Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UR40d6Nv7wtY6847-nmAoOG-Ggc.asa
File:                     UR40d6Nv7wtY6847-nmAoOG-Ggc.asa (raw, json)
Hash identifier:          15joOaBQ5tuqyW+sD1j3/l5gQvX/528w2uliH7SqR1M=
Subject key identifier:   51:1E:34:77:A3:6F:EF:0B:58:EB:CE:3B:FA:79:80:A0:E1:BE:1A:07
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019FBE685264E3B81FA443D091D1AB09768D
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UR40d6Nv7wtY6847-nmAoOG-Ggc.asa
Signing time:             Sat 01 Aug 2026 17:38:55 +0000
ASPA not before:          Sat 01 Aug 2026 17:38:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48040
Providers:                AS: 6204
                          AS: 42708
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:be:68:52:64:e3:b8:1f:a4:43:d0:91:d1:ab:09:76:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Aug  1 17:38:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=511e3477a36fef0b58ebce3bfa7980a0e1be1a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:42:7f:6d:6f:c5:55:5c:e9:4f:f8:63:0b:
                    c5:6a:7b:8b:e4:df:57:d5:21:a4:9d:03:b9:70:66:
                    44:a1:85:a4:4e:92:d5:d4:08:2b:0b:c1:a8:d6:2a:
                    f7:fb:f7:a8:4b:f8:88:57:9d:e8:e5:3e:f1:c5:f1:
                    29:75:37:1b:7a:ad:ea:4c:f8:d3:eb:cc:86:6f:84:
                    91:e4:25:8a:2b:36:5d:ea:17:57:64:52:a1:8c:a5:
                    ee:f1:bf:e1:66:35:27:23:0f:80:16:b9:7b:54:5a:
                    85:60:e4:c0:9f:c1:00:04:51:f6:bb:97:f1:db:ff:
                    55:3f:5e:b0:44:1b:37:e9:06:21:36:c2:50:0d:a1:
                    6e:fd:a9:32:63:5b:fc:c3:c7:62:8c:a3:a0:6f:ce:
                    03:70:7d:e3:3a:eb:c6:ef:15:c7:86:9b:b1:f3:3c:
                    96:36:17:c6:f4:b3:80:dc:ac:03:19:2d:d4:ae:ae:
                    f7:8b:7a:64:16:af:30:11:51:d7:d4:39:ca:2a:64:
                    28:7d:c9:d4:a3:f9:d7:14:46:15:c6:28:16:c4:43:
                    f4:56:d3:63:1d:d2:08:1d:8a:a3:01:db:9a:b1:d6:
                    6f:38:cd:c1:a5:e8:2b:8a:d7:c4:b9:0d:b9:1f:7f:
                    60:bd:da:f8:9b:59:74:b8:9b:ba:c7:eb:3d:c8:a4:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:34:77:A3:6F:EF:0B:58:EB:CE:3B:FA:79:80:A0:E1:BE:1A:07
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UR40d6Nv7wtY6847-nmAoOG-Ggc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48040

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:7c:28:c0:db:4d:40:f9:cd:de:5b:12:4a:6f:17:d3:57:
         4a:4e:3d:2c:98:17:8b:6a:28:2b:a0:6a:96:d6:3c:67:34:47:
         66:9b:ed:69:9e:49:4a:ac:58:9d:c2:2f:bf:37:7b:8a:2d:70:
         2b:23:d9:23:d4:c3:dc:35:53:f6:62:1f:d5:a3:67:b4:d1:4a:
         43:4b:4e:ef:07:64:83:98:40:46:9e:06:72:df:24:fa:22:13:
         95:4f:94:d1:e8:c9:53:f2:ab:13:84:3c:ee:82:0e:99:7e:fe:
         7f:bb:ce:54:09:7a:55:2b:e1:ce:29:9c:d2:0c:3b:62:40:17:
         3b:71:75:ad:5f:ea:d9:42:3c:61:0f:b1:59:3c:a8:41:ec:de:
         a2:89:ac:a6:f6:5f:fa:fe:a1:25:42:8d:c1:f7:ff:3f:08:d6:
         c6:6f:e8:c7:70:1c:e2:73:71:7d:a4:b3:dd:fc:a3:86:88:f3:
         98:bb:69:1c:d2:94:7f:d9:5f:30:c5:3e:f0:7c:fd:e6:79:dd:
         73:c6:75:33:c4:35:01:3c:18:1e:98:dd:a5:4c:31:61:1f:c4:
         21:bc:41:8c:d0:ca:0b:88:d6:d6:0f:cc:66:6a:11:d2:3a:8f:
         f2:aa:60:b4:5f:99:6b:87:27:67:be:cd:e9:bf:bf:70:2e:b3:
         40:76:c0:ed
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ++aFJk47gfpEPQkdGrCXaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwODAxMTczODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTFlMzQ3N2EzNmZlZjBiNThlYmNlM2JmYTc5ODBhMGUxYmUxYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1dCf21vxVVc6U/4YwvFanuL5N9X
1SGknQO5cGZEoYWkTpLV1AgrC8Go1ir3+/eoS/iIV53o5T7xxfEpdTcbeq3qTPjT
68yGb4SR5CWKKzZd6hdXZFKhjKXu8b/hZjUnIw+AFrl7VFqFYOTAn8EABFH2u5fx
2/9VP16wRBs36QYhNsJQDaFu/akyY1v8w8dijKOgb84DcH3jOuvG7xXHhpux8zyW
NhfG9LOA3KwDGS3Urq73i3pkFq8wEVHX1DnKKmQofcnUo/nXFEYVxigWxEP0VtNj
HdIIHYqjAduasdZvOM3BpegritfEuQ25H39gvdr4m1l0uJu6x+s9yKSdcwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFEeNHejb+8LWOvOO/p5gKDhvhoHMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvVVI0MGQ2TnY3d3RZNjg0Ny1ubUFvT0ctR2djLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7qDANBgkqhkiG
9w0BAQsFAAOCAQEAKut8KMDbTUD5zd5bEkpvF9NXSk49LJgXi2ooK6BqltY8ZzRH
ZpvtaZ5JSqxYncIvvzd7ii1wKyPZI9TD3DVT9mIf1aNntNFKQ0tO7wdkg5hARp4G
ct8k+iITlU+U0ejJU/KrE4Q87oIOmX7+f7vOVAl6VSvhzimc0gw7YkAXO3F1rV/q
2UI8YQ+xWTyoQezeoomspvZf+v6hJUKNwff/PwjWxm/ox3Ac4nNxfaSz3fyjhojz
mLtpHNKUf9lfMMU+8Hz95nndc8Z1M8Q1ATwYHpjdpUwxYR/EIbxBjNDKC4jW1g/M
ZmoR0jqP8qpgtF+Za4cnZ77N6b+/cC6zQHbA7Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:57 2026 by rpki-client