Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/bEKO1xFyFydQ-qhcqaJLpw9igyY.asa
File:                     bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (raw, json)
Hash identifier:          jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=
Subject key identifier:   6C:42:8E:D7:11:72:17:27:50:FA:A8:5C:A9:A2:4B:A7:0F:62:83:26
Certificate issuer:       /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial:       019F23690CFA714BF5AF10EDF85AE366F6C2
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/bEKO1xFyFydQ-qhcqaJLpw9igyY.asa
Signing time:             Thu 02 Jul 2026 15:18:34 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212701
Providers:                AS: 49418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:0c:fa:71:4b:f5:af:10:ed:f8:5a:e3:66:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
        Validity
            Not Before: Jul  2 15:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c428ed71172172750faa85ca9a24ba70f628326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:f4:0b:7b:1d:1b:0e:0f:89:48:99:24:ec:
                    6b:c0:27:83:aa:21:a8:25:4e:c2:1a:71:e6:46:4b:
                    c3:3f:ae:70:97:17:ec:f4:4a:c0:bd:1f:da:32:ef:
                    85:84:fe:5f:46:36:85:82:e6:59:4b:21:df:12:73:
                    96:03:b0:06:59:3f:2c:40:88:94:52:19:6a:fb:b4:
                    c1:d6:f0:01:6b:9c:9a:91:63:97:12:c9:16:13:bc:
                    6c:f3:01:4d:d0:8b:70:43:a0:14:49:57:a1:44:8c:
                    a7:78:e0:63:a9:d4:68:2d:a3:01:4d:54:dc:61:1c:
                    b2:d7:9f:20:e6:ea:ad:91:44:84:49:c8:5a:69:88:
                    53:8e:8f:5a:37:7f:d5:a8:6e:50:a7:4b:e1:35:b3:
                    28:09:ce:03:0a:35:39:01:e8:d9:fc:a0:8f:6d:68:
                    ab:f5:84:ed:32:2c:b0:4c:83:bb:85:86:4a:3a:6a:
                    e2:e9:07:f3:cc:87:d7:db:c8:b2:e1:66:27:b9:d2:
                    31:5e:04:0c:36:c9:43:fd:5e:e1:01:e7:31:7e:ec:
                    e1:31:83:23:b0:6b:90:bb:7b:03:05:a2:f5:bf:6f:
                    3b:7c:44:18:6c:c9:79:4c:47:77:6f:41:26:59:f6:
                    f7:8c:5a:b1:b5:ab:7d:e0:37:70:d8:d4:79:7e:f3:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:8E:D7:11:72:17:27:50:FA:A8:5C:A9:A2:4B:A7:0F:62:83:26
            X509v3 Authority Key Identifier:
                keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/bEKO1xFyFydQ-qhcqaJLpw9igyY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212701

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:bf:9a:ed:28:e3:c0:1e:af:be:33:87:b1:ff:0e:a3:2d:
         27:75:32:8f:af:70:c0:37:ce:f9:3c:25:a6:a4:68:5d:f5:b4:
         ae:7a:53:01:a2:3a:f2:55:21:73:71:bd:28:3b:91:a3:4d:96:
         bf:82:f8:a3:89:21:9b:f3:04:12:f1:29:80:23:b7:14:c4:fe:
         a1:97:ba:25:8c:a2:d7:45:5b:81:c6:a5:9a:7d:70:4e:bd:c3:
         71:59:b4:66:a6:72:0c:d3:3e:3c:92:77:8d:c0:34:9f:09:99:
         98:88:9a:7c:ce:c9:01:1b:25:60:4d:4b:3c:d1:55:ee:b7:87:
         cc:eb:a6:8d:1d:33:55:25:06:89:1a:35:8e:28:de:d7:ed:39:
         81:00:8b:f3:49:90:f3:c7:28:8a:24:e3:0d:35:2b:90:9a:21:
         8e:34:c3:35:99:8d:1b:b3:f9:0d:6c:0b:2f:c8:d8:2c:ed:5a:
         7e:88:77:64:1c:30:c4:66:68:b8:0c:0f:89:65:24:d4:3b:f0:
         cb:f5:a6:5b:20:71:90:e2:26:51:61:fc:fb:c4:c9:56:dc:44:
         0b:0b:64:77:dd:f1:ca:08:f1:ae:46:3e:1d:53:d1:fd:40:61:
         4b:00:67:65:d4:19:2f:36:9a:af:35:5d:6a:ba:f2:e5:d6:95:
         bc:f1:b8:8a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8jaQz6cUv1rxDt+FrjZvbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzYwMTFlMzQ4MDllNDc3NGQ0YzljOWYxNmZjYTY4YmRi
ODdmYWEwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQyOGVkNzExNzIxNzI3NTBmYWE4NWNhOWEyNGJhNzBmNjI4MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvn0C3sdGw4PiUiZJOxrwCeDqiGo
JU7CGnHmRkvDP65wlxfs9ErAvR/aMu+FhP5fRjaFguZZSyHfEnOWA7AGWT8sQIiU
Uhlq+7TB1vABa5yakWOXEskWE7xs8wFN0ItwQ6AUSVehRIyneOBjqdRoLaMBTVTc
YRyy158g5uqtkUSESchaaYhTjo9aN3/VqG5Qp0vhNbMoCc4DCjU5AejZ/KCPbWir
9YTtMiywTIO7hYZKOmri6QfzzIfX28iy4WYnudIxXgQMNslD/V7hAecxfuzhMYMj
sGuQu3sDBaL1v287fEQYbMl5TEd3b0EmWfb3jFqxtat94Ddw2NR5fvNeSwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGxCjtcRchcnUPqoXKmiS6cPYoMmMB8GA1UdIwQY
MBaAFFA2AR40gJ5HdNTJyfFvymi9uH+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURZQkhqU0Fua2QwMU1uSjhXX0thTDI0ZjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2It
YmU2NjQyN2VhYmZlLzEvYkVLTzF4RnlGeWRRLXFoY3FhSkxwdzlpZ3lZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2ItYmU2NjQyN2VhYmZl
LzEvVURZQkhqU0Fua2QwMU1uSjhXX0thTDI0ZjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+3TANBgkqhkiG
9w0BAQsFAAOCAQEAOfq/mu0o48Aer74zh7H/DqMtJ3Uyj69wwDfO+TwlpqRoXfW0
rnpTAaI68lUhc3G9KDuRo02Wv4L4o4khm/MEEvEpgCO3FMT+oZe6JYyi10Vbgcal
mn1wTr3DcVm0ZqZyDNM+PJJ3jcA0nwmZmIiafM7JARslYE1LPNFV7reHzOumjR0z
VSUGiRo1jije1+05gQCL80mQ88coiiTjDTUrkJohjjTDNZmNG7P5DWwLL8jYLO1a
foh3ZBwwxGZouAwPiWUk1Dvwy/WmWyBxkOImUWH8+8TJVtxECwtkd93xygjxrkY+
HVPR/UBhSwBnZdQZLzaarzVdarry5daVvPG4ig==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:10 2026 by rpki-client