Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/y80B_uuM_hGD_Q988wwVbuTVVzQ.asa
File:                     y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (raw, json)
Hash identifier:          wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=
Subject key identifier:   CB:CD:01:FE:EB:8C:FE:11:83:FD:0F:7C:F3:0C:15:6E:E4:D5:57:34
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019D80AB8FDA14A024B3F11865F5895729CC
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/y80B_uuM_hGD_Q988wwVbuTVVzQ.asa
Signing time:             Sun 12 Apr 2026 07:50:20 +0000
ASPA not before:          Sun 12 Apr 2026 07:50:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201371
Providers:                AS: 24381
                          AS: 34927
                          AS: 44324
                          AS: 53808
                          AS: 140961
                          AS: 203168
                          AS: 207841
                          AS: 212895
                          AS: 214933
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:80:ab:8f:da:14:a0:24:b3:f1:18:65:f5:89:57:29:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Apr 12 07:50:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cbcd01feeb8cfe1183fd0f7cf30c156ee4d55734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:9e:9f:54:7a:99:41:22:82:bd:ed:ea:e4:
                    b2:c1:35:db:a2:c9:1c:d7:e2:07:26:1b:34:d4:43:
                    3b:31:3a:73:67:e8:a5:1e:4d:b8:c7:54:d3:03:02:
                    cf:81:c7:d9:0d:55:24:66:00:5b:5b:c9:60:4b:bc:
                    0d:11:e6:21:c3:ba:dc:e4:92:f1:e1:89:dc:e0:69:
                    b8:50:36:17:e1:c8:2f:36:0f:30:d5:cd:31:56:7b:
                    19:61:7a:99:7d:86:e7:70:29:38:ad:3c:9f:2f:02:
                    c3:c1:c8:21:3d:3e:eb:09:0f:34:45:46:92:9d:fd:
                    40:f2:12:70:b3:8c:12:6d:9b:1f:09:41:bf:c4:d2:
                    7a:4f:7a:1d:22:3b:13:ce:78:f5:fb:50:44:f6:03:
                    f6:6e:5a:ff:5f:ea:22:13:f6:ac:85:d8:b1:4c:a5:
                    32:ba:54:ec:a8:dd:c7:03:0c:d6:4c:18:12:0c:c4:
                    48:15:93:bb:9b:08:3c:82:f2:01:1d:3b:a4:63:ae:
                    2e:b3:08:da:c7:d0:5b:3f:9c:69:74:5a:f8:9e:d1:
                    08:7a:f3:28:05:0c:6b:67:24:82:72:3b:4a:33:2b:
                    86:51:e6:1a:a0:9f:71:35:96:6e:08:57:cc:e2:bb:
                    d5:ef:e1:03:e2:ab:92:e1:c8:80:d7:ed:4c:55:6f:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:01:FE:EB:8C:FE:11:83:FD:0F:7C:F3:0C:15:6E:E4:D5:57:34
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/y80B_uuM_hGD_Q988wwVbuTVVzQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201371

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:21:26:e1:0b:b8:99:2b:e8:a4:a3:4f:63:18:57:60:ef:
         e6:c2:ef:4c:d5:0a:30:33:23:df:b4:0e:67:05:59:ca:7f:26:
         70:e0:47:b0:e4:0c:f4:ff:83:a9:a4:f7:7b:39:49:7a:45:81:
         4d:36:ee:b2:46:cc:88:15:c8:34:4a:22:1e:fd:2e:f5:69:56:
         4b:ec:4f:4b:8e:5e:47:72:53:c3:33:19:03:05:9c:24:bb:47:
         4e:40:1d:70:9d:ff:34:f0:80:6c:51:90:73:90:bb:19:10:17:
         9e:f0:1b:4a:02:a3:85:c1:01:fa:62:0c:26:3b:61:1d:f2:c9:
         a3:15:74:1a:41:57:7a:cf:00:b0:40:f3:26:d8:6d:12:cd:14:
         91:76:dc:72:69:af:2b:3f:af:bd:14:74:b6:53:4d:b7:3a:87:
         0b:4f:ea:26:58:fc:51:39:8e:82:a5:68:64:e0:73:5a:8f:6a:
         3c:27:49:5a:24:37:32:c4:49:8c:64:29:5a:6b:3b:b9:d3:b4:
         74:f9:95:c9:21:82:e6:ed:e0:c1:f3:da:b2:ec:11:1d:bc:2e:
         fb:a3:b8:96:26:d0:17:e5:25:68:99:5d:5a:69:3c:87:98:a7:
         bb:1f:2b:d9:4d:9e:32:cf:dd:81:c3:9b:a5:e8:95:ca:06:c8:
         92:7a:20:f4
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ2Aq4/aFKAks/EYZfWJVynMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYmUzMDlkZDZhNTMyMTljZWJkNTY1YmUxZjIzNGI5M2U1
NjJlMzkwHhcNMjYwNDEyMDc1MDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmNkMDFmZWViOGNmZTExODNmZDBmN2NmMzBjMTU2ZWU0ZDU1NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6en1R6mUEigr3t6uSywTXboskc
1+IHJhs01EM7MTpzZ+ilHk24x1TTAwLPgcfZDVUkZgBbW8lgS7wNEeYhw7rc5JLx
4Ync4Gm4UDYX4cgvNg8w1c0xVnsZYXqZfYbncCk4rTyfLwLDwcghPT7rCQ80RUaS
nf1A8hJws4wSbZsfCUG/xNJ6T3odIjsTznj1+1BE9gP2blr/X+oiE/ashdixTKUy
ulTsqN3HAwzWTBgSDMRIFZO7mwg8gvIBHTukY64uswjax9BbP5xpdFr4ntEIevMo
BQxrZySCcjtKMyuGUeYaoJ9xNZZuCFfM4rvV7+ED4quS4ciA1+1MVW/wYwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMvNAf7rjP4Rg/0PfPMMFW7k1Vc0MB8GA1UdIwQY
MBaAFLy+MJ3WpTIZzr1WW+HyNLk+Vi45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmIt
M2QzYmJjNWRiNTQzLzEveTgwQl91dU1faEdEX1E5ODh3d1ZidVRWVnpRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmItM2QzYmJjNWRiNTQz
LzEvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSmzANBgkqhkiG
9w0BAQsFAAOCAQEAohAhJuELuJkr6KSjT2MYV2Dv5sLvTNUKMDMj37QOZwVZyn8m
cOBHsOQM9P+DqaT3ezlJekWBTTbuskbMiBXINEoiHv0u9WlWS+xPS45eR3JTwzMZ
AwWcJLtHTkAdcJ3/NPCAbFGQc5C7GRAXnvAbSgKjhcEB+mIMJjthHfLJoxV0GkFX
es8AsEDzJthtEs0UkXbccmmvKz+vvRR0tlNNtzqHC0/qJlj8UTmOgqVoZOBzWo9q
PCdJWiQ3MsRJjGQpWms7udO0dPmVySGC5u3gwfPasuwRHbwu+6O4libQF+UlaJld
Wmk8h5inux8r2U2eMs/dgcObpeiVygbIknog9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:21 2026 by rpki-client