Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/xh82RKrJE90vliurJaEcvJUJUgA.asa
File:                     xh82RKrJE90vliurJaEcvJUJUgA.asa (raw, json)
Hash identifier:          +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=
Subject key identifier:   C6:1F:36:44:AA:C9:13:DD:2F:96:2B:AB:25:A1:1C:BC:95:09:52:00
Certificate issuer:       /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial:       019C75ED038463CF1C761DDDE03D41BF1E71
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/xh82RKrJE90vliurJaEcvJUJUgA.asa
Signing time:             Thu 19 Feb 2026 12:43:13 +0000
ASPA not before:          Thu 19 Feb 2026 12:43:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206082
Providers:                AS: 3257
                          AS: 31027
                          AS: 200910
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:75:ed:03:84:63:cf:1c:76:1d:dd:e0:3d:41:bf:1e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
        Validity
            Not Before: Feb 19 12:43:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c61f3644aac913dd2f962bab25a11cbc95095200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:ce:ba:93:26:2b:bb:00:ae:d1:40:04:7f:
                    10:4e:0d:87:f3:47:f5:67:3f:78:ea:5e:cf:68:1c:
                    12:89:83:31:11:db:81:4d:f7:51:fe:11:07:95:8f:
                    30:72:16:fe:3b:29:52:66:26:36:e2:c8:89:89:a5:
                    a9:18:b3:92:e1:b0:17:51:f7:af:77:3f:4c:44:41:
                    37:d3:ee:6a:a2:ad:9f:d5:62:b1:11:41:13:6d:88:
                    37:8d:78:c0:45:a9:6c:fc:fe:3f:19:10:52:f4:b6:
                    19:1d:45:68:67:57:be:94:c9:9c:e2:23:dd:57:de:
                    8c:e2:d7:97:94:c2:1d:e8:aa:05:e5:9b:1a:a6:fa:
                    96:8a:a7:7c:d0:84:74:1c:38:e3:0e:89:93:1c:66:
                    0f:10:7b:9a:a9:e8:8d:81:73:03:c8:0a:26:03:f4:
                    57:19:72:67:24:cc:97:9a:5e:96:15:28:de:73:cd:
                    78:31:48:8e:19:a4:4d:d2:af:5d:ff:e6:28:61:f4:
                    96:37:1a:07:9e:71:63:4c:7b:cc:e7:49:d4:cf:d0:
                    7a:fd:13:bf:3f:a0:38:36:7d:6a:28:29:6d:ae:40:
                    d4:aa:24:90:fe:c2:19:e4:b7:64:78:dc:b3:fb:a3:
                    e1:9e:aa:51:fa:90:a3:ff:29:2e:e0:85:b7:98:d2:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1F:36:44:AA:C9:13:DD:2F:96:2B:AB:25:A1:1C:BC:95:09:52:00
            X509v3 Authority Key Identifier:
                keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/xh82RKrJE90vliurJaEcvJUJUgA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206082

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:7d:4d:a2:ae:19:d8:08:6e:46:fc:bf:e8:01:62:9c:20:
         56:f2:83:3d:22:cd:bc:19:ea:55:7a:37:5a:e8:80:fd:8a:99:
         e7:e9:e1:69:b8:4e:da:0b:3f:09:7f:19:fe:32:65:a6:39:1e:
         ae:d0:3f:87:96:67:51:fd:7d:ac:46:10:4f:70:b7:d8:48:d9:
         34:35:5e:5a:9d:4a:59:cc:44:3f:6d:a0:fa:cc:a9:84:c0:a2:
         7e:0c:60:a1:a6:b1:73:38:2e:ef:16:18:17:b7:b9:c1:b9:ce:
         65:42:67:71:3e:04:b6:1e:bb:71:ba:21:f3:4b:5e:34:c8:b7:
         97:c7:4d:07:2b:4d:d0:6b:5e:49:79:ec:31:8a:87:09:b4:a0:
         e5:e8:f8:4f:5a:b4:65:80:0a:6e:43:02:65:79:3a:61:2a:de:
         a7:44:93:53:af:cf:25:a0:b5:d1:bc:6d:af:1f:b4:05:4e:26:
         38:1c:a1:f4:30:49:9d:f2:54:82:83:04:3b:16:43:3c:7a:58:
         27:b2:19:91:da:c4:f1:d8:fa:86:a6:69:d6:ea:80:96:ff:31:
         bc:0e:f7:84:1c:4d:64:49:df:59:6a:8e:bf:ae:61:2b:02:d2:
         57:9a:77:d8:0f:23:d3:84:a4:60:5f:79:07:88:49:85:1b:c7:
         6d:eb:0f:d1
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx17QOEY88cdh3d4D1Bvx5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjYwMjE5MTI0MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjFmMzY0NGFhYzkxM2RkMmY5NjJiYWIyNWExMWNiYzk1MDk1MjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm/OupMmK7sArtFABH8QTg2H80f1
Zz946l7PaBwSiYMxEduBTfdR/hEHlY8wchb+OylSZiY24siJiaWpGLOS4bAXUfev
dz9MREE30+5qoq2f1WKxEUETbYg3jXjARals/P4/GRBS9LYZHUVoZ1e+lMmc4iPd
V96M4teXlMId6KoF5ZsapvqWiqd80IR0HDjjDomTHGYPEHuaqeiNgXMDyAomA/RX
GXJnJMyXml6WFSjec814MUiOGaRN0q9d/+YoYfSWNxoHnnFjTHvM50nUz9B6/RO/
P6A4Nn1qKCltrkDUqiSQ/sIZ5LdkeNyz+6PhnqpR+pCj/yku4IW3mNKRPQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMYfNkSqyRPdL5YrqyWhHLyVCVIAMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEveGg4MlJLckpFOTB2bGl1ckphRWN2SlVKVWdBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMlAjANBgkqhkiG
9w0BAQsFAAOCAQEAGed9TaKuGdgIbkb8v+gBYpwgVvKDPSLNvBnqVXo3WuiA/YqZ
5+nhabhO2gs/CX8Z/jJlpjkertA/h5ZnUf19rEYQT3C32EjZNDVeWp1KWcxEP22g
+syphMCifgxgoaaxczgu7xYYF7e5wbnOZUJncT4Eth67cboh80teNMi3l8dNBytN
0GteSXnsMYqHCbSg5ej4T1q0ZYAKbkMCZXk6YSrep0STU6/PJaC10bxtrx+0BU4m
OByh9DBJnfJUgoMEOxZDPHpYJ7IZkdrE8dj6hqZp1uqAlv8xvA73hBxNZEnfWWqO
v65hKwLSV5p32A8j04SkYF95B4hJhRvHbesP0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:50 2026 by rpki-client