Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/gCF8P8F5lSL9HvasAwXHB7HKdbE.asa
File:                     gCF8P8F5lSL9HvasAwXHB7HKdbE.asa (raw, json)
Hash identifier:          kR79hFKxdxVzWG38Y8Wt9YNidVRr/JDWZvFeRfeBIYk=
Subject key identifier:   80:21:7C:3F:C1:79:95:22:FD:1E:F6:AC:03:05:C7:07:B1:CA:75:B1
Certificate issuer:       /CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
Certificate serial:       019E3F6C902A775F03562B3E8D3BC33760C4
Authority key identifier: B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/gCF8P8F5lSL9HvasAwXHB7HKdbE.asa
Signing time:             Tue 19 May 2026 08:48:59 +0000
ASPA not before:          Tue 19 May 2026 08:48:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199180
Providers:                AS: 21859
                          AS: 58212
                          AS: 137409
                          AS: 199529
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3f:6c:90:2a:77:5f:03:56:2b:3e:8d:3b:c3:37:60:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82beffc4391d5b3bbd5fd4b0fc32af5db2006ca
        Validity
            Not Before: May 19 08:48:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80217c3fc1799522fd1ef6ac0305c707b1ca75b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:92:5f:aa:64:e0:a2:7c:33:20:7c:c7:a2:
                    72:b3:1f:a2:3e:f3:2a:6f:c6:b5:87:df:a1:c1:37:
                    f1:5f:e9:92:bc:76:f7:ae:06:cb:23:1e:a0:69:93:
                    fb:51:7f:4c:2d:02:52:14:98:f8:b5:68:30:8b:bc:
                    04:7e:ae:d3:44:a7:a7:49:56:d0:a9:5b:7f:89:43:
                    a8:b0:48:97:3b:55:44:7b:54:80:fb:39:0f:2f:3b:
                    55:0c:ef:0e:fa:0b:ac:08:b6:ad:77:a0:90:b9:4f:
                    42:61:87:75:36:fd:f7:64:dd:ad:3d:94:16:82:86:
                    8b:1b:a5:b8:a4:79:4f:35:d7:6e:74:52:65:43:48:
                    62:c3:1f:e6:6e:0e:c4:fa:d7:d3:b1:7d:11:34:f9:
                    ca:aa:eb:e5:5e:3a:3d:ca:3c:66:fc:5d:cd:11:e8:
                    de:dd:32:7e:67:0a:4a:ee:d0:bf:56:63:80:1f:e1:
                    14:8b:eb:c8:c5:8d:5c:2a:ce:52:80:7b:8f:65:d6:
                    ee:80:7b:f4:db:12:32:e1:25:72:57:98:77:4e:48:
                    b8:4d:5f:5a:19:6b:21:00:3d:96:f3:31:14:59:d2:
                    6c:56:9f:c0:7d:84:d4:76:bc:7a:37:ff:dc:0a:a4:
                    dc:f7:30:86:d7:35:ff:a5:49:b0:87:0d:e5:23:86:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:7C:3F:C1:79:95:22:FD:1E:F6:AC:03:05:C7:07:B1:CA:75:B1
            X509v3 Authority Key Identifier:
                keyid:B8:2B:EF:FC:43:91:D5:B3:BB:D5:FD:4B:0F:C3:2A:F5:DB:20:06:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCvv_EOR1bO71f1LD8Mq9dsgBso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/gCF8P8F5lSL9HvasAwXHB7HKdbE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c49e22-1de7-4367-993b-4ef4064eb423/1/uCvv_EOR1bO71f1LD8Mq9dsgBso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199180

