Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa
File:                     iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (raw, json)
Hash identifier:          oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=
Subject key identifier:   89:97:49:D1:05:F4:1B:5B:DF:93:AF:68:30:75:45:43:7E:16:E9:98
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019D76D64B6E4FD8EF8EF2FC60C930AF8FF0
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa
Signing time:             Fri 10 Apr 2026 10:00:48 +0000
ASPA not before:          Fri 10 Apr 2026 10:00:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214622
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:d6:4b:6e:4f:d8:ef:8e:f2:fc:60:c9:30:af:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Apr 10 10:00:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=899749d105f41b5bdf93af68307545437e16e998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:d5:a8:4d:1d:8e:9c:24:eb:ac:9c:33:ef:
                    81:0a:3b:a9:4e:06:e8:7e:e5:dc:66:85:4a:fc:c9:
                    45:fa:bc:b0:74:ff:7c:4f:9f:6c:9d:10:3e:5c:7b:
                    40:cc:ea:66:41:45:d4:68:de:75:88:7f:eb:68:50:
                    d4:3a:94:6a:79:24:88:be:71:a8:c4:35:d8:59:f9:
                    df:bc:56:07:39:89:e1:77:02:ea:dd:b0:58:af:c8:
                    d4:0a:e4:a0:1c:25:cb:0c:a9:8c:6e:a6:ae:31:cc:
                    5a:f5:8b:18:ca:62:5a:1b:4f:83:1f:7b:c7:7b:b0:
                    5c:9c:56:1a:cc:04:dc:25:b1:9a:f7:1a:8b:4b:0d:
                    ed:e0:d2:53:41:2d:a7:79:84:34:82:e9:28:ce:e7:
                    2a:98:30:27:a9:ea:c3:25:c1:a9:9b:82:6f:ac:6c:
                    90:cf:b2:fe:d8:66:b9:f8:c6:35:97:9d:86:45:d3:
                    7b:c9:5a:04:eb:51:e3:20:e4:f3:0b:9e:99:f1:58:
                    5e:ca:76:f8:6c:26:5b:0e:32:ac:35:a6:65:9a:a0:
                    31:db:38:69:97:a2:20:c5:1e:49:96:d6:59:95:dd:
                    99:c2:82:ad:b8:c5:ef:6d:c9:d5:dc:ac:c8:9d:0c:
                    25:ca:c6:bd:0d:fb:6d:d5:c1:cb:bc:b9:71:86:66:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:49:D1:05:F4:1B:5B:DF:93:AF:68:30:75:45:43:7E:16:E9:98
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214622

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:cc:d7:7f:36:0b:ea:76:53:91:99:60:ca:07:c6:8b:2d:
         56:56:ea:52:d5:52:fd:d9:4d:04:00:27:5a:7c:1b:b6:42:6f:
         77:37:09:8a:72:00:cd:23:5c:e0:70:be:d4:27:a9:68:b9:c5:
         92:d6:94:38:5d:84:d5:9c:cb:6a:23:49:8d:9a:04:62:3e:c1:
         c5:82:c6:75:d1:a4:38:6e:ae:6d:88:71:72:cb:b2:d4:84:1a:
         9d:d7:a0:72:40:b7:a8:bc:1b:2e:3f:2a:f0:41:9e:47:ad:cc:
         88:76:bc:bf:a8:73:c3:ad:f5:09:6b:7a:03:ae:82:3d:46:df:
         9c:97:4c:c7:e9:02:46:fa:48:89:55:f2:a4:02:55:d7:5e:8d:
         88:51:dc:2e:88:f1:8c:53:6e:c6:ff:56:bf:f4:d9:20:15:06:
         e1:8a:1c:a7:d4:d5:c9:75:f7:a7:99:43:75:84:ef:d0:bd:90:
         81:64:59:b2:79:9f:1c:98:6c:e7:38:5b:db:0b:cd:3a:45:7a:
         b5:3e:1f:24:3d:96:7c:fd:40:d2:c3:0d:d5:3f:2b:a0:c6:92:
         3d:fc:84:04:e6:d6:f3:bb:7d:69:48:30:95:44:01:61:5f:b3:
         d2:a1:f1:b3:0d:1d:1f:66:ce:7a:62:a8:9e:76:8a:7a:cc:4d:
         8e:f6:a6:e6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ121ktuT9jvjvL8YMkwr4/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjYwNDEwMTAwMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk3NDlkMTA1ZjQxYjViZGY5M2FmNjgzMDc1NDU0MzdlMTZlOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuDVqE0djpwk66ycM++BCjupTgbo
fuXcZoVK/MlF+rywdP98T59snRA+XHtAzOpmQUXUaN51iH/raFDUOpRqeSSIvnGo
xDXYWfnfvFYHOYnhdwLq3bBYr8jUCuSgHCXLDKmMbqauMcxa9YsYymJaG0+DH3vH
e7BcnFYazATcJbGa9xqLSw3t4NJTQS2neYQ0gukozucqmDAnqerDJcGpm4JvrGyQ
z7L+2Ga5+MY1l52GRdN7yVoE61HjIOTzC56Z8Vheynb4bCZbDjKsNaZlmqAx2zhp
l6IgxR5JltZZld2ZwoKtuMXvbcnV3KzInQwlysa9Dftt1cHLvLlxhmaUsQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFImXSdEF9Btb35OvaDB1RUN+FumYMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvaVpkSjBRWDBHMXZmazY5b01IVkZRMzRXNlpnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGXjANBgkqhkiG
9w0BAQsFAAOCAQEAK8rM1382C+p2U5GZYMoHxostVlbqUtVS/dlNBAAnWnwbtkJv
dzcJinIAzSNc4HC+1CepaLnFktaUOF2E1ZzLaiNJjZoEYj7BxYLGddGkOG6ubYhx
csuy1IQandegckC3qLwbLj8q8EGeR63MiHa8v6hzw631CWt6A66CPUbfnJdMx+kC
RvpIiVXypAJV116NiFHcLojxjFNuxv9Wv/TZIBUG4Yocp9TVyXX3p5lDdYTv0L2Q
gWRZsnmfHJhs5zhb2wvNOkV6tT4fJD2WfP1A0sMN1T8roMaSPfyEBObW87t9aUgw
lUQBYV+z0qHxsw0dH2bOemKonnaKesxNjvam5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:57:02 2026 by rpki-client