Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/HgfT2JSenK4GJsUbQzV8uG_wvvA.asa
File:                     HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (raw, json)
Hash identifier:          LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=
Subject key identifier:   1E:07:D3:D8:94:9E:9C:AE:06:26:C5:1B:43:35:7C:B8:6F:F0:BE:F0
Certificate issuer:       /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial:       019FEEC22EAA11CBD5798E16F2915B323DBB
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/HgfT2JSenK4GJsUbQzV8uG_wvvA.asa
Signing time:             Tue 11 Aug 2026 02:58:51 +0000
ASPA not before:          Tue 11 Aug 2026 02:58:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203852
Providers:                AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ee:c2:2e:aa:11:cb:d5:79:8e:16:f2:91:5b:32:3d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
        Validity
            Not Before: Aug 11 02:58:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1e07d3d8949e9cae0626c51b43357cb86ff0bef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:b4:af:c3:42:9a:ae:50:49:82:8c:91:01:
                    ac:ac:1d:1d:d9:80:23:81:3e:87:5a:b9:4e:91:55:
                    61:28:10:e5:53:c7:47:9e:86:1a:78:99:23:d6:a4:
                    4d:d4:5a:da:ce:10:ad:71:bc:80:58:40:70:82:23:
                    30:3b:b0:13:5b:52:50:b6:1b:a9:8f:52:22:5c:89:
                    a5:33:0f:b4:0a:1a:d8:b4:07:0a:92:a2:27:32:1e:
                    18:1a:b5:5f:14:ff:a9:97:d2:0d:1b:d8:47:59:e5:
                    77:1e:a2:5f:e9:8f:5c:71:e5:66:04:be:a7:af:69:
                    1f:c1:03:a7:eb:4c:7a:1f:21:63:a2:51:42:bc:4f:
                    fa:ea:4b:05:00:23:10:4e:21:c4:70:6e:ed:58:b1:
                    a1:cb:0f:c8:8e:45:67:29:94:f3:28:ac:ca:46:09:
                    6c:99:19:59:bc:e5:53:60:5c:22:86:21:87:24:ee:
                    3d:7e:f0:04:96:52:7e:d0:1c:7d:36:2b:ba:38:0d:
                    ff:7c:b7:04:f5:ba:4d:87:b2:5e:6a:8a:98:aa:50:
                    ee:35:14:ec:36:d1:af:cc:b1:2e:5c:a1:53:31:56:
                    07:d1:6c:cf:ec:e2:1e:eb:7a:ae:8b:c0:23:87:d2:
                    63:53:ba:8e:1a:dc:ae:c4:dd:04:6c:bd:f4:24:42:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:D3:D8:94:9E:9C:AE:06:26:C5:1B:43:35:7C:B8:6F:F0:BE:F0
            X509v3 Authority Key Identifier:
                keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/HgfT2JSenK4GJsUbQzV8uG_wvvA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203852

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:ca:52:1d:b8:eb:96:5e:e1:4e:69:38:61:d5:6e:26:3d:
         7e:08:89:2b:08:11:ee:bd:d5:8e:a7:cf:b9:49:91:44:c7:f6:
         4f:0e:6e:72:05:49:ab:ac:a7:1d:92:d9:96:13:00:cb:44:da:
         2e:05:7c:6a:c0:ae:65:07:27:37:a2:43:fc:77:f1:2a:cc:00:
         0f:5f:a0:b8:4e:16:b8:2d:32:ef:7c:2e:c5:19:45:1f:cc:24:
         55:9b:b8:50:21:b7:81:b1:a5:6e:f1:74:09:3f:d4:28:a7:80:
         27:93:9f:21:ad:f5:a3:a4:90:b8:f0:cd:54:5f:58:43:81:1c:
         6e:20:81:1c:d5:ef:6a:ff:9c:43:57:ac:33:2c:13:0c:af:65:
         bc:0f:86:e2:4a:50:ce:d4:bc:30:da:18:ca:08:20:49:95:e1:
         bb:05:90:c3:aa:9f:29:8b:70:8d:1b:04:ed:32:b1:ce:4e:24:
         ba:c5:1e:b1:b9:bf:7c:38:e4:0e:0a:bb:8b:84:60:eb:82:76:
         02:3a:48:94:f6:c1:17:b5:43:a1:c8:2b:ff:7f:a1:f8:9d:dc:
         79:05:60:d9:0e:7f:7d:e3:d9:7d:fb:6d:f9:8e:7d:e3:a8:f4:
         de:c3:d5:f2:30:da:49:8d:2b:95:6b:9d:1f:22:5f:ad:c2:49:
         e7:0f:42:86
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/uwi6qEcvVeY4W8pFbMj27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2Y5Zjg0YjI4MmM3Yzc3ODRiOWQzZDFiNjJkYmUwZDRm
ZjA5YjUwHhcNMjYwODExMDI1ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTA3ZDNkODk0OWU5Y2FlMDYyNmM1MWI0MzM1N2NiODZmZjBiZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm20r8NCmq5QSYKMkQGsrB0d2YAj
gT6HWrlOkVVhKBDlU8dHnoYaeJkj1qRN1FrazhCtcbyAWEBwgiMwO7ATW1JQthup
j1IiXImlMw+0ChrYtAcKkqInMh4YGrVfFP+pl9ING9hHWeV3HqJf6Y9cceVmBL6n
r2kfwQOn60x6HyFjolFCvE/66ksFACMQTiHEcG7tWLGhyw/IjkVnKZTzKKzKRgls
mRlZvOVTYFwihiGHJO49fvAEllJ+0Bx9Niu6OA3/fLcE9bpNh7JeaoqYqlDuNRTs
NtGvzLEuXKFTMVYH0WzP7OIe63qui8Ajh9JjU7qOGtyuxN0EbL30JEIQpwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFB4H09iUnpyuBibFG0M1fLhv8L7wMB8GA1UdIwQY
MBaAFNp/n4SygsfHeEudPRti2+DU/wm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4tZmhMS0N4OGQ0UzUwOUcyTGI0TlRfQ2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZGFmYjctMTU3NC00NDI1LTk0ODkt
NmFkNGVjOWZmZTc3LzEvSGdmVDJKU2VuSzRHSnNVYlF6Vjh1R193dnZBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mZGFmYjctMTU3NC00NDI1LTk0ODktNmFkNGVjOWZmZTc3
LzEvMm4tZmhMS0N4OGQ0UzUwOUcyTGI0TlRfQ2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMcTDANBgkqhkiG
9w0BAQsFAAOCAQEAIZ3KUh2465Ze4U5pOGHVbiY9fgiJKwgR7r3VjqfPuUmRRMf2
Tw5ucgVJq6ynHZLZlhMAy0TaLgV8asCuZQcnN6JD/HfxKswAD1+guE4WuC0y73wu
xRlFH8wkVZu4UCG3gbGlbvF0CT/UKKeAJ5OfIa31o6SQuPDNVF9YQ4EcbiCBHNXv
av+cQ1esMywTDK9lvA+G4kpQztS8MNoYygggSZXhuwWQw6qfKYtwjRsE7TKxzk4k
usUesbm/fDjkDgq7i4Rg64J2AjpIlPbBF7VDocgr/3+h+J3ceQVg2Q5/fePZfftt
+Y5946j03sPV8jDaSY0rlWudHyJfrcJJ5w9Chg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:48 2026 by rpki-client