Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/qoI8F0lbOVIzl_Chk1fw1atLi5k.asa
File:                     qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (raw, json)
Hash identifier:          N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=
Subject key identifier:   AA:82:3C:17:49:5B:39:52:33:97:F0:A1:93:57:F0:D5:AB:4B:8B:99
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       019D4AA7850AB9BDBA3B590593C5691A0514
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/qoI8F0lbOVIzl_Chk1fw1atLi5k.asa
Signing time:             Wed 01 Apr 2026 20:06:25 +0000
ASPA not before:          Wed 01 Apr 2026 20:06:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210732
Providers:                AS: 6939
                          AS: 209768
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4a:a7:85:0a:b9:bd:ba:3b:59:05:93:c5:69:1a:05:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Apr  1 20:06:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa823c17495b39523397f0a19357f0d5ab4b8b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:00:19:75:4e:2c:b5:6e:0f:77:3b:83:58:
                    49:96:9d:91:cd:c4:71:cb:b3:12:21:a9:55:74:85:
                    00:6c:eb:65:9d:48:ff:d6:90:40:c3:b2:97:2e:ad:
                    d1:dc:82:77:53:9b:7e:a2:10:81:66:b6:60:cc:74:
                    59:45:eb:5d:5f:ce:49:b5:ba:15:33:06:85:64:0c:
                    89:9d:ae:12:5e:0e:67:e5:8b:f3:80:97:3d:14:8e:
                    f4:ad:dd:3f:27:23:be:3b:1a:b4:2a:d6:33:ef:09:
                    d1:1b:96:a7:bf:f0:c1:65:28:0d:a2:1f:30:48:e6:
                    2b:73:d1:d0:09:e5:50:e3:82:be:02:8d:73:77:40:
                    47:70:32:9c:31:4e:26:67:13:f7:ba:84:9b:d4:f1:
                    32:6b:01:44:a6:2e:2e:c9:20:0d:7c:62:22:db:c2:
                    ae:fb:fb:e1:8f:c0:6a:34:11:21:fa:7e:ba:6b:d8:
                    ea:eb:68:4a:96:ff:f7:71:94:e8:83:cc:04:0f:3f:
                    d1:38:53:5c:25:d3:43:0c:89:97:26:ca:56:b4:cd:
                    de:7d:00:2b:02:48:a4:72:a9:14:18:ee:51:5e:0d:
                    21:45:6a:b2:95:43:fe:7b:a1:d5:05:e3:93:83:83:
                    ed:82:97:6b:6d:90:c9:02:77:f4:ea:54:02:4e:d2:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:3C:17:49:5B:39:52:33:97:F0:A1:93:57:F0:D5:AB:4B:8B:99
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/qoI8F0lbOVIzl_Chk1fw1atLi5k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210732

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:8f:51:6c:6b:fb:2a:bf:f7:20:fc:44:a2:3b:dc:d9:4e:
         04:2a:1e:c5:b6:c1:e4:3b:68:4e:f0:9c:24:39:a4:f5:3b:eb:
         93:ba:36:59:1c:84:e6:04:5a:b2:ca:26:53:fe:0f:d9:59:02:
         f1:6f:f8:9c:2a:8e:f6:ac:52:c0:54:90:20:98:db:87:03:ad:
         3d:43:76:a9:f0:68:48:d5:c4:20:ba:2e:50:da:1b:59:55:ba:
         65:6a:51:2e:c6:d3:08:fb:01:c3:64:d4:f6:23:cc:49:84:06:
         be:54:2f:7a:5f:ff:a5:f8:58:42:c4:79:08:b0:39:4e:b2:4e:
         17:66:f8:13:c1:ae:1a:04:0d:a1:89:44:12:50:48:0c:72:e2:
         80:9d:bc:56:c4:9c:83:5e:aa:de:ea:66:3e:89:7e:c8:49:81:
         18:25:6c:fb:b9:a0:bf:2c:dd:55:d0:a7:6d:fa:e3:73:dc:07:
         9f:b3:ce:a2:4b:dc:5f:e9:f1:de:15:65:19:8f:5d:98:27:08:
         3c:39:94:ae:eb:65:44:35:32:bd:54:94:77:2e:ba:cf:ce:af:
         9d:94:f4:dc:bc:21:1b:12:02:ce:c4:36:db:00:9d:7b:17:84:
         58:b9:22:ed:72:ac:e1:bd:91:f0:cd:1a:ca:22:e1:50:54:33:
         e5:07:34:7b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1Kp4UKub26O1kFk8VpGgUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1
ZGJiMjQwHhcNMjYwNDAxMjAwNjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTgyM2MxNzQ5NWIzOTUyMzM5N2YwYTE5MzU3ZjBkNWFiNGI4Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVMAGXVOLLVuD3c7g1hJlp2RzcRx
y7MSIalVdIUAbOtlnUj/1pBAw7KXLq3R3IJ3U5t+ohCBZrZgzHRZRetdX85JtboV
MwaFZAyJna4SXg5n5YvzgJc9FI70rd0/JyO+Oxq0KtYz7wnRG5anv/DBZSgNoh8w
SOYrc9HQCeVQ44K+Ao1zd0BHcDKcMU4mZxP3uoSb1PEyawFEpi4uySANfGIi28Ku
+/vhj8BqNBEh+n66a9jq62hKlv/3cZTog8wEDz/ROFNcJdNDDImXJspWtM3efQAr
AkikcqkUGO5RXg0hRWqylUP+e6HVBeOTg4PtgpdrbZDJAnf06lQCTtJ5OQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKqCPBdJWzlSM5fwoZNX8NWrS4uZMB8GA1UdIwQY
MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt
ODdhNjJlMGZjNDhjLzEvcW9JOEYwbGJPVkl6bF9DaGsxZncxYXRMaTVrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj
LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3LDANBgkqhkiG
9w0BAQsFAAOCAQEAi1qPUWxr+yq/9yD8RKI73NlOBCoexbbB5DtoTvCcJDmk9Tvr
k7o2WRyE5gRassomU/4P2VkC8W/4nCqO9qxSwFSQIJjbhwOtPUN2qfBoSNXEILou
UNobWVW6ZWpRLsbTCPsBw2TU9iPMSYQGvlQvel//pfhYQsR5CLA5TrJOF2b4E8Gu
GgQNoYlEElBIDHLigJ28VsScg16q3upmPol+yEmBGCVs+7mgvyzdVdCnbfrjc9wH
n7POokvcX+nx3hVlGY9dmCcIPDmUrutlRDUyvVSUdy66z86vnZT03LwhGxICzsQ2
2wCdexeEWLki7XKs4b2R8M0ayiLhUFQz5Qc0ew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:49 2026 by rpki-client