Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/U8cu_H549XZmZlqsKMOsHtHd_FU.asa
File:                     U8cu_H549XZmZlqsKMOsHtHd_FU.asa (raw, json)
Hash identifier:          7tsTexF/ELc5ucOwTosKbcmV4rf8gJ9CMLXiZL3AD/4=
Subject key identifier:   53:C7:2E:FC:7E:78:F5:76:66:66:5A:AC:28:C3:AC:1E:D1:DD:FC:55
Certificate issuer:       /CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
Certificate serial:       01A047DB4509CC2380A74E2D937C9527DBED
Authority key identifier: E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/U8cu_H549XZmZlqsKMOsHtHd_FU.asa
Signing time:             Fri 28 Aug 2026 10:12:27 +0000
ASPA not before:          Fri 28 Aug 2026 10:12:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42447
Providers:                AS: 35104
                          AS: 59796
                          AS: 198803
                          AS: 213243
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:47:db:45:09:cc:23:80:a7:4e:2d:93:7c:95:27:db:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
        Validity
            Not Before: Aug 28 10:12:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=53c72efc7e78f57666665aac28c3ac1ed1ddfc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:50:0d:36:30:5c:5d:fc:41:71:0e:ca:bf:
                    59:6f:29:5b:40:19:b3:b2:51:09:11:38:22:ec:90:
                    06:7a:8d:10:b9:60:c8:ee:01:1a:25:38:c1:ec:f7:
                    a4:d3:7d:d1:c6:02:c3:06:ae:bf:c8:fe:45:40:69:
                    8e:eb:6b:d8:39:ce:12:88:49:49:6b:e7:f2:33:4c:
                    89:81:52:e5:5f:2d:13:c2:06:c3:78:7e:64:d7:36:
                    cc:2b:38:b6:48:0e:fe:0c:51:86:bd:44:1b:7d:80:
                    57:b7:02:a3:68:8f:61:2d:3f:d6:e1:bf:53:8e:28:
                    70:40:a7:63:44:47:4f:89:af:40:3f:28:17:bb:65:
                    8d:8e:0d:11:5f:78:3b:c4:82:59:a5:b0:1d:24:a8:
                    f4:66:a4:49:46:f9:23:ed:62:93:8d:2c:43:dc:db:
                    11:81:91:b9:73:5b:23:d2:75:8f:b4:df:27:01:ad:
                    5f:c0:1a:25:30:3b:7c:e2:99:73:ee:82:cd:c0:02:
                    d6:3f:68:f5:6e:c3:8f:81:ea:29:09:7d:1c:0b:41:
                    ba:e6:49:1c:9f:51:48:49:d9:47:03:e5:a8:92:8e:
                    cf:e9:40:09:b1:d8:f3:5d:91:37:4b:25:06:20:1d:
                    f2:b9:07:0b:b2:dd:ba:33:7e:8f:88:eb:ef:85:6e:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C7:2E:FC:7E:78:F5:76:66:66:5A:AC:28:C3:AC:1E:D1:DD:FC:55
            X509v3 Authority Key Identifier:
                keyid:E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/U8cu_H549XZmZlqsKMOsHtHd_FU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42447

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:91:67:5e:80:1a:ae:22:a2:63:8b:dc:09:e4:40:06:9c:
         40:69:dd:15:c5:e4:41:9e:23:6b:0b:d9:66:0c:75:31:81:8d:
         c4:a7:42:0b:59:9a:a4:bf:60:47:88:36:a9:d2:e2:a6:de:b2:
         6c:4d:46:37:2d:25:93:5c:ac:fa:71:b0:96:9d:76:49:11:08:
         7e:19:93:2e:60:3f:70:a9:b0:db:27:f4:c8:42:5c:c8:b0:d1:
         d9:a6:31:f3:0b:30:28:a4:aa:28:ef:77:01:0e:f5:e0:9c:ec:
         75:de:a4:de:f8:0d:f1:5e:2f:ae:15:0b:11:af:2c:3f:8a:fb:
         73:49:62:36:57:a1:5f:5f:4e:a9:79:f1:6d:99:13:ef:b5:34:
         12:f5:3b:80:e5:15:88:7a:61:a5:60:21:e0:ba:46:70:d2:a7:
         cc:52:90:38:5d:51:be:42:9d:16:de:bf:06:ad:6e:de:50:ba:
         cf:4f:d1:2c:ca:ef:32:65:dc:de:19:8e:e0:a0:43:2f:53:c2:
         25:99:40:95:7d:6e:02:b7:ab:92:76:bf:f3:04:3a:01:0b:02:
         f9:dc:3e:f8:e5:7d:70:31:0b:20:93:3a:3c:a3:8f:90:e1:4e:
         8e:01:ce:ce:eb:e4:49:12:1a:e9:72:08:a1:02:8b:29:94:46:
         6f:fd:05:63
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBH20UJzCOAp04tk3yVJ9vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZGM4NTE5OGU3N2Q1NDZiNDNiM2ZhYzRlM2RiNzhkZGYx
YTE2NjIwHhcNMjYwODI4MTAxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2M3MmVmYzdlNzhmNTc2NjY2NjVhYWMyOGMzYWMxZWQxZGRmYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzphQDTYwXF38QXEOyr9ZbylbQBmz
slEJETgi7JAGeo0QuWDI7gEaJTjB7Pek033RxgLDBq6/yP5FQGmO62vYOc4SiElJ
a+fyM0yJgVLlXy0TwgbDeH5k1zbMKzi2SA7+DFGGvUQbfYBXtwKjaI9hLT/W4b9T
jihwQKdjREdPia9APygXu2WNjg0RX3g7xIJZpbAdJKj0ZqRJRvkj7WKTjSxD3NsR
gZG5c1sj0nWPtN8nAa1fwBolMDt84plz7oLNwALWP2j1bsOPgeopCX0cC0G65kkc
n1FISdlHA+Woko7P6UAJsdjzXZE3SyUGIB3yuQcLst26M36PiOvvhW42kQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFPHLvx+ePV2ZmZarCjDrB7R3fxVMB8GA1UdIwQY
MBaAFOjchRmOd9VGtDs/rE49t43fGhZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk55RkdZNTMxVWEwT3otc1RqMjNqZDhhRm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hY2UxOTAtNWZmZC00YmI1LWJhNWUt
NjZlZTQ1NzhmOTM0LzEvVThjdV9INTQ5WFptWmxxc0tNT3NIdEhkX0ZVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hY2UxOTAtNWZmZC00YmI1LWJhNWUtNjZlZTQ1NzhmOTM0
LzEvNk55RkdZNTMxVWEwT3otc1RqMjNqZDhhRm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClzzANBgkqhkiG
9w0BAQsFAAOCAQEAL82RZ16AGq4iomOL3AnkQAacQGndFcXkQZ4jawvZZgx1MYGN
xKdCC1mapL9gR4g2qdLipt6ybE1GNy0lk1ys+nGwlp12SREIfhmTLmA/cKmw2yf0
yEJcyLDR2aYx8wswKKSqKO93AQ714Jzsdd6k3vgN8V4vrhULEa8sP4r7c0liNleh
X19OqXnxbZkT77U0EvU7gOUViHphpWAh4LpGcNKnzFKQOF1RvkKdFt6/Bq1u3lC6
z0/RLMrvMmXc3hmO4KBDL1PCJZlAlX1uArerkna/8wQ6AQsC+dw++OV9cDELIJM6
PKOPkOFOjgHOzuvkSRIa6XIIoQKLKZRGb/0FYw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:46 2026 by rpki-client