Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/RKdFVmXrgBUxVrb-m3ssg9G89V8.asa
File:                     RKdFVmXrgBUxVrb-m3ssg9G89V8.asa (raw, json)
Hash identifier:          moQVYKRLDWz1bETxxHsk0fqtvaRGwzZCLCS/RcVGIHI=
Subject key identifier:   44:A7:45:56:65:EB:80:15:31:56:B6:FE:9B:7B:2C:83:D1:BC:F5:5F
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       01A03DFB8044A9CC4DEA61A227836E883485
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/RKdFVmXrgBUxVrb-m3ssg9G89V8.asa
Signing time:             Wed 26 Aug 2026 12:11:27 +0000
ASPA not before:          Wed 26 Aug 2026 12:11:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213512
Providers:                AS: 174
                          AS: 200462
                          AS: 213527
                          AS: 215120
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:fb:80:44:a9:cc:4d:ea:61:a2:27:83:6e:88:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Aug 26 12:11:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44a7455665eb80153156b6fe9b7b2c83d1bcf55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:70:02:1b:40:c3:60:06:93:7b:98:e6:4b:
                    3d:f5:c2:7b:a6:2a:14:ab:b0:c1:1e:07:87:be:fb:
                    6d:be:e4:91:9d:41:30:60:a7:d3:52:66:91:20:94:
                    cf:0a:a5:7b:fa:c7:0b:0d:c9:1d:df:7a:2d:a3:0b:
                    bf:f2:b6:89:ab:b2:fb:ab:51:ff:b7:98:9b:45:84:
                    f2:a1:3f:d8:79:22:ed:4c:de:0a:9a:63:49:ca:76:
                    d7:7b:61:44:2f:04:4c:41:df:40:36:41:62:73:41:
                    ef:48:79:0e:0d:5d:8d:a4:7d:1c:f8:52:e0:26:f3:
                    51:41:2c:8f:b7:27:2f:90:98:a8:56:a8:bd:6e:92:
                    7b:18:ea:21:41:0a:ff:4a:fd:de:83:83:b0:7c:64:
                    0d:c2:45:6a:af:ba:4a:3d:81:a7:1a:7e:19:4d:a5:
                    e0:2c:7e:57:41:9d:0f:2c:de:07:e7:fc:e3:87:5a:
                    a0:3d:36:18:7e:b6:a7:bf:44:29:e3:b0:66:f3:70:
                    10:28:60:f4:0b:46:35:69:f7:06:15:ee:a4:20:e5:
                    a4:ff:c4:42:6a:fc:70:d8:9c:b9:c5:67:eb:d1:50:
                    a8:8f:17:92:76:52:a4:bb:ec:11:22:8a:69:0a:35:
                    37:1e:7b:65:84:2d:3c:89:72:f3:02:fd:e5:d1:9c:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:45:56:65:EB:80:15:31:56:B6:FE:9B:7B:2C:83:D1:BC:F5:5F
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/RKdFVmXrgBUxVrb-m3ssg9G89V8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213512

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:40:97:dc:89:24:bf:d2:ba:2d:1f:e8:0f:7c:bc:88:65:
         21:60:5d:20:eb:d2:ec:16:04:22:e6:67:1c:43:d9:74:5e:59:
         49:fe:6e:09:e3:77:03:13:54:9d:a6:87:66:fc:17:74:36:83:
         97:db:97:8b:32:ea:02:e9:fa:6e:67:37:4d:79:15:23:71:b9:
         26:f1:de:7f:a7:d8:0b:54:1d:28:6d:0c:3a:5d:b0:e4:92:da:
         86:cc:a8:08:a2:29:f6:4d:67:99:6c:17:ea:b8:7a:5f:5c:d5:
         98:8b:be:2b:58:12:07:2b:0c:6e:ad:9c:03:d4:93:f5:22:2e:
         f8:c0:5d:ac:55:2f:3c:1a:ef:ca:74:36:53:63:3f:82:47:18:
         8e:ad:11:db:e3:a7:32:df:f3:e4:7e:c1:5c:db:83:7c:9e:e4:
         49:d1:9f:34:e2:fa:74:0d:63:50:77:a7:11:7d:06:c9:c1:c8:
         88:a9:b2:73:75:f2:fa:6b:64:2a:62:c9:1b:66:d9:8d:d6:c7:
         9a:86:4f:e5:73:ce:a0:8e:0b:28:20:49:ad:9f:87:0d:c4:fa:
         ea:09:02:ca:75:0f:e3:06:79:b8:4a:a8:55:87:0c:6b:79:d8:
         e3:0c:c7:c1:26:06:d6:62:f0:73:fd:84:fc:fb:4a:5e:4f:7b:
         24:5b:13:8b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaA9+4BEqcxN6mGiJ4NuiDSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw
ZTk5ZjkwHhcNMjYwODI2MTIxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGE3NDU1NjY1ZWI4MDE1MzE1NmI2ZmU5YjdiMmM4M2QxYmNmNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ntwAhtAw2AGk3uY5ks99cJ7pioU
q7DBHgeHvvttvuSRnUEwYKfTUmaRIJTPCqV7+scLDckd33otowu/8raJq7L7q1H/
t5ibRYTyoT/YeSLtTN4KmmNJynbXe2FELwRMQd9ANkFic0HvSHkODV2NpH0c+FLg
JvNRQSyPtycvkJioVqi9bpJ7GOohQQr/Sv3eg4OwfGQNwkVqr7pKPYGnGn4ZTaXg
LH5XQZ0PLN4H5/zjh1qgPTYYfranv0Qp47Bm83AQKGD0C0Y1afcGFe6kIOWk/8RC
avxw2Jy5xWfr0VCojxeSdlKku+wRIoppCjU3HntlhC08iXLzAv3l0ZzFrwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFESnRVZl64AVMVa2/pt7LIPRvPVfMB8GA1UdIwQY
MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt
ODI1MzFlOWM3ODA0LzEvUktkRlZtWHJnQlV4VnJiLW0zc3NnOUc4OVY4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0
LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCCDANBgkqhkiG
9w0BAQsFAAOCAQEACKBAl9yJJL/Sui0f6A98vIhlIWBdIOvS7BYEIuZnHEPZdF5Z
Sf5uCeN3AxNUnaaHZvwXdDaDl9uXizLqAun6bmc3TXkVI3G5JvHef6fYC1QdKG0M
Ol2w5JLahsyoCKIp9k1nmWwX6rh6X1zVmIu+K1gSBysMbq2cA9ST9SIu+MBdrFUv
PBrvynQ2U2M/gkcYjq0R2+OnMt/z5H7BXNuDfJ7kSdGfNOL6dA1jUHenEX0GycHI
iKmyc3Xy+mtkKmLJG2bZjdbHmoZP5XPOoI4LKCBJrZ+HDcT66gkCynUP4wZ5uEqo
VYcMa3nY4wzHwSYG1mLwc/2E/PtKXk97JFsTiw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 08:38:06 2026 by rpki-client