Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/KDOdwgBqi-iHp_hkC0hknI6LVs8.asa
File:                     KDOdwgBqi-iHp_hkC0hknI6LVs8.asa (raw, json)
Hash identifier:          ilwYTc5BPsKaRnhBm7QEeGk9PPVst3mIY43gbDs4iVg=
Subject key identifier:   28:33:9D:C2:00:6A:8B:E8:87:A7:F8:64:0B:48:64:9C:8E:8B:56:CF
Certificate issuer:       /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial:       019FC696211FC985B058BEA6918930AFC608
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/KDOdwgBqi-iHp_hkC0hknI6LVs8.asa
Signing time:             Mon 03 Aug 2026 07:45:55 +0000
ASPA not before:          Mon 03 Aug 2026 07:45:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215872
Providers:                AS: 34872
                          AS: 41051
                          AS: 58057
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:96:21:1f:c9:85:b0:58:be:a6:91:89:30:af:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
        Validity
            Not Before: Aug  3 07:45:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28339dc2006a8be887a7f8640b48649c8e8b56cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:fd:21:94:be:63:0a:db:b7:7f:78:55:85:
                    90:56:11:c0:3b:10:52:6e:12:7e:c7:9a:0a:f2:2a:
                    0d:de:bf:35:2c:96:a2:8c:b3:d0:d7:f9:25:b6:56:
                    0d:49:16:80:51:f1:da:4c:a4:4c:cf:6c:d2:b7:ea:
                    c0:ba:03:dd:41:33:94:73:12:f0:56:99:d5:0e:e4:
                    1f:46:bd:ce:c4:e7:a3:9d:68:de:fd:19:97:48:5c:
                    45:df:43:0b:ac:58:f6:71:1d:fd:f8:6e:7b:ce:d5:
                    b0:36:87:85:6d:bb:c0:ee:c4:64:9b:5f:c7:fb:b0:
                    58:eb:ba:d6:15:01:25:20:a5:8c:10:71:de:5d:b4:
                    b6:15:37:b3:b7:01:1c:05:b3:76:13:0d:9d:1e:a0:
                    fa:4d:12:c8:98:35:3a:48:74:c8:65:2b:51:07:8f:
                    47:b6:da:25:87:69:41:2b:7f:41:da:3d:4c:dd:53:
                    5a:8e:9a:6f:de:bd:56:fc:04:b6:80:d0:4a:fb:62:
                    14:03:ab:fa:bf:2e:1e:5c:cc:f2:00:51:8d:1d:f8:
                    36:22:cb:2f:eb:ae:cd:85:02:93:74:ce:f1:20:82:
                    d8:a1:ae:36:19:4b:66:e5:89:a8:98:a2:15:b6:51:
                    7d:eb:53:f6:06:f2:38:07:98:02:6b:fd:57:00:62:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:9D:C2:00:6A:8B:E8:87:A7:F8:64:0B:48:64:9C:8E:8B:56:CF
            X509v3 Authority Key Identifier:
                keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/KDOdwgBqi-iHp_hkC0hknI6LVs8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215872

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:55:cd:90:78:bc:ce:53:f3:5c:25:37:62:fe:6b:38:35:
         b6:26:39:4e:21:15:a9:57:96:dc:0a:a6:c2:d7:b1:e9:72:79:
         90:f3:19:0e:4b:69:1d:e7:26:00:77:3f:93:a1:70:f8:e2:20:
         53:9c:c8:3f:a6:44:22:da:d1:96:97:02:0d:13:fe:ce:46:7b:
         ad:47:f3:b4:36:8d:63:94:f8:f0:b1:0b:8d:4f:b1:d4:72:41:
         bb:33:e7:f2:73:7d:6b:fa:3e:16:7d:fa:3b:10:db:6b:45:a4:
         a3:6e:88:93:1b:d8:29:58:33:78:0e:90:e9:d2:13:04:17:f7:
         92:0f:2c:0e:11:ab:40:06:84:62:3d:e2:84:5c:f6:b8:67:03:
         25:ba:01:46:a4:58:67:2e:53:03:37:8f:d7:67:aa:09:64:89:
         e0:80:3f:dc:b1:02:63:41:4b:ee:3a:2b:4b:e2:1b:cb:9d:74:
         53:c4:1f:7c:8e:08:e8:ca:6e:73:08:7a:79:5d:74:4d:9e:13:
         77:28:49:36:41:53:6a:e1:62:63:82:db:c1:a3:b7:bf:54:89:
         4e:c6:0f:55:53:31:c7:de:37:fe:fb:50:89:79:4b:ca:88:b1:
         b2:15:d9:67:74:ae:29:2d:e5:f1:b4:71:9d:3d:8c:05:3f:18:
         7c:f7:d2:8e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/GliEfyYWwWL6mkYkwr8YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi
M2FlNDIwHhcNMjYwODAzMDc0NTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODMzOWRjMjAwNmE4YmU4ODdhN2Y4NjQwYjQ4NjQ5YzhlOGI1NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/T9IZS+Ywrbt394VYWQVhHAOxBS
bhJ+x5oK8ioN3r81LJaijLPQ1/kltlYNSRaAUfHaTKRMz2zSt+rAugPdQTOUcxLw
VpnVDuQfRr3OxOejnWje/RmXSFxF30MLrFj2cR39+G57ztWwNoeFbbvA7sRkm1/H
+7BY67rWFQElIKWMEHHeXbS2FTeztwEcBbN2Ew2dHqD6TRLImDU6SHTIZStRB49H
ttolh2lBK39B2j1M3VNajppv3r1W/AS2gNBK+2IUA6v6vy4eXMzyAFGNHfg2Issv
667NhQKTdM7xIILYoa42GUtm5YmomKIVtlF961P2BvI4B5gCa/1XAGI6zwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCgzncIAaovoh6f4ZAtIZJyOi1bPMB8GA1UdIwQY
MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt
ZTdiODYwMzMyY2I3LzEvS0RPZHdnQnFpLWlIcF9oa0MwaGtuSTZMVnM4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3
LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLQDANBgkqhkiG
9w0BAQsFAAOCAQEAM11VzZB4vM5T81wlN2L+azg1tiY5TiEVqVeW3Aqmwtex6XJ5
kPMZDktpHecmAHc/k6Fw+OIgU5zIP6ZEItrRlpcCDRP+zkZ7rUfztDaNY5T48LEL
jU+x1HJBuzPn8nN9a/o+Fn36OxDba0Wko26IkxvYKVgzeA6Q6dITBBf3kg8sDhGr
QAaEYj3ihFz2uGcDJboBRqRYZy5TAzeP12eqCWSJ4IA/3LECY0FL7jorS+Iby510
U8QffI4I6Mpucwh6eV10TZ4TdyhJNkFTauFiY4LbwaO3v1SJTsYPVVMxx943/vtQ
iXlLyoixshXZZ3SuKS3l8bRxnT2MBT8YfPfSjg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:49 2026 by rpki-client