Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa
File:                     J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (raw, json)
Hash identifier:          Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=
Subject key identifier:   27:7A:4E:C3:31:83:1B:FE:C3:60:4B:AF:28:2C:C3:D6:36:60:F3:01
Certificate issuer:       /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial:       019D402593623B4E5E501D8FD5954101554A
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa
Signing time:             Mon 30 Mar 2026 19:08:17 +0000
ASPA not before:          Mon 30 Mar 2026 19:08:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203988
Providers:                AS: 207160
                          AS: 207510
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:40:25:93:62:3b:4e:5e:50:1d:8f:d5:95:41:01:55:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
        Validity
            Not Before: Mar 30 19:08:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=277a4ec331831bfec3604baf282cc3d63660f301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:b6:c7:a0:ab:dc:c9:0f:79:d3:a2:d9:04:
                    ce:12:ff:1d:cf:b0:ef:c8:3f:df:4c:52:94:71:0b:
                    e3:84:a5:06:49:50:dc:66:a0:01:4a:92:58:7d:a3:
                    54:7a:14:d9:cc:7c:40:73:0c:33:39:c3:50:a9:3f:
                    27:7c:e5:ab:8e:41:0b:8a:23:bd:b4:fe:1a:cd:85:
                    03:2d:af:2d:99:74:8c:a8:12:ca:8e:f6:46:ce:25:
                    2a:f8:99:7b:36:bb:5f:bc:f8:f0:fd:68:2d:c0:70:
                    11:ae:16:2d:b2:94:4a:39:9d:25:c4:cb:89:39:38:
                    c0:f8:7b:04:fb:e3:69:d8:18:db:f2:d4:6f:5a:f5:
                    b3:d3:89:fe:2d:8a:e4:47:84:e4:f6:7c:a7:97:d9:
                    fd:98:b7:1d:16:8c:ee:1d:1e:6d:26:fe:ed:a7:b5:
                    93:7b:35:88:e1:4f:af:9e:a2:7f:1e:85:96:32:0d:
                    95:cf:a8:55:7a:2a:75:1a:01:c7:f1:5a:6a:98:0f:
                    c2:60:88:8a:3a:1e:66:29:f4:3a:ce:67:b5:8b:a5:
                    3e:7b:61:50:e0:67:02:47:fe:d1:48:fb:aa:c5:e1:
                    42:ba:ee:8d:0e:ad:97:c4:f0:95:f8:76:72:c5:e4:
                    45:30:4b:b5:f9:b1:77:b1:2b:50:2c:cb:7c:4c:37:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:4E:C3:31:83:1B:FE:C3:60:4B:AF:28:2C:C3:D6:36:60:F3:01
            X509v3 Authority Key Identifier:
                keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203988

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:0c:0a:35:71:88:f1:a7:c3:12:42:ac:cd:c2:c0:9d:0d:
         3f:f9:09:7e:c7:12:27:e9:53:aa:b7:3f:2d:f4:09:b6:30:0d:
         24:1c:82:d4:03:2c:7a:fd:62:18:87:65:3c:c3:f1:fe:33:7c:
         fd:fe:20:23:04:24:9f:5b:6c:9d:4c:03:5f:47:69:a2:5d:62:
         87:a5:f1:10:9a:8b:8a:10:bc:b3:8a:2e:e2:93:ec:bb:a8:59:
         05:e5:67:77:67:1f:e5:52:02:36:5e:5e:dc:61:b8:08:a6:33:
         bb:7a:ac:ff:0a:1c:9d:68:0f:d7:d0:2f:61:33:41:e0:52:1e:
         89:47:7f:37:40:1b:9d:4f:1a:e4:8d:2c:2e:49:7b:4c:4a:a2:
         e6:60:6b:21:8d:e7:1e:3a:fc:a3:56:cf:fb:e8:4e:ae:37:1a:
         48:fc:b3:8b:44:e4:43:ff:06:55:bc:cf:4a:3c:f3:cd:28:eb:
         40:48:5a:10:50:9a:21:ae:ce:45:a8:bb:af:8a:57:ff:93:13:
         73:4d:ba:5c:13:cc:25:63:6b:63:c2:d1:ab:55:23:55:d7:d8:
         99:39:7b:31:63:fd:e4:cb:8f:97:61:c4:d6:d7:33:02:15:28:
         1a:6b:9e:59:dc:94:93:e6:9b:36:79:fb:db:c8:32:fc:86:bc:
         c0:25:84:ce
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1AJZNiO05eUB2P1ZVBAVVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzUzMGE2Zjc0ZmE4MWVkM2Q2Y2M2YzM0ZTI5NWI0Mjgw
OWU0ZmYwHhcNMjYwMzMwMTkwODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzdhNGVjMzMxODMxYmZlYzM2MDRiYWYyODJjYzNkNjM2NjBmMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxty2x6Cr3MkPedOi2QTOEv8dz7Dv
yD/fTFKUcQvjhKUGSVDcZqABSpJYfaNUehTZzHxAcwwzOcNQqT8nfOWrjkELiiO9
tP4azYUDLa8tmXSMqBLKjvZGziUq+Jl7NrtfvPjw/WgtwHARrhYtspRKOZ0lxMuJ
OTjA+HsE++Np2Bjb8tRvWvWz04n+LYrkR4Tk9nynl9n9mLcdFozuHR5tJv7tp7WT
ezWI4U+vnqJ/HoWWMg2Vz6hVeip1GgHH8VpqmA/CYIiKOh5mKfQ6zme1i6U+e2FQ
4GcCR/7RSPuqxeFCuu6NDq2XxPCV+HZyxeRFMEu1+bF3sStQLMt8TDeCPQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCd6TsMxgxv+w2BLrygsw9Y2YPMBMB8GA1UdIwQY
MBaAFGl1MKb3T6ge09bMbDTilbQoCeT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhVd3B2ZFBxQjdUMXN4c05PS1Z0Q2dKNVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xM2RlNzAtNDM0ZC00NTliLTk1OWUt
NDUwMzE4ZDM3NWZmLzEvSjNwT3d6R0RHXzdEWUV1dktDekQxalpnOHdFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xM2RlNzAtNDM0ZC00NTliLTk1OWUtNDUwMzE4ZDM3NWZm
LzEvYVhVd3B2ZFBxQjdUMXN4c05PS1Z0Q2dKNVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMc1DANBgkqhkiG
9w0BAQsFAAOCAQEATLUMCjVxiPGnwxJCrM3CwJ0NP/kJfscSJ+lTqrc/LfQJtjAN
JByC1AMsev1iGIdlPMPx/jN8/f4gIwQkn1tsnUwDX0dpol1ih6XxEJqLihC8s4ou
4pPsu6hZBeVnd2cf5VICNl5e3GG4CKYzu3qs/wocnWgP19AvYTNB4FIeiUd/N0Ab
nU8a5I0sLkl7TEqi5mBrIY3nHjr8o1bP++hOrjcaSPyzi0TkQ/8GVbzPSjzzzSjr
QEhaEFCaIa7ORai7r4pX/5MTc026XBPMJWNrY8LRq1UjVdfYmTl7MWP95MuPl2HE
1tczAhUoGmueWdyUk+abNnn728gy/Ia8wCWEzg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:06 2026 by rpki-client