Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/ATrUCafiE1uHZv1VRXUBlVvz3XY.asa
File:                     ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (raw, json)
Hash identifier:          G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=
Subject key identifier:   01:3A:D4:09:A7:E2:13:5B:87:66:FD:55:45:75:01:95:5B:F3:DD:76
Certificate issuer:       /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial:       019E930AA95BA6E5964998D404E0763D1112
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/ATrUCafiE1uHZv1VRXUBlVvz3XY.asa
Signing time:             Thu 04 Jun 2026 14:30:09 +0000
ASPA not before:          Thu 04 Jun 2026 14:30:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214514
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:93:0a:a9:5b:a6:e5:96:49:98:d4:04:e0:76:3d:11:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
        Validity
            Not Before: Jun  4 14:30:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=013ad409a7e2135b8766fd55457501955bf3dd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:9d:9a:6d:12:01:1d:5a:cf:97:8e:93:f7:
                    1e:0b:ad:63:49:6e:97:0b:14:15:86:e3:44:41:86:
                    03:c7:bd:79:d6:cb:98:46:d2:9a:c6:22:c5:b9:37:
                    3b:40:58:22:24:26:9b:fe:5b:90:44:fa:0e:2c:c6:
                    db:8e:ad:94:2c:02:12:2c:19:cf:a6:cd:27:4d:f4:
                    25:70:86:4c:0e:74:06:f0:bc:94:03:6b:8f:8f:2f:
                    ce:36:fb:59:a2:c2:c9:18:c4:05:46:72:07:10:94:
                    c4:5b:0f:fa:e4:24:20:f7:5f:4b:59:71:62:97:fb:
                    05:c9:6f:ca:9b:0e:91:3d:4f:4d:b8:99:03:75:dc:
                    e0:c6:04:9b:fd:75:00:88:f8:5d:e1:e7:13:48:b4:
                    bb:b9:9d:9a:b0:50:a5:b3:a0:a4:df:77:b1:58:f4:
                    99:9a:f7:a7:49:5f:42:b8:78:c9:a6:22:ef:61:a4:
                    23:e9:b9:f8:d4:e5:64:f4:28:e8:92:66:73:30:eb:
                    e1:8a:78:9f:6f:d2:9a:85:32:43:f0:d4:4d:c8:ed:
                    e7:b4:7d:26:52:51:b2:0a:f7:85:3a:0b:c6:7c:11:
                    d2:a7:d1:f5:b2:b4:2c:08:76:7c:3a:0f:ce:db:80:
                    8d:0b:ce:7d:6e:bb:05:5a:c0:e5:00:5c:a5:11:a6:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:D4:09:A7:E2:13:5B:87:66:FD:55:45:75:01:95:5B:F3:DD:76
            X509v3 Authority Key Identifier:
                keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/ATrUCafiE1uHZv1VRXUBlVvz3XY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214514

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:1e:8e:80:f5:b6:29:31:8c:54:66:7b:15:6f:60:c1:20:
         76:e9:b1:21:e0:f1:1f:43:af:83:66:43:dd:20:ce:6d:3c:46:
         c5:39:f9:37:ad:db:1c:f9:4b:3e:88:5d:89:cd:ae:b1:f2:1f:
         c5:15:fd:55:2e:3b:8b:be:66:8e:62:62:d0:dc:d6:9a:61:7d:
         80:43:62:e7:41:3c:eb:53:d0:a0:92:4d:48:54:71:04:36:72:
         ff:ff:70:d6:20:25:a3:22:6d:31:f7:83:f8:42:40:92:fc:3d:
         44:32:00:6c:7a:71:ab:e9:6e:d0:1c:1a:36:0a:33:42:f5:92:
         f9:d8:cf:51:3c:c0:5b:ea:0d:8b:d0:bb:d3:af:4d:7d:7c:b3:
         fb:e5:0c:c5:c7:43:c9:f2:f7:23:da:af:81:64:ac:31:57:8e:
         76:8a:89:b1:c9:f3:23:1b:c4:97:56:db:a7:8b:21:fa:fc:e4:
         67:23:ec:7e:4c:b4:fc:e7:6e:cb:92:72:f9:bf:34:80:53:37:
         95:fd:a9:a7:06:fc:33:88:af:6c:d3:68:f8:c3:09:b3:89:9b:
         23:f8:19:d8:44:50:35:90:d6:0d:3a:72:17:68:aa:f7:cc:8d:
         89:af:26:82:33:3d:b5:f6:01:72:60:11:96:18:d5:a4:e9:76:
         20:f9:1b:2e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6TCqlbpuWWSZjUBOB2PRESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2NhZmY4MDdiMzI5NTJkNjhjNzFhYWYwMWI5MTk4NGFk
MWVhMDgwHhcNMjYwNjA0MTQzMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTNhZDQwOWE3ZTIxMzViODc2NmZkNTU0NTc1MDE5NTViZjNkZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowadmm0SAR1az5eOk/ceC61jSW6X
CxQVhuNEQYYDx7151suYRtKaxiLFuTc7QFgiJCab/luQRPoOLMbbjq2ULAISLBnP
ps0nTfQlcIZMDnQG8LyUA2uPjy/ONvtZosLJGMQFRnIHEJTEWw/65CQg919LWXFi
l/sFyW/Kmw6RPU9NuJkDddzgxgSb/XUAiPhd4ecTSLS7uZ2asFCls6Ck33exWPSZ
mvenSV9CuHjJpiLvYaQj6bn41OVk9CjokmZzMOvhinifb9KahTJD8NRNyO3ntH0m
UlGyCveFOgvGfBHSp9H1srQsCHZ8Og/O24CNC859brsFWsDlAFylEaZQ2QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAE61Amn4hNbh2b9VUV1AZVb8912MB8GA1UdIwQY
MBaAFIg8r/gHsylS1oxxqvAbkZhK0eoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEt
OWNlZDVlNWVmZjBmLzEvQVRyVUNhZmlFMXVIWnYxVlJYVUJsVnZ6M1hZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEtOWNlZDVlNWVmZjBm
LzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNF8jANBgkqhkiG
9w0BAQsFAAOCAQEABaYejoD1tikxjFRmexVvYMEgdumxIeDxH0Ovg2ZD3SDObTxG
xTn5N63bHPlLPohdic2usfIfxRX9VS47i75mjmJi0NzWmmF9gENi50E861PQoJJN
SFRxBDZy//9w1iAloyJtMfeD+EJAkvw9RDIAbHpxq+lu0BwaNgozQvWS+djPUTzA
W+oNi9C7069NfXyz++UMxcdDyfL3I9qvgWSsMVeOdoqJscnzIxvEl1bbp4sh+vzk
ZyPsfky0/Oduy5Jy+b80gFM3lf2ppwb8M4ivbNNo+MMJs4mbI/gZ2ERQNZDWDTpy
F2iq98yNia8mgjM9tfYBcmARlhjVpOl2IPkbLg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:51 2026 by rpki-client