Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/A2XGzm8UMRQOn80LJj2PQCTNSUA.asa
File:                     A2XGzm8UMRQOn80LJj2PQCTNSUA.asa (raw, json)
Hash identifier:          RU2LiGmF+CVLCuKrcluxCpmzaRMugiVl/OBy6Yblzws=
Subject key identifier:   03:65:C6:CE:6F:14:31:14:0E:9F:CD:0B:26:3D:8F:40:24:CD:49:40
Certificate issuer:       /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial:       019EB2AD706B1B49E041D5E5EE72A372878B
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/A2XGzm8UMRQOn80LJj2PQCTNSUA.asa
Signing time:             Wed 10 Jun 2026 17:56:11 +0000
ASPA not before:          Wed 10 Jun 2026 17:56:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201269
Providers:                AS: 197974
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b2:ad:70:6b:1b:49:e0:41:d5:e5:ee:72:a3:72:87:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
        Validity
            Not Before: Jun 10 17:56:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0365c6ce6f1431140e9fcd0b263d8f4024cd4940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:7c:ae:94:5d:3d:5e:f1:3e:8a:81:dd:96:
                    65:dc:23:04:d4:1c:d7:34:89:e9:ba:a9:3e:80:2c:
                    dd:f7:64:26:96:10:73:a8:ec:32:44:eb:54:9e:01:
                    21:ff:49:56:e7:15:4a:3f:77:a6:1c:9b:22:39:a3:
                    c1:ed:5a:6a:c0:10:64:2b:b0:0d:01:b6:05:92:b1:
                    47:59:5f:1f:f5:65:4c:91:46:c9:d6:3c:56:a9:e1:
                    b9:24:8b:28:4d:5a:96:c8:2e:52:5e:30:c6:b8:dd:
                    e2:97:1a:3b:33:26:0a:a0:57:49:d6:fb:ac:73:29:
                    21:80:da:10:ac:45:ed:bb:4a:b3:70:1a:b9:01:33:
                    21:fa:4e:8f:83:3a:73:2e:92:bb:9f:bf:10:e9:d8:
                    75:f4:d8:74:db:c6:9c:6c:20:86:ba:69:56:06:bf:
                    1a:8a:7a:03:5c:ad:30:99:94:3a:19:6b:a6:0d:b8:
                    4e:45:30:38:cc:0d:4b:33:1e:9c:5e:bd:0a:80:34:
                    9e:3e:4c:90:e2:5b:90:cc:c0:c9:ff:04:12:3a:e3:
                    4c:c0:c7:c3:c4:56:52:df:3d:06:5e:24:0b:bb:2a:
                    71:2f:4f:82:43:af:45:31:39:f4:97:50:7e:4b:7b:
                    24:bf:7e:b5:31:1c:ac:90:98:06:6b:85:bc:5d:b1:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:C6:CE:6F:14:31:14:0E:9F:CD:0B:26:3D:8F:40:24:CD:49:40
            X509v3 Authority Key Identifier:
                keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/A2XGzm8UMRQOn80LJj2PQCTNSUA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201269

    Signature Algorithm: sha256WithRSAEncryption
         bc:c9:2c:ab:3d:ed:06:7b:52:71:21:46:15:d3:df:a5:34:2c:
         85:e4:ab:a6:b4:74:b7:f0:aa:97:1b:87:78:d1:71:e4:8f:3f:
         8f:a2:b5:ea:26:1e:f7:8d:2e:de:a8:0f:8e:4e:73:36:2b:4e:
         43:db:e6:d0:b3:d8:74:c1:e2:2c:73:81:ea:c2:c9:57:43:cf:
         df:41:dc:48:de:1c:3f:2c:16:56:be:6e:d6:9b:2e:d9:80:49:
         c9:f5:f1:92:89:24:fb:8a:82:f5:68:00:5f:d2:6d:46:14:0a:
         20:41:68:35:3d:1d:7d:08:5e:4e:8a:71:af:6e:63:1e:b9:e2:
         2c:4c:f4:9b:58:03:70:1b:b0:10:9f:55:14:81:4f:7d:ae:d0:
         32:a6:0e:fd:ab:2a:a4:42:fb:70:ff:3d:2f:ff:ac:ae:c3:bf:
         2f:f6:47:d9:2d:51:cd:fb:6d:2c:76:40:ac:b2:73:47:1e:7b:
         c0:91:0f:d8:d8:b3:03:35:b0:cd:ad:24:32:fa:a2:af:97:57:
         82:9c:60:ab:df:00:8b:8c:5e:18:6c:e5:95:5a:a2:b2:1e:a2:
         fb:8f:3b:92:37:ee:83:7c:62:d0:e5:6c:a4:92:ac:7c:0a:9a:
         72:ff:dc:06:ff:8b:85:10:bc:86:29:8f:44:0e:d8:ff:df:2f:
         29:d0:82:4e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6yrXBrG0ngQdXl7nKjcoeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTRkY2ExYjk3MmRlOTExNjc1ZWEyMmQyZmJjZGJlMDFi
ODMwYmMwHhcNMjYwNjEwMTc1NjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzY1YzZjZTZmMTQzMTE0MGU5ZmNkMGIyNjNkOGY0MDI0Y2Q0OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnZ8rpRdPV7xPoqB3ZZl3CME1BzX
NInpuqk+gCzd92QmlhBzqOwyROtUngEh/0lW5xVKP3emHJsiOaPB7VpqwBBkK7AN
AbYFkrFHWV8f9WVMkUbJ1jxWqeG5JIsoTVqWyC5SXjDGuN3ilxo7MyYKoFdJ1vus
cykhgNoQrEXtu0qzcBq5ATMh+k6PgzpzLpK7n78Q6dh19Nh028acbCCGumlWBr8a
inoDXK0wmZQ6GWumDbhORTA4zA1LMx6cXr0KgDSePkyQ4luQzMDJ/wQSOuNMwMfD
xFZS3z0GXiQLuypxL0+CQ69FMTn0l1B+S3skv361MRyskJgGa4W8XbGDgwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFANlxs5vFDEUDp/NCyY9j0AkzUlAMB8GA1UdIwQY
MBaAFBgU3KG5ct6RFnXqItL7zb4BuDC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JUY29ibHkzcEVXZGVvaTB2dk52Z0c0TUx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yZGVhZmItMDEzNS00NjQ1LWIwZDkt
MWUwOGFiYmI3NDhjLzEvQTJYR3ptOFVNUlFPbjgwTEpqMlBRQ1ROU1VBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yZGVhZmItMDEzNS00NjQ1LWIwZDktMWUwOGFiYmI3NDhj
LzEvR0JUY29ibHkzcEVXZGVvaTB2dk52Z0c0TUx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSNTANBgkqhkiG
9w0BAQsFAAOCAQEAvMksqz3tBntScSFGFdPfpTQsheSrprR0t/CqlxuHeNFx5I8/
j6K16iYe940u3qgPjk5zNitOQ9vm0LPYdMHiLHOB6sLJV0PP30HcSN4cPywWVr5u
1psu2YBJyfXxkokk+4qC9WgAX9JtRhQKIEFoNT0dfQheTopxr25jHrniLEz0m1gD
cBuwEJ9VFIFPfa7QMqYO/asqpEL7cP89L/+srsO/L/ZH2S1RzfttLHZArLJzRx57
wJEP2NizAzWwza0kMvqir5dXgpxgq98Ai4xeGGzllVqish6i+487kjfug3xi0OVs
pJKsfAqacv/cBv+LhRC8himPRA7Y/98vKdCCTg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:35 2026 by rpki-client