Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/dfesipwxH539hUdXKKyu2kqJ8wg.asa
File:                     dfesipwxH539hUdXKKyu2kqJ8wg.asa (raw, json)
Hash identifier:          7Uj9gk3YaMecDLkJ2OHkoQ1Jy1gH9VcQpYCUftt6ZVg=
Subject key identifier:   75:F7:AC:8A:9C:31:1F:9D:FD:85:47:57:28:AC:AE:DA:4A:89:F3:08
Certificate issuer:       /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial:       019CC4754A7B65D2CD68C993301A866285A8
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/dfesipwxH539hUdXKKyu2kqJ8wg.asa
Signing time:             Fri 06 Mar 2026 18:42:26 +0000
ASPA not before:          Fri 06 Mar 2026 18:42:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206429
Providers:                AS: 207198
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:75:4a:7b:65:d2:cd:68:c9:93:30:1a:86:62:85:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
        Validity
            Not Before: Mar  6 18:42:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75f7ac8a9c311f9dfd85475728acaeda4a89f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:eb:c9:05:72:14:82:54:51:6f:b7:b2:71:
                    ef:ce:e3:fd:a8:c5:bb:4a:f6:b7:15:04:eb:ba:28:
                    1d:00:93:3f:87:06:61:d8:b5:f3:27:56:a6:6f:42:
                    c0:fe:2a:08:9b:05:fd:24:83:59:e0:4f:4e:e6:34:
                    69:e4:b4:51:34:5f:7c:a1:21:a2:17:1e:91:7e:f2:
                    42:e5:f3:6c:b2:b7:5d:21:5b:43:c3:d9:7a:16:5c:
                    1a:e8:6a:93:80:80:39:43:74:67:80:6e:2a:9c:07:
                    51:61:d2:f5:ea:b0:2b:55:53:b1:d6:fc:5b:06:8a:
                    2d:73:0e:f8:b2:e5:89:73:7c:96:15:3a:51:c1:0e:
                    94:6d:9f:b9:7d:65:24:75:c8:95:4f:80:2a:fa:f0:
                    7f:be:8c:b1:67:ed:06:b0:39:20:03:21:1b:fa:6f:
                    e1:29:d4:f1:d5:68:c5:14:4f:32:18:7a:5f:11:30:
                    05:15:d2:c2:15:96:ea:0e:48:88:62:8f:7a:7b:08:
                    56:f9:aa:e3:1f:9c:7e:34:dc:ae:2c:e0:04:e4:ea:
                    cb:b8:28:d6:76:8f:74:b8:b4:4e:b8:35:c0:05:ae:
                    ea:a4:4a:4f:7a:b7:54:fe:78:ab:45:69:3e:c1:8b:
                    78:8d:06:e5:2d:b8:15:e3:67:f2:52:9d:d2:cf:e0:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:AC:8A:9C:31:1F:9D:FD:85:47:57:28:AC:AE:DA:4A:89:F3:08
            X509v3 Authority Key Identifier:
                keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/dfesipwxH539hUdXKKyu2kqJ8wg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206429

    Signature Algorithm: sha256WithRSAEncryption
         52:86:0a:4e:6c:f7:90:63:28:cb:c4:9b:99:ae:81:81:3e:b6:
         42:72:de:67:b0:1c:f7:2b:4e:e4:76:63:54:c0:2e:a2:69:fa:
         2d:a0:f3:e9:3b:00:f8:e6:dd:36:1b:09:6c:1f:76:4b:a2:35:
         bc:11:07:33:df:21:d5:20:33:5f:74:7c:6f:c7:63:85:ef:29:
         9e:9e:36:20:55:08:36:6e:44:43:fa:65:c8:b6:ab:2d:a5:81:
         7c:e3:68:11:c7:0f:ab:c4:12:66:26:4e:54:96:e0:74:1d:81:
         b0:25:d5:e7:d2:00:e1:be:09:9a:e5:36:d0:3d:0b:10:d4:e7:
         3c:3e:30:8a:4e:ea:c0:5d:4a:a1:15:83:7f:b9:00:91:5d:31:
         71:8c:be:5d:60:c6:79:08:4c:f3:55:80:66:6a:da:44:0a:b9:
         35:12:35:c6:d0:37:d9:76:bd:5b:bb:37:f9:8d:fc:a2:0f:e0:
         ab:3e:ea:a0:e4:44:66:83:79:c5:96:08:2f:74:1a:f4:2b:43:
         78:77:f3:1c:34:32:b1:90:e8:1a:28:63:87:40:1a:ce:24:9d:
         73:39:c9:73:68:84:77:19:16:df:45:77:6b:9c:1d:e5:0f:8d:
         37:cb:e6:48:5a:9f:23:6b:5e:62:66:40:18:6f:a0:c8:34:cb:
         ec:81:7c:05
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzEdUp7ZdLNaMmTMBqGYoWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz
ZjM3ZDQwHhcNMjYwMzA2MTg0MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWY3YWM4YTljMzExZjlkZmQ4NTQ3NTcyOGFjYWVkYTRhODlmMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL/ryQVyFIJUUW+3snHvzuP9qMW7
Sva3FQTruigdAJM/hwZh2LXzJ1amb0LA/ioImwX9JINZ4E9O5jRp5LRRNF98oSGi
Fx6RfvJC5fNssrddIVtDw9l6Flwa6GqTgIA5Q3RngG4qnAdRYdL16rArVVOx1vxb
Bootcw74suWJc3yWFTpRwQ6UbZ+5fWUkdciVT4Aq+vB/voyxZ+0GsDkgAyEb+m/h
KdTx1WjFFE8yGHpfETAFFdLCFZbqDkiIYo96ewhW+arjH5x+NNyuLOAE5OrLuCjW
do90uLROuDXABa7qpEpPerdU/nirRWk+wYt4jQblLbgV42fyUp3Sz+BBkwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHX3rIqcMR+d/YVHVyisrtpKifMIMB8GA1UdIwQY
MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt
ZWVjZWU4OTNjNTI3LzEvZGZlc2lwd3hINTM5aFVkWEtLeXUya3FKOHdnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3
LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmXTANBgkqhkiG
9w0BAQsFAAOCAQEAUoYKTmz3kGMoy8Sbma6BgT62QnLeZ7Ac9ytO5HZjVMAuomn6
LaDz6TsA+ObdNhsJbB92S6I1vBEHM98h1SAzX3R8b8djhe8pnp42IFUINm5EQ/pl
yLarLaWBfONoEccPq8QSZiZOVJbgdB2BsCXV59IA4b4JmuU20D0LENTnPD4wik7q
wF1KoRWDf7kAkV0xcYy+XWDGeQhM81WAZmraRAq5NRI1xtA32Xa9W7s3+Y38og/g
qz7qoOREZoN5xZYIL3Qa9CtDeHfzHDQysZDoGihjh0AaziSdcznJc2iEdxkW30V3
a5wd5Q+NN8vmSFqfI2teYmZAGG+gyDTL7IF8BQ==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:43 2026 by rpki-client