Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa
File:                     wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa (raw, json)
Hash identifier:          sD8ye+o6KlRiRfxK9grgMbdXDN9cGHkO49QpZZCQGaY=
Subject key identifier:   C0:06:12:3A:56:57:23:04:53:5C:9D:7F:B0:41:EC:BD:48:3A:FC:79
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019DC8C107F7F29CD4E4DBCAFCFE4863D2D8
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa
Signing time:             Sun 26 Apr 2026 07:46:26 +0000
ASPA not before:          Sun 26 Apr 2026 07:46:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212939
Providers:                AS: 58224
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c8:c1:07:f7:f2:9c:d4:e4:db:ca:fc:fe:48:63:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Apr 26 07:46:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c006123a56572304535c9d7fb041ecbd483afc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:47:cd:2d:fe:d8:4a:bd:c7:ed:3b:f7:8b:
                    ff:3d:16:d4:95:9f:62:cc:fb:86:d1:ff:fe:ff:02:
                    c0:69:8e:54:5d:36:76:e8:7e:45:18:63:41:2d:c0:
                    48:f6:1e:6a:74:bc:bc:14:b6:60:bb:fd:24:93:9d:
                    6d:71:42:80:ec:d8:ce:78:30:b2:4e:88:82:77:f5:
                    83:99:64:69:c0:05:37:30:3f:ce:5e:43:8c:1e:5d:
                    41:76:15:73:9d:3f:8d:f1:7d:f8:6d:51:d9:20:88:
                    aa:d1:71:d9:14:a8:67:37:ed:9f:b1:40:91:62:37:
                    ea:a7:e2:26:64:68:25:15:ec:73:4d:dc:11:19:68:
                    f4:94:7f:56:6d:5f:77:48:3d:1f:30:c4:97:7f:f5:
                    0d:0f:bd:5c:d2:9f:ec:4e:3d:98:27:bd:72:c4:8a:
                    93:03:40:db:02:9f:04:28:b6:4d:8b:1f:23:f6:f2:
                    d6:5a:3f:89:62:76:89:aa:13:41:70:2b:3c:76:25:
                    80:5f:d8:c2:eb:00:c8:55:11:a0:1e:ce:0b:0c:92:
                    87:22:ab:af:3f:a5:c2:20:bf:67:20:bb:6c:80:03:
                    b0:fd:dd:e7:5a:49:5b:75:ff:89:15:e6:f2:e9:c6:
                    db:5b:61:00:f2:03:f3:d6:c0:5f:80:c9:9f:42:fd:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:12:3A:56:57:23:04:53:5C:9D:7F:B0:41:EC:BD:48:3A:FC:79
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212939

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:4c:87:fe:6f:6d:16:28:8e:5f:ee:94:d6:f3:62:c7:c3:
         f0:fe:30:c9:92:39:bb:06:cf:ed:b8:f6:d8:19:36:fa:a6:d4:
         1b:be:06:88:62:eb:3b:2d:1a:0e:17:66:30:34:2f:e2:48:03:
         84:74:4e:de:ad:41:b2:0d:84:05:b4:9c:c7:a7:6b:f7:a2:b8:
         05:7e:08:f5:ab:ac:5e:4b:34:31:53:ff:53:b3:6a:32:45:17:
         14:72:e1:fd:d0:60:9d:c1:0e:76:90:8e:18:13:cd:33:dd:8f:
         39:b4:82:83:14:e1:46:12:e4:73:16:d5:b0:a7:df:6e:4e:8e:
         ec:c9:9d:08:8a:fc:b1:50:cd:e7:ff:d3:ed:da:17:c6:4b:f3:
         45:4c:4e:e7:8e:6f:b3:2a:3b:3c:bd:1d:06:d8:a3:62:f6:96:
         67:37:1a:42:c7:ca:86:70:4a:d7:bc:db:38:7d:e2:52:fb:f5:
         84:d5:f7:c0:6e:f5:73:d6:47:0a:cb:6e:c2:ef:8b:dc:12:84:
         50:17:49:05:48:8b:c0:52:69:b4:dc:2b:8a:b4:91:9d:0a:e2:
         17:29:56:1a:ca:39:86:15:55:8b:79:a4:6d:be:7b:98:fa:5b:
         98:58:f7:07:b2:ee:b7:21:c3:d5:3c:4a:21:24:78:0d:1a:dd:
         d1:55:98:e3
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3IwQf38pzU5NvK/P5IY9LYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjYwNDI2MDc0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA2MTIzYTU2NTcyMzA0NTM1YzlkN2ZiMDQxZWNiZDQ4M2FmYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IRHzS3+2Eq9x+0794v/PRbUlZ9i
zPuG0f/+/wLAaY5UXTZ26H5FGGNBLcBI9h5qdLy8FLZgu/0kk51tcUKA7NjOeDCy
ToiCd/WDmWRpwAU3MD/OXkOMHl1BdhVznT+N8X34bVHZIIiq0XHZFKhnN+2fsUCR
Yjfqp+ImZGglFexzTdwRGWj0lH9WbV93SD0fMMSXf/UND71c0p/sTj2YJ71yxIqT
A0DbAp8EKLZNix8j9vLWWj+JYnaJqhNBcCs8diWAX9jC6wDIVRGgHs4LDJKHIquv
P6XCIL9nILtsgAOw/d3nWklbdf+JFeby6cbbW2EA8gPz1sBfgMmfQv2AcQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMAGEjpWVyMEU1ydf7BB7L1IOvx5MB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvd0FZU09sWlhJd1JUWEoxX3NFSHN2VWc2X0hrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/yzANBgkqhkiG
9w0BAQsFAAOCAQEAIY5Mh/5vbRYojl/ulNbzYsfD8P4wyZI5uwbP7bj22Bk2+qbU
G74GiGLrOy0aDhdmMDQv4kgDhHRO3q1Bsg2EBbScx6dr96K4BX4I9ausXks0MVP/
U7NqMkUXFHLh/dBgncEOdpCOGBPNM92PObSCgxThRhLkcxbVsKffbk6O7MmdCIr8
sVDN5//T7doXxkvzRUxO545vsyo7PL0dBtijYvaWZzcaQsfKhnBK17zbOH3iUvv1
hNX3wG71c9ZHCstuwu+L3BKEUBdJBUiLwFJptNwrirSRnQriFylWGso5hhVVi3mk
bb57mPpbmFj3B7LutyHD1TxKISR4DRrd0VWY4w==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:49:10 2026 by rpki-client