Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/1LA-pOZoA1tm-AvQur9VCLqaFes.asa
File:                     1LA-pOZoA1tm-AvQur9VCLqaFes.asa (raw, json)
Hash identifier:          mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=
Subject key identifier:   D4:B0:3E:A4:E6:68:03:5B:66:F8:0B:D0:BA:BF:55:08:BA:9A:15:EB
Certificate issuer:       /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial:       019EB5CD9C1F2A387E62295222790BEDF930
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/1LA-pOZoA1tm-AvQur9VCLqaFes.asa
Signing time:             Thu 11 Jun 2026 08:30:11 +0000
ASPA not before:          Thu 11 Jun 2026 08:30:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215883
Providers:                AS: 198890
                          AS: 207876
                          AS: 212752
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:cd:9c:1f:2a:38:7e:62:29:52:22:79:0b:ed:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
        Validity
            Not Before: Jun 11 08:30:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4b03ea4e668035b66f80bd0babf5508ba9a15eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:4f:1a:32:75:35:ef:8c:90:f1:dd:f7:19:
                    ab:c9:60:ea:bf:b3:2d:d0:b0:bf:e6:8c:7c:74:65:
                    33:30:6b:46:57:93:33:6a:2e:03:04:e1:3d:c8:fa:
                    ad:03:15:63:d2:d7:5f:07:6f:26:6a:ba:af:8a:52:
                    ed:0d:c2:ee:87:c9:00:35:a9:a4:7b:69:4e:8f:cc:
                    6c:64:ef:08:dc:47:d9:21:44:18:50:05:09:6b:6e:
                    49:1a:7c:98:27:77:7b:43:90:84:18:d7:23:53:f9:
                    4d:b4:38:f9:51:60:51:90:c3:cf:72:52:a0:92:e9:
                    16:58:22:a8:95:d7:59:90:f0:54:9a:7c:32:a1:a6:
                    b4:20:76:b8:f2:fd:dc:c8:9d:7e:86:b5:e3:f5:58:
                    64:60:b2:aa:c8:80:ab:6b:0e:89:61:99:d6:58:23:
                    5c:cb:a1:29:3f:25:4b:64:21:53:25:e2:0f:22:6a:
                    44:e0:e6:c9:f9:11:6e:47:1d:6c:96:06:c9:aa:9e:
                    f8:d6:a1:fe:d7:99:e4:5d:11:ae:73:a9:d9:be:e0:
                    5a:68:14:5a:c4:13:b6:2e:14:a4:1d:2d:05:aa:8c:
                    ae:a2:6f:82:d5:ff:54:af:4f:dd:b0:f7:bf:1b:9c:
                    20:37:b1:c7:f7:3f:2c:79:52:2e:db:87:10:79:8a:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:3E:A4:E6:68:03:5B:66:F8:0B:D0:BA:BF:55:08:BA:9A:15:EB
            X509v3 Authority Key Identifier:
                keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/1LA-pOZoA1tm-AvQur9VCLqaFes.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215883

    Signature Algorithm: sha256WithRSAEncryption
         7a:d0:92:ec:07:5c:1c:98:bc:a1:e9:a7:1a:6a:70:7e:75:3a:
         a9:fa:5c:bd:32:42:26:91:fb:67:1c:53:9e:82:2d:be:50:a5:
         71:66:d2:11:f8:91:17:d0:48:db:be:66:58:55:2c:33:a3:fb:
         a1:ba:ef:13:9e:f4:8e:80:93:78:66:a8:86:75:f0:61:8d:d5:
         db:8d:c9:f7:f6:16:67:eb:df:1b:29:09:41:d6:04:ca:a3:c4:
         77:b3:7b:59:24:a4:1c:54:ac:6e:71:3d:49:65:8e:74:94:b6:
         f6:1b:a2:81:39:f4:ff:39:89:d2:af:da:2e:13:ca:c0:dc:7f:
         f4:cf:83:63:2e:cc:e1:1c:ad:66:ac:4e:c6:f1:60:8a:2d:d1:
         c4:08:1a:4b:ea:f2:26:5a:9e:fd:c4:6b:fb:3c:c7:d8:db:10:
         39:37:3b:8d:8a:92:a4:a6:60:1e:2d:73:7a:84:13:f1:1e:d0:
         9d:dd:56:93:96:73:07:91:a0:25:0c:22:2f:4d:e8:8c:b4:0e:
         0d:b4:9d:b4:3d:2b:2f:af:62:3e:41:f3:c2:af:6d:8f:1c:d6:
         b8:86:ed:70:94:7d:09:e0:9b:79:97:38:c4:37:9e:5a:34:5b:
         f6:46:e3:3f:52:c3:48:a7:af:0e:d0:8f:89:90:f1:85:f1:37:
         83:66:f2:9f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ61zZwfKjh+YilSInkL7fkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjJmYmE0NWFkNjUzMWE2M2QxNzM1MDE0ZjY5OTgwN2Y0
N2ZiZGMwHhcNMjYwNjExMDgzMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGIwM2VhNGU2NjgwMzViNjZmODBiZDBiYWJmNTUwOGJhOWExNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WpPGjJ1Ne+MkPHd9xmryWDqv7Mt
0LC/5ox8dGUzMGtGV5Mzai4DBOE9yPqtAxVj0tdfB28marqvilLtDcLuh8kANamk
e2lOj8xsZO8I3EfZIUQYUAUJa25JGnyYJ3d7Q5CEGNcjU/lNtDj5UWBRkMPPclKg
kukWWCKolddZkPBUmnwyoaa0IHa48v3cyJ1+hrXj9VhkYLKqyICraw6JYZnWWCNc
y6EpPyVLZCFTJeIPImpE4ObJ+RFuRx1slgbJqp741qH+15nkXRGuc6nZvuBaaBRa
xBO2LhSkHS0Fqoyuom+C1f9Ur0/dsPe/G5wgN7HH9z8seVIu24cQeYotuwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNSwPqTmaANbZvgL0Lq/VQi6mhXrMB8GA1UdIwQY
MBaAFGry+6Ra1lMaY9FzUBT2mYB/R/vcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmIt
MTk3ZWM5YTExNWFhLzEvMUxBLXBPWm9BMXRtLUF2UXVyOVZDTHFhRmVzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmItMTk3ZWM5YTExNWFh
LzEvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLSzANBgkqhkiG
9w0BAQsFAAOCAQEAetCS7AdcHJi8oemnGmpwfnU6qfpcvTJCJpH7ZxxTnoItvlCl
cWbSEfiRF9BI275mWFUsM6P7obrvE570joCTeGaohnXwYY3V243J9/YWZ+vfGykJ
QdYEyqPEd7N7WSSkHFSsbnE9SWWOdJS29huigTn0/zmJ0q/aLhPKwNx/9M+DYy7M
4RytZqxOxvFgii3RxAgaS+ryJlqe/cRr+zzH2NsQOTc7jYqSpKZgHi1zeoQT8R7Q
nd1Wk5ZzB5GgJQwiL03ojLQODbSdtD0rL69iPkHzwq9tjxzWuIbtcJR9CeCbeZc4
xDeeWjRb9kbjP1LDSKevDtCPiZDxhfE3g2bynw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:51 2026 by rpki-client