Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/_UJDxh9rYkUlgNW-nJfPDms9qbE.asa
File:                     _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (raw, json)
Hash identifier:          /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=
Subject key identifier:   FD:42:43:C6:1F:6B:62:45:25:80:D5:BE:9C:97:CF:0E:6B:3D:A9:B1
Certificate issuer:       /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial:       019DCEF27AF02FD428244CF764B276E913DB
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/_UJDxh9rYkUlgNW-nJfPDms9qbE.asa
Signing time:             Mon 27 Apr 2026 12:38:10 +0000
ASPA not before:          Mon 27 Apr 2026 12:38:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215994
Providers:                AS: 3302
                          AS: 6758
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:f2:7a:f0:2f:d4:28:24:4c:f7:64:b2:76:e9:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
        Validity
            Not Before: Apr 27 12:38:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd4243c61f6b62452580d5be9c97cf0e6b3da9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:a1:46:b9:5f:32:91:ca:11:b1:e4:49:fa:
                    0d:01:c6:7f:bb:27:42:8d:c1:48:61:f3:3f:1d:ef:
                    21:2b:71:58:4b:4c:8b:11:84:46:4b:6d:57:6a:03:
                    fb:46:19:c6:49:85:4f:93:1a:96:60:50:dd:ef:a0:
                    3e:01:c8:0f:2a:70:57:47:75:c8:40:df:81:7a:3a:
                    fd:b6:be:0a:02:94:85:7f:3c:ad:2e:ab:20:18:5a:
                    aa:c1:98:47:01:77:d4:a1:cd:f4:88:75:9c:ec:b8:
                    fd:fe:ca:d6:df:98:78:6f:a8:55:ad:c3:43:a5:e9:
                    a3:9d:53:64:4c:95:d7:53:92:8d:ef:17:d2:1b:b1:
                    5e:c3:cc:87:c7:9b:12:25:ef:87:ef:0b:af:4f:49:
                    fe:fd:88:49:92:58:9e:7c:10:3f:a0:7e:e6:13:31:
                    6c:45:a5:1b:7c:f8:1e:75:7a:9b:04:c9:53:df:b5:
                    92:7f:f6:5d:52:ab:ec:f1:f8:a4:b4:27:f6:80:74:
                    52:ba:ab:53:0b:0b:88:0b:49:7a:78:ba:7e:21:e8:
                    b0:61:50:07:e5:27:47:37:5f:6e:19:33:06:a0:ef:
                    95:08:6f:73:7f:e2:cc:64:ef:3e:ec:a3:c9:cc:19:
                    61:50:cd:65:5d:4d:cc:66:44:3b:47:44:50:fe:40:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:43:C6:1F:6B:62:45:25:80:D5:BE:9C:97:CF:0E:6B:3D:A9:B1
            X509v3 Authority Key Identifier:
                keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/_UJDxh9rYkUlgNW-nJfPDms9qbE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215994

    Signature Algorithm: sha256WithRSAEncryption
         cb:59:5c:e9:74:9d:fc:67:97:a0:88:d2:6c:8c:5f:88:5b:98:
         f7:7a:48:f6:b9:cc:da:e8:40:af:ff:e4:97:56:5f:43:2e:49:
         44:12:76:1b:af:3a:2f:fb:03:06:fc:8d:66:b9:3a:36:dc:63:
         f3:74:5f:ee:b4:19:c6:89:37:6b:39:01:4c:71:2f:06:c0:0c:
         77:d2:b5:83:50:bf:7a:e7:49:15:c7:9b:72:b8:01:54:71:38:
         79:2a:3d:cf:43:1a:cd:13:aa:db:49:28:63:3a:c0:f5:2a:be:
         9a:5a:b4:8c:c2:69:49:47:4e:a6:c7:46:dd:06:07:47:44:8f:
         f2:e9:cc:92:f0:08:cc:02:6b:01:95:78:0d:e7:32:d5:e5:9e:
         81:b7:fc:40:36:d6:fd:3c:84:5a:36:0d:a0:20:50:51:e9:75:
         b9:16:54:9c:84:ac:09:d5:22:90:e9:56:c6:fa:c7:91:98:ff:
         5c:dd:a7:c2:a7:0d:2c:d2:a2:a4:53:14:bf:0e:40:16:62:62:
         43:53:77:40:bc:77:a3:d2:4d:76:2a:59:54:3f:b2:3c:7b:b6:
         9d:58:01:3d:4f:81:ff:58:c2:be:95:46:4b:48:ca:e8:be:01:
         4a:d9:d6:cc:8b:3f:6a:a7:ab:4b:5e:04:70:69:ac:68:dd:65:
         45:be:8f:bf
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3O8nrwL9QoJEz3ZLJ26RPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi
ZWY2NmIwHhcNMjYwNDI3MTIzODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDQyNDNjNjFmNmI2MjQ1MjU4MGQ1YmU5Yzk3Y2YwZTZiM2RhOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV6hRrlfMpHKEbHkSfoNAcZ/uydC
jcFIYfM/He8hK3FYS0yLEYRGS21XagP7RhnGSYVPkxqWYFDd76A+AcgPKnBXR3XI
QN+Bejr9tr4KApSFfzytLqsgGFqqwZhHAXfUoc30iHWc7Lj9/srW35h4b6hVrcND
pemjnVNkTJXXU5KN7xfSG7Few8yHx5sSJe+H7wuvT0n+/YhJkliefBA/oH7mEzFs
RaUbfPgedXqbBMlT37WSf/ZdUqvs8fiktCf2gHRSuqtTCwuIC0l6eLp+IeiwYVAH
5SdHN19uGTMGoO+VCG9zf+LMZO8+7KPJzBlhUM1lXU3MZkQ7R0RQ/kAJXQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFP1CQ8Yfa2JFJYDVvpyXzw5rPamxMB8GA1UdIwQY
MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt
ZTU5NmU1MjRjYWJlLzEvX1VKRHhoOXJZa1VsZ05XLW5KZlBEbXM5cWJFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl
LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLujANBgkqhkiG
9w0BAQsFAAOCAQEAy1lc6XSd/GeXoIjSbIxfiFuY93pI9rnM2uhAr//kl1ZfQy5J
RBJ2G686L/sDBvyNZrk6Ntxj83Rf7rQZxok3azkBTHEvBsAMd9K1g1C/eudJFceb
crgBVHE4eSo9z0MazROq20koYzrA9Sq+mlq0jMJpSUdOpsdG3QYHR0SP8unMkvAI
zAJrAZV4Decy1eWegbf8QDbW/TyEWjYNoCBQUel1uRZUnISsCdUikOlWxvrHkZj/
XN2nwqcNLNKipFMUvw5AFmJiQ1N3QLx3o9JNdipZVD+yPHu2nVgBPU+B/1jCvpVG
S0jK6L4BStnWzIs/aqerS14EcGmsaN1lRb6Pvw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:32 2026 by rpki-client