Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/oSelOf5aA6ezO3E8iAmBsJzt2zk.asa
File:                     oSelOf5aA6ezO3E8iAmBsJzt2zk.asa (raw, json)
Hash identifier:          e0luP9mt5FcyvtUWlHY00y5DxcfieoKokUjjKqntgJg=
Subject key identifier:   A1:27:A5:39:FE:5A:03:A7:B3:3B:71:3C:88:09:81:B0:9C:ED:DB:39
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       01A0F79CC91845E0AB1611BA94DB46193FE3
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/oSelOf5aA6ezO3E8iAmBsJzt2zk.asa
Signing time:             Thu 01 Oct 2026 13:17:22 +0000
ASPA not before:          Thu 01 Oct 2026 13:17:22 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44216
Providers:                AS: 6848
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:9c:c9:18:45:e0:ab:16:11:ba:94:db:46:19:3f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: Oct  1 13:17:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a127a539fe5a03a7b33b713c880981b09ceddb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:f7:b6:82:03:c6:f5:0f:c2:aa:eb:2e:54:
                    28:fe:9d:ba:85:d8:59:67:a4:38:38:95:7d:06:22:
                    85:b1:ec:1c:d1:00:8e:14:c9:8a:28:63:21:45:a8:
                    4c:43:b1:80:04:94:4c:9b:b0:3a:83:3c:8f:2a:24:
                    15:ce:42:bf:e1:ca:e3:3b:eb:2e:89:7b:63:be:3a:
                    7a:c4:5b:a8:c9:29:1b:c5:95:dc:bb:9c:5b:db:6d:
                    e9:92:f3:a6:2f:18:de:e6:4f:b7:cc:5a:a6:aa:c5:
                    cb:58:6f:90:b7:ad:bf:a5:bf:22:05:5a:6f:27:40:
                    34:31:56:63:03:0b:6a:c3:25:25:91:c0:37:e1:55:
                    68:98:ea:0e:55:d9:44:5d:d9:90:90:6d:e7:0e:5f:
                    0d:35:5b:34:c2:a9:8e:31:5c:f7:05:b0:ed:1b:11:
                    e1:12:58:ae:ba:58:9e:bc:f7:c0:32:79:e7:b0:8d:
                    26:bc:68:11:a1:6c:d7:f3:da:49:36:b9:d6:17:e0:
                    8c:32:6c:7e:96:88:80:47:19:4a:c2:86:6d:3b:e9:
                    9f:15:38:2a:98:04:19:4d:3d:8d:1b:be:b6:01:0c:
                    87:0d:6e:25:a4:73:c0:58:b4:75:68:14:37:c3:8d:
                    e1:02:21:a2:09:93:c5:9d:9d:63:d1:a0:0b:02:71:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:A5:39:FE:5A:03:A7:B3:3B:71:3C:88:09:81:B0:9C:ED:DB:39
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/oSelOf5aA6ezO3E8iAmBsJzt2zk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44216

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:16:e6:36:cf:ff:a7:d8:42:88:8e:ca:6f:fa:c3:7f:2b:
         28:d4:f6:24:9d:ec:45:94:66:7d:33:f5:39:13:f5:f3:b3:d5:
         f6:4d:0d:7e:b2:27:2a:b2:67:df:0b:ca:99:b2:2d:f9:74:90:
         4b:9a:57:cd:ee:b7:ba:f1:6b:8c:4f:e0:e2:8e:6c:99:fa:af:
         d4:29:4b:af:27:1d:a8:e6:53:13:5f:eb:ae:59:66:6a:b5:b8:
         6d:46:4d:1f:a0:6d:0d:ea:f5:54:9d:97:49:4c:fd:37:31:ea:
         41:08:7b:14:d3:5e:05:38:e6:8c:e4:a1:8e:2d:a3:e9:5b:08:
         07:fe:13:1f:ad:0c:74:4f:35:02:e0:c4:df:4b:e0:62:2c:53:
         75:75:fe:08:ef:69:f8:96:a1:97:18:37:3f:2f:81:b2:65:e0:
         18:b3:1e:8c:b8:a0:a6:2d:d2:d4:28:e4:1d:ee:23:da:e5:7f:
         ec:ed:2e:3f:0d:15:ea:f7:83:0a:b5:e4:9f:a8:d2:b0:ae:49:
         ea:ea:45:25:b2:ae:d9:89:be:5f:3b:b3:92:7e:b7:b6:77:03:
         40:25:70:9e:0b:30:fa:93:10:41:b1:23:1a:a2:e8:59:a2:92:
         0f:e7:d7:bb:d7:97:94:65:89:d2:b3:fd:81:f2:eb:2e:d1:d0:
         2c:8c:c9:ad
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaD3nMkYReCrFhG6lNtGGT/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjYxMDAxMTMxNzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTI3YTUzOWZlNWEwM2E3YjMzYjcxM2M4ODA5ODFiMDljZWRkYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6P3toIDxvUPwqrrLlQo/p26hdhZ
Z6Q4OJV9BiKFsewc0QCOFMmKKGMhRahMQ7GABJRMm7A6gzyPKiQVzkK/4crjO+su
iXtjvjp6xFuoySkbxZXcu5xb223pkvOmLxje5k+3zFqmqsXLWG+Qt62/pb8iBVpv
J0A0MVZjAwtqwyUlkcA34VVomOoOVdlEXdmQkG3nDl8NNVs0wqmOMVz3BbDtGxHh
EliuulievPfAMnnnsI0mvGgRoWzX89pJNrnWF+CMMmx+loiARxlKwoZtO+mfFTgq
mAQZTT2NG762AQyHDW4lpHPAWLR1aBQ3w43hAiGiCZPFnZ1j0aALAnFn5QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKEnpTn+WgOnsztxPIgJgbCc7ds5MB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvb1NlbE9mNWFBNmV6TzNFOGlBbUJzSnp0MnprLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCsuDANBgkqhkiG
9w0BAQsFAAOCAQEAQGsW5jbP/6fYQoiOym/6w38rKNT2JJ3sRZRmfTP1ORP187PV
9k0NfrInKrJn3wvKmbIt+XSQS5pXze63uvFrjE/g4o5smfqv1ClLrycdqOZTE1/r
rllmarW4bUZNH6BtDer1VJ2XSUz9NzHqQQh7FNNeBTjmjOShji2j6VsIB/4TH60M
dE81AuDE30vgYixTdXX+CO9p+Jahlxg3Py+BsmXgGLMejLigpi3S1CjkHe4j2uV/
7O0uPw0V6veDCrXkn6jSsK5J6upFJbKu2Ym+Xzuzkn63tncDQCVwngsw+pMQQbEj
GqLoWaKSD+fXu9eXlGWJ0rP9gfLrLtHQLIzJrQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:49 2026 by rpki-client