Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/3z-Y6t-U3ROkg_EG1RWdxfklXIs.asa
File:                     3z-Y6t-U3ROkg_EG1RWdxfklXIs.asa (raw, json)
Hash identifier:          NZQhQHhOGqpSYcXAGADR+b2Wa/0vitRzCxWw3ooj/yQ=
Subject key identifier:   DF:3F:98:EA:DF:94:DD:13:A4:83:F1:06:D5:15:9D:C5:F9:25:5C:8B
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       01A0F7B6AC54BE42694D77E4BF16E8913292
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/3z-Y6t-U3ROkg_EG1RWdxfklXIs.asa
Signing time:             Thu 01 Oct 2026 13:45:39 +0000
ASPA not before:          Thu 01 Oct 2026 13:45:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42018
Providers:                AS: 6848
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:b6:ac:54:be:42:69:4d:77:e4:bf:16:e8:91:32:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: Oct  1 13:45:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df3f98eadf94dd13a483f106d5159dc5f9255c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:49:f6:77:ae:70:31:76:a7:89:98:16:1c:
                    41:7e:c6:31:77:ba:e2:8f:67:3a:67:c9:1a:45:3d:
                    bb:49:83:80:c3:e4:e0:2a:54:fb:03:e3:62:ad:90:
                    97:79:4d:3f:00:b1:6d:8e:2f:84:74:a4:2d:f0:aa:
                    f4:5e:a7:58:23:7d:79:3c:52:69:2e:90:e5:8b:52:
                    f3:6a:7d:0a:03:7f:10:72:ab:8b:38:bb:a5:85:4b:
                    b4:a4:5a:c4:79:a5:eb:18:f0:0a:2a:99:97:56:e5:
                    41:4d:60:91:3c:b3:ae:aa:4e:b6:fa:2a:2c:86:eb:
                    7e:e6:40:ae:6d:4b:47:1a:15:6f:7b:19:9d:e4:b5:
                    a6:52:bb:40:52:62:f6:59:99:1e:9f:5d:8a:6b:84:
                    ad:89:e9:5d:fb:a1:cd:d8:db:2e:dc:0e:7b:ce:82:
                    d1:57:8c:a8:f6:8c:0a:92:5c:df:76:da:b4:89:51:
                    67:cb:ee:57:db:37:de:e9:4d:09:38:4e:b3:15:8d:
                    25:ef:18:ed:b9:d2:20:76:d1:59:97:6b:b5:e6:03:
                    e5:b4:d2:27:7e:3d:0b:cf:c4:63:e6:e2:d8:42:da:
                    8e:3f:2b:5c:fc:89:69:3e:b8:c7:32:ea:c0:91:3a:
                    65:50:55:e6:57:fd:16:6a:27:96:9a:65:10:3b:a1:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:98:EA:DF:94:DD:13:A4:83:F1:06:D5:15:9D:C5:F9:25:5C:8B
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/3z-Y6t-U3ROkg_EG1RWdxfklXIs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42018

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:3c:56:23:c2:61:13:f3:1e:b2:42:ec:4b:5d:14:65:a2:
         4e:f0:be:ee:67:a5:e8:b4:71:83:7e:d7:52:47:12:83:73:80:
         e7:40:c0:72:bd:80:bb:02:e9:2a:30:41:7e:c8:27:cf:ac:a0:
         4c:86:40:d3:b6:22:1a:a7:90:45:c0:c9:2a:25:51:65:ab:d8:
         9f:1b:94:05:ad:02:07:85:65:02:75:12:06:9e:94:9f:40:04:
         16:c6:6a:68:6b:62:dc:97:c5:54:09:ff:da:3f:aa:e2:40:39:
         8d:30:bc:89:0c:5f:06:52:c7:e4:67:1d:c2:d1:11:fc:b3:43:
         39:7c:34:dd:45:07:c6:7c:33:37:ac:62:83:8c:45:59:78:c0:
         39:e2:f7:60:10:36:31:a2:25:74:ea:61:32:34:a9:95:42:e3:
         9a:c8:e4:22:19:af:de:5f:2e:94:5a:df:cb:b9:7c:08:cf:b1:
         ce:4b:e9:e5:94:88:5c:f2:b7:d4:4e:9c:69:06:21:46:1c:ad:
         e9:a5:c2:33:02:93:bb:c3:81:15:5a:de:31:64:c6:23:56:38:
         2b:6e:68:39:76:a1:3e:96:ab:02:b8:6f:be:7a:81:e3:38:60:
         5e:ea:23:83:10:8a:bd:78:7a:aa:33:8a:a7:ce:7d:fe:3b:f0:
         9d:ef:4f:3c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaD3tqxUvkJpTXfkvxbokTKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjYxMDAxMTM0NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjNmOThlYWRmOTRkZDEzYTQ4M2YxMDZkNTE1OWRjNWY5MjU1YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPlJ9neucDF2p4mYFhxBfsYxd7ri
j2c6Z8kaRT27SYOAw+TgKlT7A+NirZCXeU0/ALFtji+EdKQt8Kr0XqdYI315PFJp
LpDli1Lzan0KA38QcquLOLulhUu0pFrEeaXrGPAKKpmXVuVBTWCRPLOuqk62+ios
hut+5kCubUtHGhVvexmd5LWmUrtAUmL2WZken12Ka4Stield+6HN2Nsu3A57zoLR
V4yo9owKklzfdtq0iVFny+5X2zfe6U0JOE6zFY0l7xjtudIgdtFZl2u15gPltNIn
fj0Lz8Rj5uLYQtqOPytc/IlpPrjHMurAkTplUFXmV/0WaieWmmUQO6EZOwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFN8/mOrflN0TpIPxBtUVncX5JVyLMB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvM3otWTZ0LVUzUk9rZ19FRzFSV2R4ZmtsWElzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCkIjANBgkqhkiG
9w0BAQsFAAOCAQEAmF08ViPCYRPzHrJC7EtdFGWiTvC+7mel6LRxg37XUkcSg3OA
50DAcr2AuwLpKjBBfsgnz6ygTIZA07YiGqeQRcDJKiVRZavYnxuUBa0CB4VlAnUS
Bp6Un0AEFsZqaGti3JfFVAn/2j+q4kA5jTC8iQxfBlLH5GcdwtER/LNDOXw03UUH
xnwzN6xig4xFWXjAOeL3YBA2MaIldOphMjSplULjmsjkIhmv3l8ulFrfy7l8CM+x
zkvp5ZSIXPK31E6caQYhRhyt6aXCMwKTu8OBFVreMWTGI1Y4K25oOXahPparArhv
vnqB4zhgXuojgxCKvXh6qjOKp859/jvwne9PPA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 05:46:14 2026 by rpki-client