Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/xznMmB3AmOhTRlhv5xfhx1n5Qbg.asa
File:                     xznMmB3AmOhTRlhv5xfhx1n5Qbg.asa (raw, json)
Hash identifier:          n7u2+uFEYHK8SeHBIkaY8QZSURFreDFjbfMfNYzC68E=
Subject key identifier:   C7:39:CC:98:1D:C0:98:E8:53:46:58:6F:E7:17:E1:C7:59:F9:41:B8
Certificate issuer:       /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial:       019E73CB0C064EF915C4C09A3FA9878DC5D0
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/xznMmB3AmOhTRlhv5xfhx1n5Qbg.asa
Signing time:             Fri 29 May 2026 12:52:27 +0000
ASPA not before:          Fri 29 May 2026 12:52:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214762
Providers:                AS: 6204
                          AS: 6939
                          AS: 15694
                          AS: 24748
                          AS: 50263
                          AS: 51155
                          AS: 62403
                          AS: 205941
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:73:cb:0c:06:4e:f9:15:c4:c0:9a:3f:a9:87:8d:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
        Validity
            Not Before: May 29 12:52:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c739cc981dc098e85346586fe717e1c759f941b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:b8:c6:75:f4:e0:92:9f:cd:19:83:a6:2d:
                    a5:fc:29:f0:3b:c6:27:d8:56:62:bd:36:2f:77:57:
                    16:44:87:36:1c:b9:2e:89:de:c6:0f:bd:b2:09:c3:
                    b7:07:df:aa:88:32:40:99:f9:96:75:ac:1e:80:13:
                    d8:c2:fe:72:cf:d1:66:c4:14:68:5c:77:a8:7b:45:
                    7c:0a:e2:43:73:ed:16:f4:54:da:2a:6e:ed:ef:b3:
                    64:45:b4:57:8d:7b:c8:3f:fc:ce:3a:8b:80:08:b2:
                    a1:4c:05:06:39:b6:a9:ce:46:83:c5:4b:59:a3:1d:
                    5e:89:b7:35:93:ce:80:75:aa:78:95:f0:9c:48:84:
                    0e:7e:19:d6:5c:54:24:25:bf:2a:81:56:73:09:2b:
                    b3:63:d2:26:04:e7:c2:00:21:b4:89:1e:ff:b1:3a:
                    b0:b8:c8:22:a3:29:8b:04:10:60:b4:b7:ab:5e:0a:
                    fe:ba:1a:a6:c4:38:4b:57:5a:6c:3d:31:1a:28:e9:
                    6a:65:08:c8:2d:a9:94:82:a4:bd:30:f1:7c:7f:4a:
                    3f:4c:ea:4d:75:6b:75:e4:4d:7b:c3:d0:ae:0a:f8:
                    18:2c:0b:53:31:73:7b:1a:f2:0c:1e:11:d2:d3:e5:
                    49:39:29:52:8d:28:2b:6c:63:29:b5:c0:79:d8:30:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:CC:98:1D:C0:98:E8:53:46:58:6F:E7:17:E1:C7:59:F9:41:B8
            X509v3 Authority Key Identifier:
                keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/xznMmB3AmOhTRlhv5xfhx1n5Qbg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214762

