1:e1:01:
         d3:c9:58:7b:eb:59:8c:01:d8:43:9f:65:ec:4c:87:2f:02:f3:
         a8:d1:f0:cb:01:18:fe:1e:f5:f3:87:d0:ff:f9:1f:35:4d:b5:
         3e:83:ed:e9:75:a1:a2:56:4d:ce:1a:7c:8b:67:cc:81:18:b2:
         6f:3c:45:90:94:46:a8:3d:3f:d9:5b:39:74:2d:fc:5a:3b:d8:
         9b:7f:d6:33
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaAPjics6cQpEJu0SuoFjq5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3
ZjhkMGUwHhcNMjYwODE3MTE0OTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNmNDZlYzNhNTY4YzQxMGM1MTUyNTU1NzE3MTQ2OGEwMDFlM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/hfLbdPjFO46xB8BuSsK28J3dpe
coPS46c4gqcmClS6+3oEJvv0jpcEuU7raAjZz9S5jopfCjgRhzna4egsJJqIHQYs
V03dglWs+olRvgT/J3J5kjMFCWdQ5WZODVaCyUp5NhZvCeZorRBcxx0DNfprImtP
2LtusvR/K3fLYlbqaEHtdv+GWIMUFQ8K/Ioid3rfTzspEtclBhOAFJgsPjL9gcWT
kfeio6siMmt2L0uhmI4z7whDE3ZIcyOtQe+kZ/6EAi2STko38JPrqrILu7z6TB9F
Js5XU37vCuVdKFKKNFcCS8j+GCh8XOGVu6x0k/BStHv00T6bGd8lpTW3nQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLM/Ruw6VoxBDFFSVVcXFGigAeO8MB8GA1UdIwQY
MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt
ZTRjOGExOGJhNjQ1LzEvc3o5RzdEcFdqRUVNVVZKVlZ4Y1VhS0FCNDd3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1
LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvczANBgkqhkiG
9w0BAQsFAAOCAQEAbOKRjpFzliOw3w0CqgORGe7/dRGl0gqpVDsRRD837O5w0vXd
FXXpavEybtsPn0UPP8/4hsmtprVnBKwHpa0Ncuv1rfTS007RzyT+VpA6bKIl+zff
HXOtnQw8JelEWr14U4g5I0Jm6WZtblg/y3XTK8DWbWSz0vSfkoZlHi2AkEpMgqZk
vMb/z9EO0/jJLyKrFRGXL3wOoOLP9qubnkEt/LGPrs96FTrWffCbPyoZClEJoeEB
08lYe+tZjAHYQ59l7EyHLwLzqNHwywEY/h7184fQ//kfNU21PoPt6XWholZNzhp8
i2fMgRiybzxFkJRGqD0/2Vs5dC38WjvYm3/WMw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:46 2026 by rpki-client