Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa
File:                     1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa (raw, json)
Hash identifier:          cnjmn37Bymr+KZc+EQAJuebAi5xDmdRRwv+K/KGNEr4=
Subject key identifier:   FA:F9:98:7E:01:14:A8:A2:04:80:21:4C:D1:6B:EA:57:36:56:86:52
Certificate issuer:       /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial:       019D4ED4DA97D1288742C36CD1F667C1681B
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa
Signing time:             Thu 02 Apr 2026 15:34:25 +0000
ASPA not before:          Thu 02 Apr 2026 15:34:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59600
Providers:                AS: 9002
                          AS: 31133
                          AS: 57304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4e:d4:da:97:d1:28:87:42:c3:6c:d1:f6:67:c1:68:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
        Validity
            Not Before: Apr  2 15:34:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=faf9987e0114a8a20480214cd16bea5736568652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:03:60:96:f8:6d:9c:c1:e4:98:d1:8f:11:
                    b5:00:f0:53:9d:4a:1c:df:d6:fb:11:70:e7:49:38:
                    81:0f:cc:17:a1:58:60:fc:51:f7:49:d1:17:4d:57:
                    e1:fe:b4:b3:72:6d:e2:4d:aa:71:0b:42:c4:b1:41:
                    d1:54:10:ae:87:8e:b5:63:a6:cb:8e:e7:ff:43:6f:
                    a3:b6:4f:3b:71:a0:39:53:41:4c:63:b4:17:b2:0c:
                    3b:d3:af:2c:66:e2:89:3c:61:6d:ac:9c:39:dc:50:
                    f2:af:bd:c1:28:a1:69:bb:6f:d6:5d:2f:3b:e7:3a:
                    94:87:f3:14:de:30:f4:7e:37:c8:86:1d:ab:ee:45:
                    1c:86:4a:97:79:78:40:cc:5b:9b:ee:ab:ee:a1:ac:
                    df:74:2f:5a:c0:c1:86:37:4d:de:30:6d:6c:bd:ee:
                    56:53:f1:19:ee:00:da:29:2c:52:25:94:53:35:06:
                    31:2f:b0:ed:7d:90:39:ab:55:da:c1:3f:3c:14:05:
                    fa:63:80:37:1f:09:3e:38:b1:bd:7b:f9:4e:af:df:
                    06:bf:76:1f:b7:e1:eb:3d:f4:05:15:07:70:b2:d2:
                    2a:e8:e5:f0:56:a0:cf:78:71:bb:e6:e8:d0:f4:06:
                    a3:3b:32:83:d7:92:a5:75:21:36:4e:dc:a6:93:59:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F9:98:7E:01:14:A8:A2:04:80:21:4C:D1:6B:EA:57:36:56:86:52
            X509v3 Authority Key Identifier:
                keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59600

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:49:5c:18:69:24:0f:43:22:ad:99:13:12:45:41:4f:13:
         08:d9:0e:2f:a7:70:47:d2:b0:e2:8f:4f:5d:f1:7b:6f:66:ae:
         18:83:1e:a1:0e:3a:9c:d6:83:03:7d:73:60:64:93:f6:28:a8:
         0b:29:39:7e:d5:89:03:7c:e6:97:e9:e7:68:25:56:95:4d:d5:
         8d:9e:ba:d6:f6:fc:2c:66:80:9f:af:cc:96:42:14:70:94:3f:
         ff:56:1d:4d:42:92:fa:73:6b:e3:0e:b8:5a:db:e9:10:0c:98:
         ce:82:fc:0c:89:1a:2b:e5:05:74:78:5e:7d:b0:00:aa:6e:7d:
         88:38:a1:37:ac:f4:a9:2e:c0:c9:53:ea:12:97:aa:4e:77:65:
         93:86:96:5c:50:14:6c:51:33:a7:3c:c1:42:41:a4:18:f6:87:
         c6:65:90:74:09:26:0e:cf:ae:3a:ac:6b:61:17:b9:94:8b:0f:
         38:21:f1:0c:01:b6:f1:04:d1:53:cf:0b:9a:3b:9a:37:7a:3b:
         17:72:29:21:05:4f:5e:21:24:cd:47:49:8b:f9:99:34:58:0d:
         ba:74:d1:1e:2f:a4:26:b4:52:5a:4f:96:31:40:77:e8:51:f4:
         85:31:cf:54:b5:3f:d8:30:7f:58:43:77:11:aa:0c:84:86:b1:
         dc:0d:1e:54
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgISAZ1O1NqX0SiHQsNs0fZnwWgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTNmM2QwOTNmYTI4NjcyMDBhNDNhZWNlNDUwZDc0YjM5
MDk2ZmYwHhcNMjYwNDAyMTUzNDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWY5OTg3ZTAxMTRhOGEyMDQ4MDIxNGNkMTZiZWE1NzM2NTY4NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WcDYJb4bZzB5JjRjxG1APBTnUoc
39b7EXDnSTiBD8wXoVhg/FH3SdEXTVfh/rSzcm3iTapxC0LEsUHRVBCuh461Y6bL
juf/Q2+jtk87caA5U0FMY7QXsgw7068sZuKJPGFtrJw53FDyr73BKKFpu2/WXS87
5zqUh/MU3jD0fjfIhh2r7kUchkqXeXhAzFub7qvuoazfdC9awMGGN03eMG1sve5W
U/EZ7gDaKSxSJZRTNQYxL7DtfZA5q1XawT88FAX6Y4A3Hwk+OLG9e/lOr98Gv3Yf
t+HrPfQFFQdwstIq6OXwVqDPeHG75ujQ9AajOzKD15KldSE2Ttymk1m9XwIDAQAB
o4ICBTCCAgEwHQYDVR0OBBYEFPr5mH4BFKiiBIAhTNFr6lc2VoZSMB8GA1UdIwQY
MBaAFNWj89CT+ihnIApDrs5FDXSzkJb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFQejBKUDZLR2NnQ2tPdXprVU5kTE9RbHY4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zYWQyYjEtYTRhYy00YzAwLWEyNzkt
MDdiNjIzNjY4ZjNiLzEvMS12bVlmZ0VVcUtJRWdDRk0wV3ZxVnpaV2hsSS5hc2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDMvM2FkMmIxLWE0YWMtNGMwMC1hMjc5LTA3YjYyMzY2OGYz
Yi8xLzFhUHowSlA2S0djZ0NrT3V6a1VOZExPUWx2OC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6NAwDQYJKoZI
hvcNAQELBQADggEBAAQ9SVwYaSQPQyKtmRMSRUFPEwjZDi+ncEfSsOKPT13xe29m
rhiDHqEOOpzWgwN9c2Bkk/YoqAspOX7ViQN85pfp52glVpVN1Y2eutb2/CxmgJ+v
zJZCFHCUP/9WHU1Ckvpza+MOuFrb6RAMmM6C/AyJGivlBXR4Xn2wAKpufYg4oTes
9KkuwMlT6hKXqk53ZZOGllxQFGxRM6c8wUJBpBj2h8ZlkHQJJg7Prjqsa2EXuZSL
Dzgh8QwBtvEE0VPPC5o7mjd6OxdyKSEFT14hJM1HSYv5mTRYDbp00R4vpCa0UlpP
ljFAd+hR9IUxz1S1P9gwf1hDdxGqDISGsdwNHlQ=
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:28:33 2026 by rpki-client