Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/9vTKi8N8PFvBtXfmusfe7IwSMPM.asa
File:                     9vTKi8N8PFvBtXfmusfe7IwSMPM.asa (raw, json)
Hash identifier:          32zZwW7xItkHKC2zUDHScUu4hwqnaYd2a4xI9DI+R1M=
Subject key identifier:   F6:F4:CA:8B:C3:7C:3C:5B:C1:B5:77:E6:BA:C7:DE:EC:8C:12:30:F3
Certificate issuer:       /CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Certificate serial:       01A04937DAB75FD5D44C5EFB051B05166249
Authority key identifier: E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/9vTKi8N8PFvBtXfmusfe7IwSMPM.asa
Signing time:             Fri 28 Aug 2026 16:33:12 +0000
ASPA not before:          Fri 28 Aug 2026 16:33:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197324
Providers:                AS: 11967
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:49:37:da:b7:5f:d5:d4:4c:5e:fb:05:1b:05:16:62:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
        Validity
            Not Before: Aug 28 16:33:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6f4ca8bc37c3c5bc1b577e6bac7deec8c1230f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:13:31:7a:f2:7e:49:7c:42:ed:7d:b0:e8:
                    d7:7b:91:41:b8:e5:6a:25:27:ee:26:c3:76:41:78:
                    7d:cc:2b:9f:b5:c1:22:31:b6:aa:c5:14:c5:99:4e:
                    19:37:43:d3:f8:fb:ae:0b:99:a2:9a:b6:92:98:6a:
                    14:0e:38:1b:a3:b6:88:97:5f:11:71:bb:1b:d8:a8:
                    8c:c6:ac:26:5b:18:ff:bd:5c:62:8d:f0:cc:07:d8:
                    64:a6:41:53:7f:e3:c1:8a:c0:60:80:22:0e:36:03:
                    0c:79:a4:74:06:1a:19:6b:db:9d:ef:d8:cd:c8:20:
                    58:85:66:36:97:26:ae:33:99:f8:82:ed:12:f4:d6:
                    c7:dd:9c:8d:69:50:da:4c:44:9f:73:36:b5:f9:cb:
                    74:45:dd:03:ed:37:ff:86:9d:63:e4:0f:5e:93:39:
                    d1:f8:41:2f:86:52:3f:fc:39:30:39:03:2d:d6:f7:
                    82:1d:4e:e2:ec:56:ad:69:0a:2e:7b:71:c5:8f:9b:
                    39:9e:14:33:00:ca:88:4a:9a:8f:1a:39:03:ac:1e:
                    23:12:44:89:41:2c:86:67:be:96:50:e6:ee:a0:1c:
                    19:8c:d5:f0:4a:54:4d:fe:26:33:05:61:6d:c1:ca:
                    84:a5:0f:7a:72:0d:85:47:8c:4e:5d:a7:e5:ff:40:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:CA:8B:C3:7C:3C:5B:C1:B5:77:E6:BA:C7:DE:EC:8C:12:30:F3
            X509v3 Authority Key Identifier:
                keyid:E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/9vTKi8N8PFvBtXfmusfe7IwSMPM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197324

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:ce:4c:a0:14:1b:22:24:8c:be:1f:33:5c:e4:36:05:50:
         2f:b8:ce:4f:25:bd:28:40:af:fe:c8:8b:8d:ec:19:e2:d4:6e:
         95:c8:0a:3f:c2:24:1a:83:a4:1c:33:60:20:18:a1:3c:96:9f:
         72:49:c7:48:a3:40:69:6b:6a:dd:16:96:d1:17:60:95:ae:0b:
         a7:c2:2d:37:64:e8:d4:c2:02:44:e8:66:5b:fa:e6:44:d0:4c:
         50:02:17:4e:6d:47:e2:95:ac:14:22:43:47:58:04:5c:bf:7e:
         f8:fb:18:bd:d0:fa:8c:20:a9:8c:7e:25:c9:c4:74:7b:f0:cf:
         c9:3f:54:d7:00:93:17:78:74:4a:7c:06:6e:e7:0c:ca:a6:af:
         85:31:2c:47:bf:fe:25:42:b6:a5:ec:b0:66:3a:60:4c:fd:da:
         70:6e:49:23:0e:08:74:d6:8f:36:d9:2e:f7:a3:04:45:4c:27:
         ba:53:99:62:4c:27:b1:f0:bf:14:7c:b8:e1:32:97:07:84:82:
         8f:ae:04:38:27:4b:37:76:78:d2:4a:07:89:a6:6a:e1:5e:38:
         aa:f5:12:74:a9:3a:71:aa:7b:e5:d4:db:68:48:7c:ff:e3:25:
         5c:0e:46:66:7d:db:8e:28:b3:83:8f:cf:7a:26:65:01:2b:13:
         ac:94:9c:51
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBJN9q3X9XUTF77BRsFFmJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjgwYzQ4NzFiMmJmOWFmYzMzNTFmZGY2YTU3ZGRmYTdk
YWY0OGMwHhcNMjYwODI4MTYzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY0Y2E4YmMzN2MzYzViYzFiNTc3ZTZiYWM3ZGVlYzhjMTIzMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNUTMXryfkl8Qu19sOjXe5FBuOVq
JSfuJsN2QXh9zCuftcEiMbaqxRTFmU4ZN0PT+PuuC5mimraSmGoUDjgbo7aIl18R
cbsb2KiMxqwmWxj/vVxijfDMB9hkpkFTf+PBisBggCIONgMMeaR0BhoZa9ud79jN
yCBYhWY2lyauM5n4gu0S9NbH3ZyNaVDaTESfcza1+ct0Rd0D7Tf/hp1j5A9ekznR
+EEvhlI//DkwOQMt1veCHU7i7FataQoue3HFj5s5nhQzAMqISpqPGjkDrB4jEkSJ
QSyGZ76WUObuoBwZjNXwSlRN/iYzBWFtwcqEpQ96cg2FR4xOXafl/0AfAwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPb0yovDfDxbwbV35rrH3uyMEjDzMB8GA1UdIwQY
MBaAFOkoDEhxsr+a/DNR/falfd+n2vSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNnTVNIR3l2NXI4TTFIOTlxVjkzNmZhOUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iOWQxOGItNTUzZC00Njc4LTgzMDct
MzM3NGRhMzQwMWYxLzEvOXZUS2k4TjhQRnZCdFhmbXVzZmU3SXdTTVBNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iOWQxOGItNTUzZC00Njc4LTgzMDctMzM3NGRhMzQwMWYx
LzEvNlNnTVNIR3l2NXI4TTFIOTlxVjkzNmZhOUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCzDANBgkqhkiG
9w0BAQsFAAOCAQEALdHOTKAUGyIkjL4fM1zkNgVQL7jOTyW9KECv/siLjewZ4tRu
lcgKP8IkGoOkHDNgIBihPJafcknHSKNAaWtq3RaW0Rdgla4Lp8ItN2To1MICROhm
W/rmRNBMUAIXTm1H4pWsFCJDR1gEXL9++PsYvdD6jCCpjH4lycR0e/DPyT9U1wCT
F3h0SnwGbucMyqavhTEsR7/+JUK2peywZjpgTP3acG5JIw4IdNaPNtku96MERUwn
ulOZYkwnsfC/FHy44TKXB4SCj64EOCdLN3Z40koHiaZq4V44qvUSdKk6cap75dTb
aEh8/+MlXA5GZn3bjiizg4/PeiZlASsTrJScUQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:25 2026 by rpki-client