Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/5DqQ9hW3dBalgSVXvsmmpv04Na8.asa
File:                     5DqQ9hW3dBalgSVXvsmmpv04Na8.asa (raw, json)
Hash identifier:          ufHA7NYeo4Q5ZwaQYTsog/tM8CFlDz7G3uObnG3T/Xc=
Subject key identifier:   E4:3A:90:F6:15:B7:74:16:A5:81:25:57:BE:C9:A6:A6:FD:38:35:AF
Certificate issuer:       /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial:       019FCE59BD3680A91939DEE29C98C16C6554
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/5DqQ9hW3dBalgSVXvsmmpv04Na8.asa
Signing time:             Tue 04 Aug 2026 19:56:55 +0000
ASPA not before:          Tue 04 Aug 2026 19:56:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200605
Providers:                AS: 6939
                          AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ce:59:bd:36:80:a9:19:39:de:e2:9c:98:c1:6c:65:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
        Validity
            Not Before: Aug  4 19:56:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e43a90f615b77416a5812557bec9a6a6fd3835af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:5a:ae:5f:5c:96:b0:c6:83:4b:36:bb:20:
                    68:b0:5e:9e:ed:d1:40:08:03:e5:96:9a:d4:47:ce:
                    32:75:9d:66:fa:89:40:85:e4:d4:0a:40:c5:67:77:
                    f5:63:ba:d3:b7:92:1c:f9:1a:5e:41:d5:7d:7a:c2:
                    95:41:da:2a:1d:40:1b:39:aa:a6:d2:28:f2:c4:70:
                    78:e3:5d:67:61:a5:9b:b1:e6:d7:f7:0d:10:f1:a4:
                    ad:2b:93:a1:9f:fa:10:07:76:3b:ee:61:cd:7c:4d:
                    9e:e5:f8:5b:c5:b7:d8:c5:fc:f8:dc:bd:f2:7c:c7:
                    53:03:58:b1:5a:1e:2c:18:ca:bb:d8:01:84:98:f3:
                    52:d4:2f:5b:66:30:34:49:08:19:92:7e:94:2c:ea:
                    7a:f5:dc:55:c9:ee:a3:82:f5:3d:89:5d:e4:75:01:
                    3a:24:63:b5:b2:40:c9:91:8a:d6:0c:81:aa:dc:5d:
                    79:89:d6:16:7d:da:24:ec:14:0e:37:ba:b1:c1:97:
                    98:51:fd:8f:3f:27:df:0b:18:bf:bd:ee:0f:26:e0:
                    de:ad:fe:a6:59:f0:32:8d:d2:e3:12:9d:88:8d:14:
                    81:dd:2a:0d:7f:49:c0:20:41:90:82:e4:7b:4f:44:
                    08:e4:fa:31:68:47:ec:8e:41:ea:70:04:ee:60:99:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:90:F6:15:B7:74:16:A5:81:25:57:BE:C9:A6:A6:FD:38:35:AF
            X509v3 Authority Key Identifier:
                keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/5DqQ9hW3dBalgSVXvsmmpv04Na8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200605

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:75:2f:63:d6:4d:a9:08:ff:f3:aa:b6:1a:80:52:56:52:
         0d:4c:21:fd:7b:6d:b7:31:6a:63:fd:b0:47:30:92:aa:81:34:
         6b:16:50:da:37:f0:ad:fc:ec:3a:31:68:9d:7c:0f:13:ca:e5:
         88:c4:f8:ba:62:5a:d3:3f:1e:2f:00:6a:fb:6c:38:c1:a0:2a:
         71:80:e7:41:a7:04:7d:61:37:d1:d3:78:11:3e:ab:ef:8b:61:
         0b:ee:59:de:ac:21:d6:29:af:53:c2:60:7c:0f:b4:d2:19:53:
         af:7d:dd:d1:04:9b:30:2c:9d:af:f2:98:af:49:9a:80:e5:f3:
         9e:62:78:8a:04:90:5c:ed:b3:ef:e2:69:6e:6b:1b:c7:78:6f:
         dc:b7:af:bc:31:93:ff:cc:f3:b9:96:a9:30:c3:e5:70:d9:29:
         41:38:94:86:8b:91:c8:7a:02:c3:13:1d:75:97:4b:0c:c3:9a:
         88:df:7b:02:ed:02:6f:0a:e1:74:fd:4f:71:d3:a0:0f:9d:35:
         75:74:e0:b3:7f:75:a1:d9:29:1c:64:d3:c8:7b:a7:05:ee:30:
         ef:ea:6d:58:51:06:87:15:99:c9:8e:60:b7:71:2c:22:87:75:
         0a:8a:70:22:1d:79:44:ef:91:f6:f9:a1:32:db:3b:41:77:7e:
         c9:8c:9a:87
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/OWb02gKkZOd7inJjBbGVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx
NTc5MzkwHhcNMjYwODA0MTk1NjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDNhOTBmNjE1Yjc3NDE2YTU4MTI1NTdiZWM5YTZhNmZkMzgzNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HFarl9clrDGg0s2uyBosF6e7dFA
CAPllprUR84ydZ1m+olAheTUCkDFZ3f1Y7rTt5Ic+RpeQdV9esKVQdoqHUAbOaqm
0ijyxHB4411nYaWbsebX9w0Q8aStK5Ohn/oQB3Y77mHNfE2e5fhbxbfYxfz43L3y
fMdTA1ixWh4sGMq72AGEmPNS1C9bZjA0SQgZkn6ULOp69dxVye6jgvU9iV3kdQE6
JGO1skDJkYrWDIGq3F15idYWfdok7BQON7qxwZeYUf2PPyffCxi/ve4PJuDerf6m
WfAyjdLjEp2IjRSB3SoNf0nAIEGQguR7T0QI5PoxaEfsjkHqcATuYJmM1QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOQ6kPYVt3QWpYElV77Jpqb9ODWvMB8GA1UdIwQY
MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt
NzA4ZGMwOTdmZmZlLzEvNURxUTloVzNkQmFsZ1NWWHZzbW1wdjA0TmE4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl
LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPnTANBgkqhkiG
9w0BAQsFAAOCAQEAMT51L2PWTakI//OqthqAUlZSDUwh/XtttzFqY/2wRzCSqoE0
axZQ2jfwrfzsOjFonXwPE8rliMT4umJa0z8eLwBq+2w4waAqcYDnQacEfWE30dN4
ET6r74thC+5Z3qwh1imvU8JgfA+00hlTr33d0QSbMCydr/KYr0magOXznmJ4igSQ
XO2z7+Jpbmsbx3hv3LevvDGT/8zzuZapMMPlcNkpQTiUhouRyHoCwxMddZdLDMOa
iN97Au0CbwrhdP1PcdOgD501dXTgs391odkpHGTTyHunBe4w7+ptWFEGhxWZyY5g
t3EsIod1CopwIh15RO+R9vmhMts7QXd+yYyahw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:30 2026 by rpki-client