Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/l2fzBtP72pfYzFsSa2KgK_QMTGw.asa
File:                     l2fzBtP72pfYzFsSa2KgK_QMTGw.asa (raw, json)
Hash identifier:          LgU75FULeZxwY3KKb4OjWA22/9/RJakUfYHdIGrNq7E=
Subject key identifier:   97:67:F3:06:D3:FB:DA:97:D8:CC:5B:12:6B:62:A0:2B:F4:0C:4C:6C
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01A0196ED170559EBC86E5E9A8A8F831F6FE
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/l2fzBtP72pfYzFsSa2KgK_QMTGw.asa
Signing time:             Wed 19 Aug 2026 09:51:27 +0000
ASPA not before:          Wed 19 Aug 2026 09:51:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58073
Providers:                AS: 24875
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:6e:d1:70:55:9e:bc:86:e5:e9:a8:a8:f8:31:f6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug 19 09:51:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9767f306d3fbda97d8cc5b126b62a02bf40c4c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:ec:d6:3f:d6:97:61:6f:11:e3:34:38:60:
                    14:69:be:97:27:b9:80:96:e0:07:44:16:0a:da:c3:
                    78:77:52:c8:fc:ec:15:83:ff:12:c0:31:73:1c:02:
                    47:c2:d6:8d:58:6e:ef:1b:98:89:8a:00:a5:d6:09:
                    d9:64:61:6e:09:e4:53:4a:f5:12:da:09:86:63:99:
                    92:df:14:7c:95:31:08:fa:d8:44:47:29:c7:65:61:
                    2a:c6:0e:07:8d:36:eb:17:c2:eb:05:4d:3e:3e:7a:
                    e8:30:cf:b7:60:ce:43:8a:98:d4:05:42:85:6c:81:
                    57:5c:88:3c:30:9a:f3:8a:da:3f:6e:a2:ca:97:73:
                    74:d4:e5:80:45:77:2e:c0:c7:50:4f:b8:27:bc:42:
                    b8:6c:dc:ef:00:9f:31:6c:50:11:9d:74:66:31:58:
                    9e:d4:25:72:e8:0f:dd:71:ae:09:2b:3e:26:19:ed:
                    fa:ff:af:4c:08:12:ff:a6:2e:fb:7e:68:b1:35:df:
                    06:45:54:c0:73:f8:27:9c:ad:de:99:fd:c4:0c:b2:
                    d5:df:35:35:b3:3c:e1:45:b0:48:54:84:32:87:4a:
                    69:9d:da:fe:5a:09:cd:29:94:74:8f:7f:2e:6b:bb:
                    c2:af:c4:53:0b:6b:e8:0e:2d:52:8e:04:8e:1c:7a:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:67:F3:06:D3:FB:DA:97:D8:CC:5B:12:6B:62:A0:2B:F4:0C:4C:6C
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/l2fzBtP72pfYzFsSa2KgK_QMTGw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58073

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:1f:02:9a:75:a2:3f:ba:b9:c1:f1:05:c7:9c:71:5c:29:
         4f:48:50:7d:e9:0f:f5:89:d5:8b:8a:3c:6b:a2:d8:85:73:00:
         a2:dd:0c:2b:b7:9c:1a:5b:6c:67:c2:eb:d0:e5:05:55:90:c9:
         29:57:d8:82:53:9d:7e:38:7f:67:ad:60:8c:75:65:bb:d9:81:
         94:6c:01:38:3a:cb:df:68:26:0f:18:8f:0b:88:8a:85:76:19:
         4e:36:eb:03:db:95:a3:89:ea:5a:1c:6b:d7:40:9d:4b:a9:8d:
         d3:7e:c2:9d:2c:2b:c4:53:35:22:f2:27:a4:ed:cc:8c:4e:be:
         69:83:41:20:bb:de:3f:d8:d0:42:25:8d:27:f0:a3:e4:6c:05:
         a8:e2:4c:f3:ba:00:d5:cf:24:4b:5f:3f:9d:ab:d6:11:a0:44:
         b0:cf:0b:d4:6a:1c:dd:1a:c5:46:25:6c:f3:3f:c6:50:d4:af:
         35:4f:27:b5:7e:30:8a:05:09:55:7d:04:ee:dc:5a:09:19:b0:
         e0:46:8c:aa:82:40:5a:39:52:7b:4f:a1:58:57:9b:2e:80:3c:
         4d:bf:f8:79:ea:8a:15:b5:8b:c3:48:ae:de:eb:5f:1c:15:6d:
         30:53:e1:89:24:ca:44:2d:ec:4a:ca:a1:a2:9f:78:0e:43:63:
         5c:82:d3:68
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaAZbtFwVZ68huXpqKj4Mfb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwODE5MDk1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzY3ZjMwNmQzZmJkYTk3ZDhjYzViMTI2YjYyYTAyYmY0MGM0YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eDs1j/Wl2FvEeM0OGAUab6XJ7mA
luAHRBYK2sN4d1LI/OwVg/8SwDFzHAJHwtaNWG7vG5iJigCl1gnZZGFuCeRTSvUS
2gmGY5mS3xR8lTEI+thERynHZWEqxg4HjTbrF8LrBU0+PnroMM+3YM5DipjUBUKF
bIFXXIg8MJrzito/bqLKl3N01OWARXcuwMdQT7gnvEK4bNzvAJ8xbFARnXRmMVie
1CVy6A/dca4JKz4mGe36/69MCBL/pi77fmixNd8GRVTAc/gnnK3emf3EDLLV3zU1
szzhRbBIVIQyh0ppndr+WgnNKZR0j38ua7vCr8RTC2voDi1SjgSOHHp0aQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJdn8wbT+9qX2MxbEmtioCv0DExsMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvbDJmekJ0UDcycGZZekZzU2EyS2dLX1FNVEd3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDi2TANBgkqhkiG
9w0BAQsFAAOCAQEAo/QfApp1oj+6ucHxBceccVwpT0hQfekP9YnVi4o8a6LYhXMA
ot0MK7ecGltsZ8Lr0OUFVZDJKVfYglOdfjh/Z61gjHVlu9mBlGwBODrL32gmDxiP
C4iKhXYZTjbrA9uVo4nqWhxr10CdS6mN037CnSwrxFM1IvInpO3MjE6+aYNBILve
P9jQQiWNJ/Cj5GwFqOJM87oA1c8kS18/navWEaBEsM8L1Goc3RrFRiVs8z/GUNSv
NU8ntX4wigUJVX0E7txaCRmw4EaMqoJAWjlSe0+hWFebLoA8Tb/4eeqKFbWLw0iu
3utfHBVtMFPhiSTKRC3sSsqhop94DkNjXILTaA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:23 2026 by rpki-client