Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/k0VP0wrI-vEgsvMGhU-MqB05lcQ.asa
File:                     k0VP0wrI-vEgsvMGhU-MqB05lcQ.asa (raw, json)
Hash identifier:          RuHdLHXwTHCJxQRpIjn3gySKEBLBAlg9zv5H/A/dgI8=
Subject key identifier:   93:45:4F:D3:0A:C8:FA:F1:20:B2:F3:06:85:4F:8C:A8:1D:39:95:C4
Certificate issuer:       /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial:       019FC2ED8D3C3A9C2819E2D930DF39165A5D
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/k0VP0wrI-vEgsvMGhU-MqB05lcQ.asa
Signing time:             Sun 02 Aug 2026 14:42:55 +0000
ASPA not before:          Sun 02 Aug 2026 14:42:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212834
Providers:                AS: 34872
                          AS: 34927
                          AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:ed:8d:3c:3a:9c:28:19:e2:d9:30:df:39:16:5a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
        Validity
            Not Before: Aug  2 14:42:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93454fd30ac8faf120b2f306854f8ca81d3995c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:0a:58:ae:77:a9:66:63:08:f0:3f:5e:4e:
                    ff:1f:53:dc:5b:d1:44:e9:a1:60:42:af:5b:28:82:
                    99:ae:0e:95:45:0f:a9:7b:59:6d:8b:ee:5c:f0:95:
                    77:10:e8:36:21:f1:2f:59:c8:c3:eb:7a:5a:05:cb:
                    20:b7:36:a6:b9:5c:97:c9:cb:a8:e2:f6:0b:d4:4e:
                    30:ec:91:45:34:1d:84:af:d1:e5:fe:62:a6:93:e2:
                    15:25:dc:6c:48:35:c0:9d:99:ea:c1:bd:ae:94:18:
                    0f:ce:65:6d:04:20:55:90:23:20:e6:77:28:7c:c1:
                    2e:b1:3a:50:52:c4:13:93:5e:e2:fd:a7:2d:bd:28:
                    78:cf:1f:3c:e6:d0:f9:d1:92:ac:9a:63:ae:d7:27:
                    26:71:46:ed:32:81:9e:f3:ef:27:0e:e2:1c:f5:48:
                    3b:60:7a:08:30:38:5d:b7:9b:9a:a9:0f:2e:8d:fa:
                    bb:1d:07:f3:f8:01:03:98:bf:c5:d6:8d:2f:9c:66:
                    33:d5:f7:b1:fa:23:90:a9:46:d5:3d:b1:3b:c8:55:
                    75:50:0b:fa:ce:71:09:59:df:8b:5a:94:08:cc:bd:
                    f9:19:ef:a5:f9:02:ca:c3:ba:a6:da:b0:8d:ed:2b:
                    a6:4a:10:7b:79:3c:bd:16:db:e8:17:e4:c7:35:15:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:45:4F:D3:0A:C8:FA:F1:20:B2:F3:06:85:4F:8C:A8:1D:39:95:C4
            X509v3 Authority Key Identifier:
                keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/k0VP0wrI-vEgsvMGhU-MqB05lcQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212834

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:f2:dc:13:02:40:6c:25:d9:e0:c6:ec:48:71:3e:ec:a8:
         aa:6b:00:58:84:27:cc:f9:cc:0f:3a:f9:77:9b:12:30:a5:7a:
         4b:f5:76:44:c6:e3:c0:2d:db:62:6b:08:40:bc:4e:3b:fa:9b:
         42:24:07:d2:6a:90:b5:0a:e6:05:e3:a8:1c:11:f6:62:ec:d3:
         dc:47:11:7b:7d:d0:24:6f:d9:91:c9:59:61:8d:c3:c2:a3:43:
         7f:3b:41:29:3b:ca:d0:b5:c8:69:dd:43:10:1b:0c:44:a3:ff:
         d3:95:5f:1b:76:7a:2b:84:cc:93:36:6a:f9:f2:5f:e6:47:28:
         70:dc:ab:18:b8:20:cb:96:a2:69:c9:56:9f:f8:37:94:4f:99:
         4a:16:0a:7e:8b:a2:71:a7:c0:a4:99:fd:2b:f5:5c:25:ee:f4:
         d3:68:b6:ef:21:58:b3:b3:ab:65:4b:5b:57:0d:90:7f:95:cb:
         a3:e1:ed:87:60:73:99:b4:be:8a:15:50:06:53:13:0c:16:c4:
         24:5e:53:49:0e:18:d6:34:5b:0a:10:60:5c:1c:0b:8c:91:fa:
         c7:ce:53:05:a7:ce:71:e7:3d:56:d0:e2:55:5c:8d:a8:0c:bd:
         88:ed:c8:d5:bd:a5:d4:ea:05:1b:04:55:5f:f7:6b:60:b2:74:
         f1:3e:f7:0d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/C7Y08OpwoGeLZMN85FlpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWJhZjU1NGM5MTQ2OGMxMDUyNGJhZjc0MmVhNGIxYTVk
MGI0OWMwHhcNMjYwODAyMTQ0MjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQ1NGZkMzBhYzhmYWYxMjBiMmYzMDY4NTRmOGNhODFkMzk5NWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqooKWK53qWZjCPA/Xk7/H1PcW9FE
6aFgQq9bKIKZrg6VRQ+pe1lti+5c8JV3EOg2IfEvWcjD63paBcsgtzamuVyXycuo
4vYL1E4w7JFFNB2Er9Hl/mKmk+IVJdxsSDXAnZnqwb2ulBgPzmVtBCBVkCMg5nco
fMEusTpQUsQTk17i/actvSh4zx885tD50ZKsmmOu1ycmcUbtMoGe8+8nDuIc9Ug7
YHoIMDhdt5uaqQ8ujfq7HQfz+AEDmL/F1o0vnGYz1fex+iOQqUbVPbE7yFV1UAv6
znEJWd+LWpQIzL35Ge+l+QLKw7qm2rCN7SumShB7eTy9FtvoF+THNRVF4QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJNFT9MKyPrxILLzBoVPjKgdOZXEMB8GA1UdIwQY
MBaAFCDrr1VMkUaMEFJLr3QupLGl0LScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEt
NTlmMTlmYTEwYTFjLzEvazBWUDB3ckktdkVnc3ZNR2hVLU1xQjA1bGNRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEtNTlmMTlmYTEwYTFj
LzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/YjANBgkqhkiG
9w0BAQsFAAOCAQEAepXy3BMCQGwl2eDG7EhxPuyoqmsAWIQnzPnMDzr5d5sSMKV6
S/V2RMbjwC3bYmsIQLxOO/qbQiQH0mqQtQrmBeOoHBH2YuzT3EcRe33QJG/ZkclZ
YY3DwqNDfztBKTvK0LXIad1DEBsMRKP/05VfG3Z6K4TMkzZq+fJf5kcocNyrGLgg
y5aiaclWn/g3lE+ZShYKfouicafApJn9K/VcJe7002i27yFYs7OrZUtbVw2Qf5XL
o+Hth2BzmbS+ihVQBlMTDBbEJF5TSQ4Y1jRbChBgXBwLjJH6x85TBafOcec9VtDi
VVyNqAy9iO3I1b2l1OoFGwRVX/drYLJ08T73DQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:24 2026 by rpki-client