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:47:d0:cd:f5:45:95:8f:6a:23:6f:e4:8e:1b:63:06:f6:
         91:29:cd:fd:3c:2b:0e:6c:b7:e9:dd:4d:e4:0c:94:9e:f5:1f:
         ba:e0:f2:44:6e:84:0e:6a:fa:12:96:02:6c:56:5d:ae:bc:ac:
         c8:14:34:c6:79:41:f9:30:9f:3b:06:2b:7b:41:5d:fb:08:47:
         98:88:2b:aa:fd:86:10:21:d9:9a:f2:fb:9d:4c:e5:75:c6:33:
         0f:65:4f:e8:7f:17:1e:06:a3:be:34:bb:16:b0:49:4d:2c:c4:
         32:c1:31:ad:9a:12:bd:b0:f9:74:69:e6:9e:e2:a2:41:ae:95:
         94:ec:cd:68:52:b6:69:17:2e:9f:26:88:28:5a:a5:9c:a5:11:
         b0:3f:cd:a5:ce:f7:a4:c1:ce:09:c9:37:3d:55:a2:12:7a:00:
         f0:c4:0f:8c:d1:b9:da:b1:09:44:15:7e:bf:18:00:2d:fc:bb:
         40:f2:e2:02:20:86:59:47:82:f4:84:96:0c:0f:aa:4e:14:2a:
         0f:8f:8a:26:18:70:03:88:b0:29:ad:5c:4c:8e:dd:ba:d2:1b:
         58:cd:8e:9a:67:31:03:e6:d1:a6:01:ce:bd:b6:38:f0:81:70:
         e7:af:4b:35:4e:8d:64:d6:82:18:0d:aa:e3:87:cd:e9:97:b6:
         f4:c1:3e:d9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ5zywwGTvkVxMCaP6mHjcXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTA2ZDE0YTg0ZjU5YjdmZGY0MmM4ODEwMmU0ZWRlNjZj
Y2IxZTEwHhcNMjYwNTI5MTI1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzM5Y2M5ODFkYzA5OGU4NTM0NjU4NmZlNzE3ZTFjNzU5Zjk0MWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu24xnX04JKfzRmDpi2l/CnwO8Yn
2FZivTYvd1cWRIc2HLkuid7GD72yCcO3B9+qiDJAmfmWdawegBPYwv5yz9FmxBRo
XHeoe0V8CuJDc+0W9FTaKm7t77NkRbRXjXvIP/zOOouACLKhTAUGObapzkaDxUtZ
ox1eibc1k86Adap4lfCcSIQOfhnWXFQkJb8qgVZzCSuzY9ImBOfCACG0iR7/sTqw
uMgioymLBBBgtLerXgr+uhqmxDhLV1psPTEaKOlqZQjILamUgqS9MPF8f0o/TOpN
dWt15E17w9CuCvgYLAtTMXN7GvIMHhHS0+VJOSlSjSgrbGMptcB52DA/ZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMc5zJgdwJjoU0ZYb+cX4cdZ+UG4MB8GA1UdIwQY
MBaAFDTgbRSoT1m3/fQsiBAuTt5mzLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9CdEZLaFBXYmY5OUN5SUVDNU8zbWJNc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84OWZhZTctNGE1Zi00Y2VhLTk4YWUt
OWYzOTY5NzRkODFhLzEveHpuTW1CM0FtT2hUUmxodjV4Zmh4MW41UWJnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84OWZhZTctNGE1Zi00Y2VhLTk4YWUtOWYzOTY5NzRkODFh
LzEvTk9CdEZLaFBXYmY5OUN5SUVDNU8zbWJNc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNG6jANBgkqhkiG
9w0BAQsFAAOCAQEATL5H0M31RZWPaiNv5I4bYwb2kSnN/TwrDmy36d1N5AyUnvUf
uuDyRG6EDmr6EpYCbFZdrrysyBQ0xnlB+TCfOwYre0Fd+whHmIgrqv2GECHZmvL7
nUzldcYzD2VP6H8XHgajvjS7FrBJTSzEMsExrZoSvbD5dGnmnuKiQa6VlOzNaFK2
aRcunyaIKFqlnKURsD/Npc73pMHOCck3PVWiEnoA8MQPjNG52rEJRBV+vxgALfy7
QPLiAiCGWUeC9ISWDA+qThQqD4+KJhhwA4iwKa1cTI7dutIbWM2OmmcxA+bRpgHO
vbY48IFw569LNU6NZNaCGA2q44fN6Ze29ME+2Q==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:07 2026 by rpki-client