Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa
File:                     A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa (raw, json)
Hash identifier:          QT7NxsqQ+bxynk+L0L+GBvKuJwI3nzCN47W2cDY6mWs=
Subject key identifier:   03:F4:74:6F:F4:92:77:34:BE:67:37:48:C7:87:01:65:C4:52:FC:11
Certificate issuer:       /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial:       019FA7B5C13C038DC0374C1F4158E4A1C2DF
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa
Signing time:             Tue 28 Jul 2026 07:52:14 +0000
ASPA not before:          Tue 28 Jul 2026 07:52:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42241
Providers:                AS: 29119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:b5:c1:3c:03:8d:c0:37:4c:1f:41:58:e4:a1:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
        Validity
            Not Before: Jul 28 07:52:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03f4746ff4927734be673748c7870165c452fc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:3a:a0:57:d7:2e:93:d7:98:7d:da:8c:73:
                    94:fc:5b:ab:c2:c0:27:13:11:ff:ae:c0:88:71:ec:
                    24:e2:0f:38:1b:eb:60:30:f5:bc:82:c6:d3:3e:d9:
                    43:d6:fc:5c:5b:9e:79:a8:43:ee:c9:7f:cd:f4:52:
                    a5:c3:bb:8c:02:df:0b:21:a3:42:d9:1b:50:79:e3:
                    df:26:c0:ab:d9:45:af:76:2d:ae:3a:c0:5c:49:e4:
                    35:0a:81:6a:1e:85:ac:76:54:ad:a9:3f:c4:31:67:
                    a0:e6:d8:a1:76:2c:f2:3b:40:2d:ff:ea:a0:d7:16:
                    70:5d:4b:a0:07:b0:f6:24:65:48:98:11:88:51:17:
                    8f:05:ac:43:cb:1b:6b:f4:f8:4a:9d:de:32:55:bb:
                    21:a9:53:22:39:a9:ab:71:cd:22:45:60:1d:cd:cb:
                    aa:a2:37:15:81:db:7b:77:71:3f:10:c5:18:df:05:
                    a0:fd:d4:e1:96:9d:2f:d9:ee:f0:0b:53:b6:01:61:
                    6e:0e:ad:0d:95:db:50:0f:df:07:ec:08:e3:b4:7c:
                    6b:ba:ec:1c:1e:dc:bb:a3:3d:66:92:c0:1d:db:1c:
                    44:83:db:24:0d:ed:99:9d:eb:b1:61:19:ad:4f:cc:
                    c3:5a:c1:3c:f7:75:75:2c:c8:b1:03:07:c6:2e:bc:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:74:6F:F4:92:77:34:BE:67:37:48:C7:87:01:65:C4:52:FC:11
            X509v3 Authority Key Identifier:
                keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42241

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:1d:31:e1:39:91:14:77:f8:15:fd:b3:bb:a8:3b:1a:8a:
         d1:f3:ce:c6:b4:3d:7d:11:98:11:a8:4d:9e:11:80:21:a4:74:
         f3:c0:a7:97:f9:23:44:10:e3:b3:9c:00:45:f0:43:2e:08:3e:
         2e:e4:ce:49:41:65:bc:5c:14:3f:03:c4:fc:6a:72:e7:86:29:
         4b:fa:2b:05:2e:59:9a:56:e2:fe:19:e2:c4:f1:0a:f3:fb:36:
         73:c2:7c:1d:7e:f9:19:67:d0:70:15:be:e2:f0:19:3c:c7:5d:
         ee:72:6d:15:63:45:9b:95:5c:ba:e6:22:98:85:21:31:8d:08:
         79:ac:7d:54:da:71:56:4c:44:02:db:9a:a9:3a:52:f2:69:41:
         b7:d7:a2:2c:02:d1:62:06:c9:38:9e:ee:11:a9:11:40:80:d3:
         c7:f4:32:08:a9:dd:65:bc:19:3d:3b:69:d1:f7:59:a6:25:38:
         80:1e:8c:36:1c:c2:f1:b5:7b:c7:3b:57:48:bd:54:5b:d9:68:
         78:30:ad:89:c6:5c:55:50:a5:fa:2a:24:e1:aa:9a:96:db:40:
         2d:fd:48:c7:f8:6b:7a:54:52:c1:9c:94:0d:ec:18:5d:d1:b1:
         89:50:d9:0d:b5:34:26:a2:f3:c8:e9:72:fd:0f:0a:30:64:bf:
         f8:c5:c9:e3
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ+ntcE8A43AN0wfQVjkocLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWU2OGMxNDdiZjk0MTQ0N2VlMjA2ZDYwZmE5NTYyZTRm
NDdlODUwHhcNMjYwNzI4MDc1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2Y0NzQ2ZmY0OTI3NzM0YmU2NzM3NDhjNzg3MDE2NWM0NTJmYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4g6oFfXLpPXmH3ajHOU/FurwsAn
ExH/rsCIcewk4g84G+tgMPW8gsbTPtlD1vxcW555qEPuyX/N9FKlw7uMAt8LIaNC
2RtQeePfJsCr2UWvdi2uOsBcSeQ1CoFqHoWsdlStqT/EMWeg5tihdizyO0At/+qg
1xZwXUugB7D2JGVImBGIURePBaxDyxtr9PhKnd4yVbshqVMiOamrcc0iRWAdzcuq
ojcVgdt7d3E/EMUY3wWg/dThlp0v2e7wC1O2AWFuDq0NldtQD98H7AjjtHxruuwc
Hty7oz1mksAd2xxEg9skDe2ZneuxYRmtT8zDWsE893V1LMixAwfGLrx77QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAP0dG/0knc0vmc3SMeHAWXEUvwRMB8GA1UdIwQY
MBaAFOeeaMFHv5QUR+4gbWD6lWLk9H6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU1b3dVZV9sQlJIN2lCdFlQcVZZdVQwZm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjc0YWMtNGNjNi00MjdjLTk4NTYt
NmEyYzIwYTZkM2ViLzEvQV9SMGJfU1NkelMtWnpkSXg0Y0JaY1JTX0JFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hNjc0YWMtNGNjNi00MjdjLTk4NTYtNmEyYzIwYTZkM2Vi
LzEvNTU1b3dVZV9sQlJIN2lCdFlQcVZZdVQwZm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClATANBgkqhkiG
9w0BAQsFAAOCAQEAKO0dMeE5kRR3+BX9s7uoOxqK0fPOxrQ9fRGYEahNnhGAIaR0
88Cnl/kjRBDjs5wARfBDLgg+LuTOSUFlvFwUPwPE/Gpy54YpS/orBS5Zmlbi/hni
xPEK8/s2c8J8HX75GWfQcBW+4vAZPMdd7nJtFWNFm5VcuuYimIUhMY0Ieax9VNpx
VkxEAtuaqTpS8mlBt9eiLALRYgbJOJ7uEakRQIDTx/QyCKndZbwZPTtp0fdZpiU4
gB6MNhzC8bV7xztXSL1UW9loeDCticZcVVCl+iok4aqalttALf1Ix/hrelRSwZyU
DewYXdGxiVDZDbU0JqLzyOly/Q8KMGS/+MXJ4w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:12 2026 by rpki-client