Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/2sXpeJGs67EM5ns-zJQBcUYxKDc.asa
File:                     2sXpeJGs67EM5ns-zJQBcUYxKDc.asa (raw, json)
Hash identifier:          puRkCC1zHNpksWQuVwcp5iNFdpOsHJNyqZUYboDdAAM=
Subject key identifier:   DA:C5:E9:78:91:AC:EB:B1:0C:E6:7B:3E:CC:94:01:71:46:31:28:37
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       01A0B0C972B56104FCF7220C36F1D3797D0B
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/2sXpeJGs67EM5ns-zJQBcUYxKDc.asa
Signing time:             Thu 17 Sep 2026 19:13:06 +0000
ASPA not before:          Thu 17 Sep 2026 19:13:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208208
Providers:                AS: 174
                          AS: 33891
                          AS: 51202
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:c9:72:b5:61:04:fc:f7:22:0c:36:f1:d3:79:7d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Sep 17 19:13:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dac5e97891acebb10ce67b3ecc94017146312837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:f5:55:c5:ce:f2:45:7b:13:40:dc:1e:06:
                    5b:3a:bd:ee:c0:a3:29:16:2b:c0:d1:38:95:9c:c2:
                    9d:e2:b6:4b:48:dd:cc:30:c9:6b:50:cf:e4:7d:18:
                    73:b0:0d:25:21:a2:d3:4b:c6:70:dd:2c:6f:c3:c0:
                    fa:ff:68:e1:09:78:9f:c4:bc:88:82:d9:cd:78:4b:
                    77:4e:a1:bc:49:4a:bc:9c:fd:c0:29:ee:80:02:d5:
                    25:e5:1b:e5:e9:31:3a:74:95:30:04:d7:37:04:fd:
                    7a:b0:8a:2b:87:52:9d:61:29:ad:a8:f5:3f:ad:21:
                    03:32:4e:4b:b8:5b:bb:4f:53:38:48:9b:da:c3:90:
                    98:a2:e6:20:6e:50:d5:30:96:81:6f:6c:19:4a:fe:
                    ac:4f:e1:68:b5:40:5c:9c:c1:31:44:b3:9f:8d:ec:
                    c2:9a:16:5f:b1:47:80:f7:6b:59:17:71:26:ea:1a:
                    39:7c:c6:c2:93:1e:aa:ef:0c:57:96:7f:f7:9a:bb:
                    0d:46:84:99:ec:18:9d:c4:4e:e5:2f:c2:5a:9d:ef:
                    84:ee:00:26:bb:16:84:33:73:a1:f4:17:0b:49:26:
                    98:9b:06:01:69:e2:f0:dd:71:ed:ca:9a:bc:16:1f:
                    1c:a0:56:ad:1b:2c:cf:eb:8e:6b:a2:48:67:37:91:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C5:E9:78:91:AC:EB:B1:0C:E6:7B:3E:CC:94:01:71:46:31:28:37
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/2sXpeJGs67EM5ns-zJQBcUYxKDc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208208

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:d0:7d:50:66:16:70:ec:2c:7c:b1:83:32:68:19:f5:26:
         d7:29:95:d3:5d:df:0a:c7:77:f3:78:32:ad:1e:a8:01:62:ca:
         ab:cf:e1:29:09:84:6f:8c:37:d5:e5:ac:b6:a7:ba:a5:58:db:
         9f:4f:4b:6a:4c:38:04:86:64:ad:e2:8d:1f:28:b8:b8:11:04:
         5c:87:6b:32:be:1e:d6:c1:4d:b3:f2:74:c5:06:bb:1a:03:b2:
         1b:16:13:8f:fe:b1:39:25:be:57:93:0a:29:cb:07:2c:bc:c8:
         ed:fd:d5:de:3b:30:d0:1f:ea:3c:52:ac:f2:a4:20:b2:f3:73:
         6c:3e:42:04:73:d9:5f:b1:0f:b1:bd:32:f4:a8:cc:b7:95:40:
         21:d3:3c:4a:87:d7:1d:33:bf:2c:a1:03:89:39:91:01:98:9b:
         e8:bc:2a:86:1a:0e:64:85:f5:38:f6:e7:a0:85:c4:00:48:fb:
         4e:a2:2f:98:75:2d:15:00:e7:c5:83:ae:f0:9c:2a:ed:bd:0e:
         52:7b:85:51:08:40:cf:14:71:3e:cf:9c:19:6c:ef:63:0a:ee:
         2b:25:8e:82:22:46:4a:e0:98:69:0c:f2:bc:fa:12:a0:d6:d5:
         a1:bf:d7:01:f5:2d:95:7c:d1:34:79:bd:78:b4:0b:41:d3:20:
         08:03:5d:b9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaCwyXK1YQT89yIMNvHTeX0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjYwOTE3MTkxMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWM1ZTk3ODkxYWNlYmIxMGNlNjdiM2VjYzk0MDE3MTQ2MzEyODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApej1VcXO8kV7E0DcHgZbOr3uwKMp
FivA0TiVnMKd4rZLSN3MMMlrUM/kfRhzsA0lIaLTS8Zw3Sxvw8D6/2jhCXifxLyI
gtnNeEt3TqG8SUq8nP3AKe6AAtUl5Rvl6TE6dJUwBNc3BP16sIorh1KdYSmtqPU/
rSEDMk5LuFu7T1M4SJvaw5CYouYgblDVMJaBb2wZSv6sT+FotUBcnMExRLOfjezC
mhZfsUeA92tZF3Em6ho5fMbCkx6q7wxXln/3mrsNRoSZ7BidxE7lL8Jane+E7gAm
uxaEM3Oh9BcLSSaYmwYBaeLw3XHtypq8Fh8coFatGyzP645rokhnN5GKYwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNrF6XiRrOuxDOZ7PsyUAXFGMSg3MB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvMnNYcGVKR3M2N0VNNW5zLXpKUUJjVVl4S0RjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtUDANBgkqhkiG
9w0BAQsFAAOCAQEARLLQfVBmFnDsLHyxgzJoGfUm1ymV013fCsd383gyrR6oAWLK
q8/hKQmEb4w31eWstqe6pVjbn09Lakw4BIZkreKNHyi4uBEEXIdrMr4e1sFNs/J0
xQa7GgOyGxYTj/6xOSW+V5MKKcsHLLzI7f3V3jsw0B/qPFKs8qQgsvNzbD5CBHPZ
X7EPsb0y9KjMt5VAIdM8SofXHTO/LKEDiTmRAZib6LwqhhoOZIX1OPbnoIXEAEj7
TqIvmHUtFQDnxYOu8Jwq7b0OUnuFUQhAzxRxPs+cGWzvYwruKyWOgiJGSuCYaQzy
vPoSoNbVob/XAfUtlXzRNHm9eLQLQdMgCANduQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:46 2026 by rpki-client