Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/i22LYTAh0PcLuwu7sEyCzT-6xXM.asa
File:                     i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (raw, json)
Hash identifier:          DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=
Subject key identifier:   8B:6D:8B:61:30:21:D0:F7:0B:BB:0B:BB:B0:4C:82:CD:3F:BA:C5:73
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019EF51F6350ABC622CE70D6690317C19873
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/i22LYTAh0PcLuwu7sEyCzT-6xXM.asa
Signing time:             Tue 23 Jun 2026 15:35:35 +0000
ASPA not before:          Tue 23 Jun 2026 15:35:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13186
Providers:                AS: 8903
                          AS: 12541
                          AS: 202766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f5:1f:63:50:ab:c6:22:ce:70:d6:69:03:17:c1:98:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Jun 23 15:35:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b6d8b613021d0f70bbb0bbbb04c82cd3fbac573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:2e:86:6d:61:99:48:7c:df:52:0b:6b:ab:
                    65:3a:43:91:0a:6d:f1:03:59:18:f9:b0:f8:74:fc:
                    d3:86:04:53:0d:dc:f0:a8:00:e3:18:2a:74:92:3f:
                    c2:6a:05:65:22:2e:73:fe:fc:bd:dd:89:df:fb:27:
                    f1:6b:25:a8:9d:1f:fc:aa:33:d1:f1:4f:29:e2:39:
                    ae:37:e4:b2:80:44:07:86:b1:43:71:62:87:20:9a:
                    3b:5a:02:07:ec:c7:fb:46:d8:8d:51:e7:20:6f:e6:
                    74:33:7f:77:7e:b9:2e:cd:a7:7d:fd:96:ae:b0:7f:
                    38:e0:94:84:36:9b:2e:66:f0:e7:56:a1:02:d6:45:
                    cc:24:31:a6:43:47:39:93:3b:fc:68:b8:8d:32:61:
                    57:d9:b4:53:fd:ce:50:8a:95:48:bd:40:0e:d4:19:
                    0c:e3:e4:8e:c8:68:94:88:8a:bc:d9:18:02:0c:87:
                    88:87:1f:83:1e:ea:82:56:ea:5d:31:d2:fc:93:71:
                    20:90:9f:bf:4e:0d:3f:5b:d4:57:6f:3b:0c:7d:02:
                    f7:e7:28:cf:9d:58:d6:8e:97:d0:94:e2:21:72:7a:
                    71:87:53:45:96:62:cd:c0:0f:fc:66:f9:89:7b:92:
                    95:08:c0:19:9b:90:b0:50:d5:de:42:81:19:6f:69:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:8B:61:30:21:D0:F7:0B:BB:0B:BB:B0:4C:82:CD:3F:BA:C5:73
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/i22LYTAh0PcLuwu7sEyCzT-6xXM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13186

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:5e:db:08:58:d3:9d:28:fc:64:4c:1f:1d:f8:44:96:5e:
         a0:1a:10:8c:25:80:bd:2d:60:e5:2d:2a:ce:50:ad:d0:ef:8c:
         57:f3:3c:c2:8d:fd:ac:d3:47:b9:b2:60:74:a1:40:0b:be:ad:
         2f:a9:a0:77:82:42:ad:83:1f:d2:cf:0b:d7:ef:97:9a:9d:61:
         69:da:f2:e7:9d:95:ba:fc:3c:1f:4b:e8:41:bf:96:99:3a:61:
         8e:cb:32:7a:b9:7b:0e:98:79:48:f2:4a:d4:cd:28:d6:c5:86:
         28:3f:b7:2e:e7:d4:4a:b0:0f:24:b9:99:12:a9:8c:e2:99:83:
         85:6a:4b:76:96:89:bf:0f:14:14:5c:2c:22:aa:02:96:d1:93:
         48:d7:7c:52:c9:9f:87:95:13:42:23:b5:99:8f:d1:f8:43:22:
         07:bc:2b:e2:3e:fc:68:00:7a:32:6c:f2:e2:fb:d6:81:00:4a:
         6c:8e:e9:5e:66:00:a0:db:68:91:03:ac:b3:2d:85:fb:ee:a3:
         35:1c:07:57:fa:ae:8f:79:b9:d7:b3:ba:5b:1b:57:fe:02:2e:
         9f:81:a5:27:87:cc:cf:53:7f:ac:e9:5f:a4:d0:d6:36:a1:73:
         ba:52:2a:cf:f3:ca:8a:82:61:c3:6d:3c:3e:f7:37:e7:09:5f:
         47:be:20:9f
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ71H2NQq8YiznDWaQMXwZhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjYwNjIzMTUzNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjZkOGI2MTMwMjFkMGY3MGJiYjBiYmJiMDRjODJjZDNmYmFjNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvouhm1hmUh831ILa6tlOkORCm3x
A1kY+bD4dPzThgRTDdzwqADjGCp0kj/CagVlIi5z/vy93Ynf+yfxayWonR/8qjPR
8U8p4jmuN+SygEQHhrFDcWKHIJo7WgIH7Mf7RtiNUecgb+Z0M393frkuzad9/Zau
sH844JSENpsuZvDnVqEC1kXMJDGmQ0c5kzv8aLiNMmFX2bRT/c5QipVIvUAO1BkM
4+SOyGiUiIq82RgCDIeIhx+DHuqCVupdMdL8k3EgkJ+/Tg0/W9RXbzsMfQL35yjP
nVjWjpfQlOIhcnpxh1NFlmLNwA/8ZvmJe5KVCMAZm5CwUNXeQoEZb2moiQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFItti2EwIdD3C7sLu7BMgs0/usVzMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvaTIyTFlUQWgwUGNMdXd1N3NFeUN6VC02eFhNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjOCMA0GCSqGSIb3
DQEBCwUAA4IBAQBT8l7bCFjTnSj8ZEwfHfhEll6gGhCMJYC9LWDlLSrOUK3Q74xX
8zzCjf2s00e5smB0oUALvq0vqaB3gkKtgx/SzwvX75eanWFp2vLnnZW6/DwfS+hB
v5aZOmGOyzJ6uXsOmHlI8krUzSjWxYYoP7cu59RKsA8kuZkSqYzimYOFakt2lom/
DxQUXCwiqgKW0ZNI13xSyZ+HlRNCI7WZj9H4QyIHvCviPvxoAHoybPLi+9aBAEps
juleZgCg22iRA6yzLYX77qM1HAdX+q6PebnXs7pbG1f+Ai6fgaUnh8zPU3+s6V+k
0NY2oXO6UirP88qKgmHDbTw+9zfnCV9HviCf
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:34 2026 by rpki-client