Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/pr2JOR_hTL_Euy3Kq36KF2V_hMc.asa
File:                     pr2JOR_hTL_Euy3Kq36KF2V_hMc.asa (raw, json)
Hash identifier:          qKcjHgns7GU4yyCWIsDYgUvQUyej5zuR3y+K1f0K1gs=
Subject key identifier:   A6:BD:89:39:1F:E1:4C:BF:C4:BB:2D:CA:AB:7E:8A:17:65:7F:84:C7
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019F7F8606C56A389F2AB147946CB323DA4B
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/pr2JOR_hTL_Euy3Kq36KF2V_hMc.asa
Signing time:             Mon 20 Jul 2026 12:35:17 +0000
ASPA not before:          Mon 20 Jul 2026 12:35:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 201279
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7f:86:06:c5:6a:38:9f:2a:b1:47:94:6c:b3:23:da:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Jul 20 12:35:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6bd89391fe14cbfc4bb2dcaab7e8a17657f84c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:48:5a:30:4d:ee:d8:24:0a:28:20:b1:08:
                    05:27:1e:a5:7d:11:55:5d:98:a6:2c:57:a5:45:fc:
                    52:91:59:98:2a:92:00:3a:88:d8:f2:20:a2:e5:25:
                    20:11:ca:ee:ec:12:a7:70:4d:91:09:aa:b4:fe:7d:
                    b1:33:d7:d1:c6:0b:37:75:49:70:ae:23:40:43:d5:
                    da:e9:12:02:2e:7a:bd:81:16:ac:6a:f9:93:ee:d1:
                    5e:a9:a2:ba:9d:ef:c8:08:10:ab:b5:5c:3c:5a:ea:
                    4d:68:63:ad:51:b8:22:da:d7:f1:93:bd:f1:92:16:
                    f0:3a:35:32:f0:12:fa:2e:bc:13:d7:29:3c:03:b4:
                    ba:9f:d7:15:ce:d6:39:77:11:ce:af:c7:a1:b9:9a:
                    37:dc:d1:f0:46:fa:e3:55:81:98:db:b1:4c:09:31:
                    f2:ae:76:dc:27:6b:cd:53:e4:c6:26:ab:d0:9d:c9:
                    a5:46:7a:bf:fc:57:5f:3e:ac:89:1a:b1:09:8c:2e:
                    fb:42:b3:88:a6:2a:90:7d:a8:48:51:20:9f:7d:5c:
                    4a:2f:d9:03:11:56:06:43:dc:89:a8:d6:46:30:38:
                    e1:d0:cf:4e:6b:16:b2:09:b7:ac:0f:6f:15:27:4f:
                    75:7a:68:28:5e:cf:ff:02:0b:12:7e:09:62:db:ce:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:89:39:1F:E1:4C:BF:C4:BB:2D:CA:AB:7E:8A:17:65:7F:84:C7
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/pr2JOR_hTL_Euy3Kq36KF2V_hMc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         68:56:76:8d:71:db:c0:79:cd:4d:a0:dc:c6:22:8b:f2:8d:66:
         cb:0b:89:8d:3f:d4:14:36:13:b0:8b:36:cf:6a:66:18:44:c6:
         3a:5a:11:57:6c:f3:7a:14:58:6e:c2:ac:d3:32:44:8b:fb:46:
         89:f3:fc:5f:b3:65:3f:54:32:ac:e5:c5:0e:11:98:2f:14:c1:
         f4:e1:7b:1c:92:e2:5e:76:14:9f:86:5c:1a:69:90:38:de:81:
         72:21:00:60:20:82:37:a0:d1:8b:fc:8a:fe:5e:7a:76:1d:93:
         03:98:50:19:4c:bb:ee:a9:d2:f2:00:cc:9a:6e:b6:e1:81:ea:
         5e:1a:76:b5:10:91:cf:31:f1:73:4d:16:9a:55:ca:c8:72:6f:
         01:b7:0a:9d:85:76:a1:45:41:58:a6:ac:d3:38:57:83:fa:95:
         1f:b5:af:f3:5f:e5:8c:32:a1:68:dd:d9:df:83:76:7f:42:ee:
         c2:93:9b:66:9f:b6:7f:12:d8:45:7f:b3:15:54:32:f4:43:9e:
         c8:f4:4c:e2:42:56:c3:15:a2:b9:f1:ea:93:69:a8:72:b8:22:
         ce:ca:76:38:7a:c3:74:bd:ed:7d:e3:97:24:4f:ca:b5:42:d9:
         10:bc:7b:f6:a8:e8:55:7b:91:8b:23:8a:70:f5:05:80:b6:b8:
         01:8d:b0:9e
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZ9/hgbFajifKrFHlGyzI9pLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwNzIwMTIzNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJkODkzOTFmZTE0Y2JmYzRiYjJkY2FhYjdlOGExNzY1N2Y4NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBIWjBN7tgkCiggsQgFJx6lfRFV
XZimLFelRfxSkVmYKpIAOojY8iCi5SUgEcru7BKncE2RCaq0/n2xM9fRxgs3dUlw
riNAQ9Xa6RICLnq9gRasavmT7tFeqaK6ne/ICBCrtVw8WupNaGOtUbgi2tfxk73x
khbwOjUy8BL6LrwT1yk8A7S6n9cVztY5dxHOr8ehuZo33NHwRvrjVYGY27FMCTHy
rnbcJ2vNU+TGJqvQncmlRnq//FdfPqyJGrEJjC77QrOIpiqQfahIUSCffVxKL9kD
EVYGQ9yJqNZGMDjh0M9OaxayCbesD28VJ091emgoXs//AgsSfgli284vUQIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFKa9iTkf4Uy/xLstyqt+ihdlf4THMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xL3ByMkpPUl9oVExfRXV5M0txMzZLRjJWX2hNYy5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2LWM4NjE1YTU0MGNk
ZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxNFMA0GCSqG
SIb3DQEBCwUAA4IBAQBoVnaNcdvAec1NoNzGIovyjWbLC4mNP9QUNhOwizbPamYY
RMY6WhFXbPN6FFhuwqzTMkSL+0aJ8/xfs2U/VDKs5cUOEZgvFMH04XsckuJedhSf
hlwaaZA43oFyIQBgIII3oNGL/Ir+Xnp2HZMDmFAZTLvuqdLyAMyabrbhgepeGna1
EJHPMfFzTRaaVcrIcm8BtwqdhXahRUFYpqzTOFeD+pUfta/zX+WMMqFo3dnfg3Z/
Qu7Ck5tmn7Z/EthFf7MVVDL0Q57I9EziQlbDFaK58eqTaahyuCLOynY4esN0ve19
45ckT8q1QtkQvHv2qOhVe5GLI4pw9QWAtrgBjbCe
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:31 2026 by rpki-client