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:dc:06:41:fb:5e:e4:aa:63:cc:ef:3d:92:77:8a:a2:1b:
         86:8e:ff:50:8c:4d:41:b6:49:f3:b8:81:3f:38:43:3e:4f:e9:
         27:0f:82:35:e4:1d:5e:cc:9b:98:c7:aa:01:49:9d:2c:d2:99:
         77:8c:26:44:24:a1:66:a4:da:66:ea:94:c2:fd:60:27:30:ad:
         ec:1b:35:ea:75:85:3b:f5:ae:b8:26:54:3c:0e:71:e8:eb:40:
         7b:0a:9f:b5:9d:d5:22:38:36:76:ae:5b:64:0d:b1:de:84:6b:
         70:e9:f0:14:6c:8d:8c:86:93:e0:69:18:5d:3f:3f:6b:a1:a5:
         54:cc:de:08:eb:18:dc:a7:c0:87:0d:de:7d:99:31:bd:c6:bb:
         40:d3:ba:2c:e7:c2:0e:89:09:59:2f:51:d2:4e:44:f3:3e:96:
         93:de:62:42:ee:4c:ff:fb:1e:34:ab:c0:47:9b:16:b0:c4:b9:
         9a:3d:05:ff:07:40:34:9b:c5:b0:10:ca:64:58:41:3c:90:68:
         08:08:80:72:2c:ad:27:2a:80:5b:ef:55:4e:80:85:63:a9:fa:
         74:3a:f0:ea:16:aa:cf:b4:db:7e:ef:c6:02:45:34:b7:8a:a1:
         27:c6:20:d3:99:72:96:45:11:f2:14:e2:0e:54:74:c0:a0:f7:
         c6:51:c4:05
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4/bJAqd18DVis+jTvDN2DEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmJlZmZjNDM5MWQ1YjNiYmQ1ZmQ0YjBmYzMyYWY1ZGIy
MDA2Y2EwHhcNMjYwNTE5MDg0ODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDIxN2MzZmMxNzk5NTIyZmQxZWY2YWMwMzA1YzcwN2IxY2E3NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeOSX6pk4KJ8MyB8x6Jysx+iPvMq
b8a1h9+hwTfxX+mSvHb3rgbLIx6gaZP7UX9MLQJSFJj4tWgwi7wEfq7TRKenSVbQ
qVt/iUOosEiXO1VEe1SA+zkPLztVDO8O+gusCLatd6CQuU9CYYd1Nv33ZN2tPZQW
goaLG6W4pHlPNddudFJlQ0hiwx/mbg7E+tfTsX0RNPnKquvlXjo9yjxm/F3NEeje
3TJ+ZwpK7tC/VmOAH+EUi+vIxY1cKs5SgHuPZdbugHv02xIy4SVyV5h3Tki4TV9a
GWshAD2W8zEUWdJsVp/AfYTUdrx6N//cCqTc9zCG1zX/pUmwhw3lI4Y2ywIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIAhfD/BeZUi/R72rAMFxwexynWxMB8GA1UdIwQY
MBaAFLgr7/xDkdWzu9X9Sw/DKvXbIAbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUN2dl9FT1IxYk83MWYxTEQ4TXE5ZHNnQnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jNDllMjItMWRlNy00MzY3LTk5M2It
NGVmNDA2NGViNDIzLzEvZ0NGOFA4RjVsU0w5SHZhc0F3WEhCN0hLZGJFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jNDllMjItMWRlNy00MzY3LTk5M2ItNGVmNDA2NGViNDIz
LzEvdUN2dl9FT1IxYk83MWYxTEQ4TXE5ZHNnQnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMKDDANBgkqhkiG
9w0BAQsFAAOCAQEAhurcBkH7XuSqY8zvPZJ3iqIbho7/UIxNQbZJ87iBPzhDPk/p
Jw+CNeQdXsybmMeqAUmdLNKZd4wmRCShZqTaZuqUwv1gJzCt7Bs16nWFO/WuuCZU
PA5x6OtAewqftZ3VIjg2dq5bZA2x3oRrcOnwFGyNjIaT4GkYXT8/a6GlVMzeCOsY
3KfAhw3efZkxvca7QNO6LOfCDokJWS9R0k5E8z6Wk95iQu5M//seNKvAR5sWsMS5
mj0F/wdANJvFsBDKZFhBPJBoCAiAciytJyqAW+9VToCFY6n6dDrw6haqz7Tbfu/G
AkU0t4qhJ8Yg05lylkUR8hTiDlR0wKD3xlHEBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:07:06 2026 by rpki-client