Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa
File:                     eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa (raw, json)
Hash identifier:          H/3q1BtGSjB92oCZLbkV7NIIOrg6Uo4fxj4GnvbKnFk=
Subject key identifier:   79:89:34:43:AB:39:D6:90:73:93:D1:F5:61:D5:C2:9F:DD:19:D8:69
Certificate issuer:       /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial:       019D301E2E95EAF3CECE18377E39E3315F3C
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa
Signing time:             Fri 27 Mar 2026 16:26:17 +0000
ASPA not before:          Fri 27 Mar 2026 16:26:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208221
Providers:                AS: 31257
                          AS: 204137
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:1e:2e:95:ea:f3:ce:ce:18:37:7e:39:e3:31:5f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
        Validity
            Not Before: Mar 27 16:26:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79893443ab39d6907393d1f561d5c29fdd19d869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:ca:a0:81:b8:ab:5a:bd:89:35:83:e8:33:
                    d9:5d:27:84:fe:2c:23:cb:c0:c7:b6:aa:71:7f:b3:
                    71:83:97:80:6d:a5:22:4b:6b:74:16:cc:62:34:16:
                    79:55:3c:8f:96:1d:0c:cf:2a:1c:e0:8e:d8:e2:82:
                    f8:ac:a7:50:41:85:01:f3:15:f7:3a:27:2e:bd:08:
                    27:69:1c:10:5d:e3:f1:94:f1:e5:f9:91:81:40:bd:
                    4c:4f:4a:be:28:05:6d:d8:2b:98:e8:b2:ec:ef:4c:
                    fc:4a:e6:af:b9:e8:8d:67:b4:1b:19:84:96:85:3d:
                    40:94:5d:37:49:7c:c3:51:7a:9d:94:11:ee:6b:d3:
                    7a:ba:b5:39:31:2a:14:8b:f8:66:d9:6f:b1:44:e0:
                    9b:b8:64:b2:79:94:29:90:59:c5:bb:6e:d4:95:f3:
                    ec:be:01:6c:ad:79:a8:c0:98:d7:30:24:a6:9a:4f:
                    b8:6f:42:a9:50:1d:4e:3b:09:a8:fb:ac:b3:3b:e0:
                    fc:82:05:69:9d:97:8f:88:e0:a0:83:c5:47:8a:1f:
                    c7:e1:d9:6b:da:76:9f:f4:2d:87:2c:d5:4b:98:b1:
                    16:63:02:b3:98:6e:87:df:30:31:8c:07:eb:f7:31:
                    2c:93:7f:d5:96:8a:f6:11:a0:17:ce:5a:03:b5:03:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:34:43:AB:39:D6:90:73:93:D1:F5:61:D5:C2:9F:DD:19:D8:69
            X509v3 Authority Key Identifier:
                keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/eYk0Q6s51pBzk9H1YdXCn90Z2Gk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208221

    Signature Algorithm: sha256WithRSAEncryption
         95:57:51:51:95:80:04:15:18:7e:7d:de:ff:01:e4:ce:fb:74:
         ae:0b:59:0d:3a:b5:8c:b1:1b:72:f2:46:fb:a1:aa:d7:b3:98:
         bd:87:02:5b:d3:ad:7c:a7:aa:88:ea:8e:7f:af:e6:a1:f5:36:
         3d:52:c3:76:8b:53:a2:00:76:b4:f5:0e:f0:8c:58:ed:02:84:
         94:89:fa:8d:b9:ef:30:6e:b2:0f:0b:fb:f7:b3:3f:a4:4f:bb:
         7d:80:69:ce:6a:b3:2a:1c:0d:e1:50:1b:b4:f0:1e:1f:13:10:
         af:94:f6:f2:c4:15:42:9b:88:df:81:8f:6f:2a:06:3b:39:0a:
         25:06:5e:19:e4:8d:68:e8:ae:f0:eb:e6:35:22:de:d2:98:6c:
         33:d4:cd:00:0e:98:6d:80:f8:61:ce:e9:72:ba:46:23:fa:ee:
         35:60:4a:07:c5:4a:d8:8b:45:4a:64:f8:3c:53:18:cd:9b:bc:
         4d:fc:3b:0e:1b:14:40:ea:39:25:b3:31:5d:27:60:f3:93:55:
         85:14:93:5c:3d:f5:72:68:c3:19:ba:30:ff:bd:fb:46:e1:00:
         f5:0b:c9:22:1a:63:7c:03:23:1b:5c:96:d7:1a:a3:5c:76:b7:
         78:4d:86:45:f9:15:70:cb:46:65:a3:4c:c2:9c:4c:35:33:b8:
         70:be:ff:cf
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0wHi6V6vPOzhg3fjnjMV88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi
YzY5NzgwHhcNMjYwMzI3MTYyNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTg5MzQ0M2FiMzlkNjkwNzM5M2QxZjU2MWQ1YzI5ZmRkMTlkODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7KoIG4q1q9iTWD6DPZXSeE/iwj
y8DHtqpxf7Nxg5eAbaUiS2t0FsxiNBZ5VTyPlh0Mzyoc4I7Y4oL4rKdQQYUB8xX3
OicuvQgnaRwQXePxlPHl+ZGBQL1MT0q+KAVt2CuY6LLs70z8SuavueiNZ7QbGYSW
hT1AlF03SXzDUXqdlBHua9N6urU5MSoUi/hm2W+xROCbuGSyeZQpkFnFu27UlfPs
vgFsrXmowJjXMCSmmk+4b0KpUB1OOwmo+6yzO+D8ggVpnZePiOCgg8VHih/H4dlr
2naf9C2HLNVLmLEWYwKzmG6H3zAxjAfr9zEsk3/Vlor2EaAXzloDtQP5ZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHmJNEOrOdaQc5PR9WHVwp/dGdhpMB8GA1UdIwQY
MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt
MTAyNTU3MThhMTg1LzEvZVlrMFE2czUxcEJ6azlIMVlkWENuOTBaMkdrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1
LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtXTANBgkqhkiG
9w0BAQsFAAOCAQEAlVdRUZWABBUYfn3e/wHkzvt0rgtZDTq1jLEbcvJG+6Gq17OY
vYcCW9OtfKeqiOqOf6/mofU2PVLDdotTogB2tPUO8IxY7QKElIn6jbnvMG6yDwv7
97M/pE+7fYBpzmqzKhwN4VAbtPAeHxMQr5T28sQVQpuI34GPbyoGOzkKJQZeGeSN
aOiu8OvmNSLe0phsM9TNAA6YbYD4Yc7pcrpGI/ruNWBKB8VK2ItFSmT4PFMYzZu8
Tfw7DhsUQOo5JbMxXSdg85NVhRSTXD31cmjDGbow/737RuEA9QvJIhpjfAMjG1yW
1xqjXHa3eE2GRfkVcMtGZaNMwpxMNTO4cL7/zw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:01 2026 by rpki-client