Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/chkkpC1wf4PBAO07r8AaazA2rnI.asa
File:                     chkkpC1wf4PBAO07r8AaazA2rnI.asa (raw, json)
Hash identifier:          VlBFOTypBDda09dJ/OfOd69SgWHtcRGMPQP/H7cWGAw=
Subject key identifier:   72:19:24:A4:2D:70:7F:83:C1:00:ED:3B:AF:C0:1A:6B:30:36:AE:72
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019FBE6851EA230C99AFED864A3846880E4D
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/chkkpC1wf4PBAO07r8AaazA2rnI.asa
Signing time:             Sat 01 Aug 2026 17:38:55 +0000
ASPA not before:          Sat 01 Aug 2026 17:38:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44051
Providers:                AS: 174
                          AS: 6204
                          AS: 6939
                          AS: 44066
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:be:68:51:ea:23:0c:99:af:ed:86:4a:38:46:88:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Aug  1 17:38:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=721924a42d707f83c100ed3bafc01a6b3036ae72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:8e:b4:23:dc:93:21:ba:ef:68:7e:a9:53:
                    ca:62:dd:b5:3d:fe:ea:c8:05:91:2d:a6:73:c8:9b:
                    23:56:57:f2:4a:0c:a1:78:29:26:4f:a3:b9:f5:65:
                    52:61:e3:7a:4a:e9:97:46:8d:6e:d3:92:18:bf:1a:
                    58:ad:00:b4:62:6b:00:61:88:43:64:9a:6e:ba:b2:
                    a0:72:c3:a8:6e:1d:8b:a2:95:9c:60:45:3e:71:bd:
                    b2:42:bd:8c:8b:30:2c:0b:3f:0b:46:1a:0d:03:07:
                    88:b2:5a:3a:f9:8c:f4:7e:cb:53:49:7e:cc:a7:11:
                    57:dd:c6:68:94:77:62:11:f3:9f:6b:68:e3:a3:ec:
                    0e:6e:49:06:bc:4e:82:e3:59:80:dd:a0:2e:fb:6c:
                    4d:ab:2f:1b:e5:b3:24:d4:9a:8e:ad:b6:8a:cd:ec:
                    11:70:e0:13:8f:4b:3b:1e:51:7e:c6:56:c1:c6:23:
                    15:7f:ec:07:c3:13:12:71:63:8b:04:1b:17:7d:fc:
                    9e:51:20:26:6a:76:1a:22:f0:fd:35:28:f2:68:66:
                    50:31:ba:a0:22:44:6f:5d:83:af:86:bc:ed:2a:a2:
                    77:72:7b:b2:f3:a4:fb:14:d2:b1:d4:01:90:87:f3:
                    22:8e:54:c1:91:14:bf:85:fd:11:3b:8b:8b:0c:a3:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:19:24:A4:2D:70:7F:83:C1:00:ED:3B:AF:C0:1A:6B:30:36:AE:72
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/chkkpC1wf4PBAO07r8AaazA2rnI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44051

    Signature Algorithm: sha256WithRSAEncryption
         4d:47:b0:11:4d:e8:57:47:9e:80:ff:86:e9:97:f3:de:37:3c:
         26:5e:d2:a3:51:4b:fe:8e:04:fe:3a:7a:5f:b2:a4:34:ea:43:
         74:76:b9:f9:8d:b1:ff:0c:07:f8:54:f6:10:b3:f0:74:ed:58:
         52:7e:6e:45:82:3f:10:69:62:23:03:e7:bc:b8:ae:31:71:65:
         45:82:ae:a4:df:e7:c8:79:ac:38:04:51:7d:2f:14:2f:ed:b2:
         87:dd:10:49:67:41:a5:ee:5c:6e:fa:61:85:71:3d:cf:9c:10:
         ed:2c:ba:69:ac:17:0c:b8:5d:3f:85:ff:57:75:bf:36:fb:02:
         ab:2b:88:30:e5:47:88:d7:ee:e9:be:79:81:8a:a2:96:c5:cc:
         cc:96:34:b6:f3:a9:8f:10:2e:9e:c8:d1:bd:79:d6:95:a6:92:
         64:fb:ef:f3:3b:8c:c1:bb:0f:55:2e:2a:65:86:99:09:73:6a:
         d7:5f:39:70:89:4f:d7:44:e0:cc:09:d2:82:34:c7:3d:0a:dc:
         95:42:d5:23:67:ad:0e:d6:f8:b2:cc:48:d2:18:cc:26:bd:4a:
         c0:8f:6c:42:c2:04:ad:27:ba:3c:74:94:93:e9:7c:34:37:4e:
         cc:5e:10:93:5b:1a:2e:25:d8:54:f3:64:b3:77:95:5d:42:74:
         1a:8e:b7:0c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ++aFHqIwyZr+2GSjhGiA5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwODAxMTczODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjE5MjRhNDJkNzA3ZjgzYzEwMGVkM2JhZmMwMWE2YjMwMzZhZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mOtCPckyG672h+qVPKYt21Pf7q
yAWRLaZzyJsjVlfySgyheCkmT6O59WVSYeN6SumXRo1u05IYvxpYrQC0YmsAYYhD
ZJpuurKgcsOobh2LopWcYEU+cb2yQr2MizAsCz8LRhoNAweIslo6+Yz0fstTSX7M
pxFX3cZolHdiEfOfa2jjo+wObkkGvE6C41mA3aAu+2xNqy8b5bMk1JqOrbaKzewR
cOATj0s7HlF+xlbBxiMVf+wHwxMScWOLBBsXffyeUSAmanYaIvD9NSjyaGZQMbqg
IkRvXYOvhrztKqJ3cnuy86T7FNKx1AGQh/MijlTBkRS/hf0RO4uLDKOxmQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHIZJKQtcH+DwQDtO6/AGmswNq5yMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvY2hra3BDMXdmNFBCQU8wN3I4QWFhekEycm5JLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCsEzANBgkqhkiG
9w0BAQsFAAOCAQEATUewEU3oV0eegP+G6Zfz3jc8Jl7So1FL/o4E/jp6X7KkNOpD
dHa5+Y2x/wwH+FT2ELPwdO1YUn5uRYI/EGliIwPnvLiuMXFlRYKupN/nyHmsOARR
fS8UL+2yh90QSWdBpe5cbvphhXE9z5wQ7Sy6aawXDLhdP4X/V3W/NvsCqyuIMOVH
iNfu6b55gYqilsXMzJY0tvOpjxAunsjRvXnWlaaSZPvv8zuMwbsPVS4qZYaZCXNq
1185cIlP10TgzAnSgjTHPQrclULVI2etDtb4ssxI0hjMJr1KwI9sQsIErSe6PHSU
k+l8NDdOzF4Qk1saLiXYVPNks3eVXUJ0Go63DA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:07:29 2026 by rpki-client