Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa
File:                     1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa (raw, json)
Hash identifier:          iR78X0mgCniZZCm4mwii2CU/1JD8ljNS0OWlnK+UZQE=
Subject key identifier:   D4:72:74:58:C2:DF:FD:9C:29:BC:1D:AD:C2:A0:8E:CD:59:AD:57:48
Certificate issuer:       /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial:       019EFB6D7301C33A3305BB235933A2477B94
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa
Signing time:             Wed 24 Jun 2026 20:58:34 +0000
ASPA not before:          Wed 24 Jun 2026 20:58:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8298
Providers:                AS: 8283
                          AS: 25091
                          AS: 50869
                          AS: 51088
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:6d:73:01:c3:3a:33:05:bb:23:59:33:a2:47:7b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
        Validity
            Not Before: Jun 24 20:58:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4727458c2dffd9c29bc1dadc2a08ecd59ad5748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:da:fb:2d:a4:d0:05:b6:1e:0b:e5:81:67:
                    0f:38:96:91:79:f2:67:72:eb:20:c2:9e:60:f1:9d:
                    df:eb:71:67:1e:3b:86:a7:e4:74:81:7a:70:37:e6:
                    45:4f:c2:ff:1a:18:3f:ab:c3:f1:ff:d7:ba:bc:38:
                    43:dc:dc:d1:0e:45:a1:1a:6a:55:c8:9b:35:59:f2:
                    8a:bf:02:fd:d5:94:26:7c:3d:d0:f8:61:e6:87:a1:
                    f1:bb:3a:18:93:4f:a3:ce:41:3f:cf:22:05:5b:53:
                    12:32:c0:d3:f9:55:0f:43:be:96:8e:7b:f4:a3:25:
                    fa:20:33:f5:14:a9:3c:8c:4a:e5:5a:bd:f9:e6:e3:
                    60:d8:e1:d8:b7:1c:6e:a5:0c:a8:77:4a:64:b9:31:
                    ef:18:0a:e2:0b:be:d0:00:32:83:eb:cf:a3:34:a1:
                    ea:1e:dd:7f:ca:92:79:dc:92:19:12:ad:46:77:97:
                    40:7e:79:98:de:57:0e:70:31:ef:35:70:75:8e:59:
                    67:db:4c:f1:3a:c6:bd:cd:83:6e:ba:be:ee:d0:2e:
                    04:ae:47:0f:32:4b:5b:12:0e:5a:e1:cf:46:c0:d9:
                    25:6f:b9:65:4a:90:3b:49:fc:d2:b5:a4:56:f1:b6:
                    36:a2:c3:b5:85:99:69:1b:bc:d4:c4:ac:7f:7d:e7:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:74:58:C2:DF:FD:9C:29:BC:1D:AD:C2:A0:8E:CD:59:AD:57:48
            X509v3 Authority Key Identifier:
                keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8298

    Signature Algorithm: sha256WithRSAEncryption
         93:04:3e:8b:a8:37:43:31:a7:e4:ea:22:aa:dd:55:05:a4:2e:
         9c:0a:a4:a0:5a:2c:e8:a7:77:25:6f:05:65:21:dc:0d:cb:c4:
         fc:3c:1c:c1:da:41:9c:59:13:14:a1:8f:bb:34:db:b9:1f:ba:
         8e:1b:45:46:2a:fd:44:a5:f4:16:65:96:13:74:43:13:5c:b6:
         d4:cd:be:24:0b:08:37:c6:d4:30:85:37:49:cb:c4:f8:99:2a:
         38:34:02:f7:29:17:c1:dd:94:cc:35:22:9f:44:b0:40:80:45:
         42:f3:aa:d1:89:4d:df:cd:44:e4:9c:40:8b:b5:84:2e:c1:ac:
         fb:de:6f:7f:06:7b:0b:8a:d1:9a:42:c2:c0:7f:01:68:36:8a:
         6c:b1:c8:68:63:ab:ac:21:7b:cf:0d:af:f2:a4:4f:79:73:ca:
         92:eb:70:38:f0:b0:06:bc:4c:c9:d4:ec:82:45:e1:a6:dc:54:
         2f:18:2c:30:dc:86:47:11:83:d2:11:32:a5:70:ac:cb:7e:14:
         c2:2f:b7:3e:16:3d:35:ce:27:81:b0:f5:a6:e1:10:cc:20:45:
         ab:96:6f:97:6c:bf:06:98:ce:54:92:d2:75:09:78:a1:97:d2:
         f1:d5:98:f2:f6:d0:41:54:18:4c:29:06:e3:49:41:fa:16:16:
         74:63:78:0e
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ77bXMBwzozBbsjWTOiR3uUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2
NTM1MmMwHhcNMjYwNjI0MjA1ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDcyNzQ1OGMyZGZmZDljMjliYzFkYWRjMmEwOGVjZDU5YWQ1NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+Ta+y2k0AW2HgvlgWcPOJaRefJn
cusgwp5g8Z3f63FnHjuGp+R0gXpwN+ZFT8L/Ghg/q8Px/9e6vDhD3NzRDkWhGmpV
yJs1WfKKvwL91ZQmfD3Q+GHmh6HxuzoYk0+jzkE/zyIFW1MSMsDT+VUPQ76Wjnv0
oyX6IDP1FKk8jErlWr355uNg2OHYtxxupQyod0pkuTHvGAriC77QADKD68+jNKHq
Ht1/ypJ53JIZEq1Gd5dAfnmY3lcOcDHvNXB1jlln20zxOsa9zYNuur7u0C4ErkcP
MktbEg5a4c9GwNklb7llSpA7SfzStaRW8bY2osO1hZlpG7zUxKx/fecBAQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFNRydFjC3/2cKbwdrcKgjs1ZrVdIMB8GA1UdIwQY
MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt
ODQ5NDE3YWU2MzRkLzEvMUhKMFdNTGZfWndwdkIydHdxQ096Vm10VjBnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk
LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBqMA0GCSqGSIb3
DQEBCwUAA4IBAQCTBD6LqDdDMafk6iKq3VUFpC6cCqSgWizop3clbwVlIdwNy8T8
PBzB2kGcWRMUoY+7NNu5H7qOG0VGKv1EpfQWZZYTdEMTXLbUzb4kCwg3xtQwhTdJ
y8T4mSo4NAL3KRfB3ZTMNSKfRLBAgEVC86rRiU3fzUTknECLtYQuwaz73m9/BnsL
itGaQsLAfwFoNopsschoY6usIXvPDa/ypE95c8qS63A48LAGvEzJ1OyCReGm3FQv
GCww3IZHEYPSETKlcKzLfhTCL7c+Fj01zieBsPWm4RDMIEWrlm+XbL8GmM5UktJ1
CXihl9Lx1Zjy9tBBVBhMKQbjSUH6FhZ0Y3gO
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:36 2026 by rpki-client