Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa
File:                     NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa (raw, json)
Hash identifier:          6ugYz31WQf5MvMC/gtFmfZIhbfo2pPGMfKiHyLgTL0c=
Subject key identifier:   37:07:B3:60:DF:D2:49:55:69:4B:8C:92:C0:4B:7F:C8:54:62:F8:F4
Certificate issuer:       /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial:       019E2A555822ACA3C7FA90A03E644E4303DB
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa
Signing time:             Fri 15 May 2026 06:31:36 +0000
ASPA not before:          Fri 15 May 2026 06:31:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207192
Providers:                AS: 8449
                          AS: 9198
                          AS: 13335
                          AS: 61010
                          AS: 61399
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:55:58:22:ac:a3:c7:fa:90:a0:3e:64:4e:43:03:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
        Validity
            Not Before: May 15 06:31:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3707b360dfd24955694b8c92c04b7fc85462f8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:87:a1:f6:a3:ce:86:e7:28:eb:c7:2a:f6:
                    da:5c:fa:6a:21:b8:fe:0d:d5:ac:8b:a8:f3:1c:e2:
                    7d:86:f4:6c:cf:33:ee:4a:8f:bd:f6:c8:7a:db:c1:
                    a8:21:a1:7b:1f:0b:f0:40:e8:6b:4e:a9:e1:4f:f3:
                    0b:ab:b1:4b:91:11:c3:a5:0c:f6:ea:3f:ac:14:d6:
                    b2:42:b3:ec:27:80:7d:e7:84:a0:89:8c:c7:83:e2:
                    35:a6:59:09:05:7a:01:60:0d:e0:5c:b9:a7:7b:8e:
                    9a:d2:c2:08:23:ff:d5:90:7f:f3:da:1c:81:b1:16:
                    f6:64:58:11:8f:f4:a6:20:9f:06:d8:a1:ae:2a:c8:
                    ca:aa:a2:a6:9e:ea:75:70:4b:a3:00:19:72:ee:a7:
                    f4:6d:53:c3:ad:89:e2:a7:8a:48:8b:20:af:85:4a:
                    d7:92:0c:47:ee:fa:6f:fe:bf:4d:0f:01:5d:8a:d5:
                    8a:53:b8:4c:a0:36:08:dd:1d:9c:18:9d:57:9a:09:
                    53:65:26:a0:cd:84:dd:db:9b:1f:52:73:59:4c:b2:
                    d2:2e:ec:34:a4:2b:9b:f4:61:84:87:ba:af:be:8f:
                    d9:82:11:a0:9c:b0:06:ad:7c:b1:27:7d:18:df:13:
                    2c:4a:aa:60:23:a9:2f:97:e4:f7:3c:f2:b3:f2:4e:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:07:B3:60:DF:D2:49:55:69:4B:8C:92:C0:4B:7F:C8:54:62:F8:F4
            X509v3 Authority Key Identifier:
                keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207192

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:6b:73:14:37:d6:de:20:88:07:db:74:8b:4b:b1:b9:06:
         80:a0:50:b6:c2:b3:de:90:15:16:01:f8:6a:90:7d:63:c1:2d:
         b3:67:5e:8b:2a:c1:4b:40:e9:89:82:07:27:e2:19:28:4e:dd:
         1e:cb:ec:0e:80:53:3e:7e:2c:9b:f1:06:8a:04:4c:a4:f4:0e:
         3a:7a:76:4e:b8:51:ca:fd:e2:af:4a:d2:68:d3:62:ff:82:c4:
         c0:84:81:f5:c7:20:f3:e9:29:45:2b:09:9f:f9:4b:73:c5:df:
         92:f4:01:eb:13:a4:38:ac:4b:7b:da:38:71:d0:b2:ba:67:34:
         36:84:8e:f1:42:45:97:b7:45:a1:9c:92:7e:98:66:96:2a:5f:
         76:47:76:e3:e1:d7:d0:95:3a:0d:e5:c4:42:d2:49:5d:f0:e7:
         c0:d5:e8:b4:ed:d3:a7:b3:f9:7a:bc:5b:0d:83:c6:1f:f6:be:
         d1:81:09:bd:1f:b4:d7:e2:d8:43:f3:a1:19:36:46:67:43:c2:
         0f:20:a2:89:df:f8:6f:31:f3:3e:fd:f1:b9:34:a0:dd:a2:7f:
         91:62:52:94:d0:48:20:4a:ff:5c:e1:7e:c2:9e:5a:cf:25:fb:
         7f:45:eb:5d:d2:04:0c:c7:ce:fd:cd:a2:28:74:1c:9d:c4:f1:
         66:c7:00:38
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4qVVgirKPH+pCgPmROQwPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw
YThkMTEwHhcNMjYwNTE1MDYzMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzA3YjM2MGRmZDI0OTU1Njk0YjhjOTJjMDRiN2ZjODU0NjJmOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3iHofajzobnKOvHKvbaXPpqIbj+
DdWsi6jzHOJ9hvRszzPuSo+99sh628GoIaF7HwvwQOhrTqnhT/MLq7FLkRHDpQz2
6j+sFNayQrPsJ4B954SgiYzHg+I1plkJBXoBYA3gXLmne46a0sIII//VkH/z2hyB
sRb2ZFgRj/SmIJ8G2KGuKsjKqqKmnup1cEujABly7qf0bVPDrYnip4pIiyCvhUrX
kgxH7vpv/r9NDwFditWKU7hMoDYI3R2cGJ1XmglTZSagzYTd25sfUnNZTLLSLuw0
pCub9GGEh7qvvo/ZghGgnLAGrXyxJ30Y3xMsSqpgI6kvl+T3PPKz8k616wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDcHs2Df0klVaUuMksBLf8hUYvj0MB8GA1UdIwQY
MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt
Y2JlYzQzZmQ5MmExLzEvTndlellOX1NTVlZwUzR5U3dFdF95RlJpLVBRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx
LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpWDANBgkqhkiG
9w0BAQsFAAOCAQEAE3prcxQ31t4giAfbdItLsbkGgKBQtsKz3pAVFgH4apB9Y8Et
s2deiyrBS0DpiYIHJ+IZKE7dHsvsDoBTPn4sm/EGigRMpPQOOnp2TrhRyv3ir0rS
aNNi/4LEwISB9ccg8+kpRSsJn/lLc8XfkvQB6xOkOKxLe9o4cdCyumc0NoSO8UJF
l7dFoZySfphmlipfdkd24+HX0JU6DeXEQtJJXfDnwNXotO3Tp7P5erxbDYPGH/a+
0YEJvR+01+LYQ/OhGTZGZ0PCDyCiid/4bzHzPv3xuTSg3aJ/kWJSlNBIIEr/XOF+
wp5azyX7f0XrXdIEDMfO/c2iKHQcncTxZscAOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:12 2026 by rpki-client