Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/DDJwtFmm8kn6cZxHckqfLF7eCLo.asa
File:                     DDJwtFmm8kn6cZxHckqfLF7eCLo.asa (raw, json)
Hash identifier:          Yvb1SWAHrRXt2hx96BcMIcdwwEMJ7H1WT0MPBJI3EnA=
Subject key identifier:   0C:32:70:B4:59:A6:F2:49:FA:71:9C:47:72:4A:9F:2C:5E:DE:08:BA
Certificate issuer:       /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial:       019FA56DA580C13663B6BE209559B8537C77
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/DDJwtFmm8kn6cZxHckqfLF7eCLo.asa
Signing time:             Mon 27 Jul 2026 21:14:14 +0000
ASPA not before:          Mon 27 Jul 2026 21:14:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219240
Providers:                AS: 34872
                          AS: 35661
                          AS: 40994
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a5:6d:a5:80:c1:36:63:b6:be:20:95:59:b8:53:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
        Validity
            Not Before: Jul 27 21:14:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c3270b459a6f249fa719c47724a9f2c5ede08ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:89:9d:5c:ba:30:89:90:00:1b:aa:88:f7:
                    dd:99:13:0e:88:60:77:f4:89:96:46:cb:22:3e:84:
                    95:5d:7e:70:25:8c:9e:a8:75:50:b7:3d:15:99:0e:
                    98:6a:5d:d1:df:0e:af:38:38:3c:75:7e:d4:56:fe:
                    b2:7f:26:07:64:c6:b1:11:99:cf:a0:1b:89:57:1d:
                    01:da:08:a6:45:ab:bd:3c:88:00:8a:c1:34:df:bf:
                    ea:93:6d:eb:82:97:91:44:b9:7d:d1:e0:27:24:7d:
                    1c:bb:d5:b5:c9:2e:2c:38:5b:15:24:90:2c:a6:3a:
                    29:ae:2f:19:1f:75:7a:f9:d9:76:31:3f:af:c0:ab:
                    19:f0:76:9b:ee:df:d1:22:58:24:72:a7:9a:bb:c7:
                    0c:f9:45:fb:c7:a7:53:ae:e5:c1:c8:01:b2:16:6b:
                    e2:5d:22:5d:88:1a:2c:e8:9a:a7:87:f5:98:85:8f:
                    19:57:72:9c:78:4b:9a:c6:d0:05:4c:d6:75:16:9c:
                    38:66:9f:c8:6e:5f:44:57:00:99:b9:79:05:31:fb:
                    56:01:9e:40:fa:24:b7:51:4e:96:9b:88:65:40:65:
                    42:43:8c:f9:40:e6:34:08:59:04:ef:9f:f6:dd:4f:
                    8c:18:53:19:8d:5a:13:5b:bd:0f:11:a6:56:d6:b4:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:70:B4:59:A6:F2:49:FA:71:9C:47:72:4A:9F:2C:5E:DE:08:BA
            X509v3 Authority Key Identifier:
                keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/DDJwtFmm8kn6cZxHckqfLF7eCLo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219240

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:ac:75:77:40:7a:8d:c6:8b:13:7a:7c:a9:fd:ef:db:2a:
         06:53:5e:b7:23:25:25:07:d9:84:93:58:2e:6d:34:38:96:b5:
         b8:79:e0:51:6a:f6:49:f6:f4:89:52:be:23:e1:e6:51:e5:a5:
         1b:8c:f6:95:e8:28:fc:86:e8:54:b5:db:e1:fc:e5:48:54:74:
         b1:b2:1b:d7:50:95:37:2a:d2:65:df:a5:9e:a8:7d:2c:fc:36:
         6c:79:80:d1:e5:39:47:9e:9e:24:36:69:ae:33:cb:b5:44:c6:
         be:69:8a:ea:ea:03:8a:be:86:f8:71:a8:78:f3:41:d6:7a:2d:
         8f:e3:dd:a8:e4:32:d0:47:5f:10:b6:4c:6c:7e:3d:db:c0:55:
         24:3d:bd:f7:af:e4:56:c6:de:8b:04:31:bb:a0:98:27:1e:00:
         d3:5b:83:60:95:68:77:05:97:47:61:7a:5e:38:51:60:b8:6b:
         34:a7:57:ec:65:b3:fd:30:ed:b0:63:b4:59:26:d3:db:2e:52:
         15:ff:18:7b:ed:44:90:2d:91:e4:e6:9d:b7:f6:34:74:11:4f:
         d2:53:19:80:31:29:b7:59:b8:4c:5d:00:a8:d9:fb:85:4b:96:
         8b:8b:e3:21:94:66:86:10:53:11:44:87:c9:29:2d:fd:58:03:
         75:ce:81:ac
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ+lbaWAwTZjtr4glVm4U3x3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZjY5OWNiMGE5ZmUxMDk2ZTZkNjg4YjliMTM2NWIyZDNj
MTQwODEwHhcNMjYwNzI3MjExNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzMyNzBiNDU5YTZmMjQ5ZmE3MTljNDc3MjRhOWYyYzVlZGUwOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4KJnVy6MImQABuqiPfdmRMOiGB3
9ImWRssiPoSVXX5wJYyeqHVQtz0VmQ6Yal3R3w6vODg8dX7UVv6yfyYHZMaxEZnP
oBuJVx0B2gimRau9PIgAisE037/qk23rgpeRRLl90eAnJH0cu9W1yS4sOFsVJJAs
pjopri8ZH3V6+dl2MT+vwKsZ8Hab7t/RIlgkcqeau8cM+UX7x6dTruXByAGyFmvi
XSJdiBos6Jqnh/WYhY8ZV3KceEuaxtAFTNZ1Fpw4Zp/Ibl9EVwCZuXkFMftWAZ5A
+iS3UU6Wm4hlQGVCQ4z5QOY0CFkE75/23U+MGFMZjVoTW70PEaZW1rRqAwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAwycLRZpvJJ+nGcR3JKnyxe3gi6MB8GA1UdIwQY
MBaAFGX2mcsKn+EJbm1oi5sTZbLTwUCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZhWnl3cWY0UWx1YldpTG14TmxzdFBCUUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMjc4MDgtMGJhNy00N2QwLTkwZTUt
OWRmNTlmNDRhM2M1LzEvRERKd3RGbW04a242Y1p4SGNrcWZMRjdlQ0xvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kMjc4MDgtMGJhNy00N2QwLTkwZTUtOWRmNTlmNDRhM2M1
LzEvWmZhWnl3cWY0UWx1YldpTG14TmxzdFBCUUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNYaDANBgkqhkiG
9w0BAQsFAAOCAQEAMMSsdXdAeo3GixN6fKn979sqBlNetyMlJQfZhJNYLm00OJa1
uHngUWr2Sfb0iVK+I+HmUeWlG4z2lego/IboVLXb4fzlSFR0sbIb11CVNyrSZd+l
nqh9LPw2bHmA0eU5R56eJDZprjPLtUTGvmmK6uoDir6G+HGoePNB1notj+PdqOQy
0EdfELZMbH4928BVJD2996/kVsbeiwQxu6CYJx4A01uDYJVodwWXR2F6XjhRYLhr
NKdX7GWz/TDtsGO0WSbT2y5SFf8Ye+1EkC2R5Oadt/Y0dBFP0lMZgDEpt1m4TF0A
qNn7hUuWi4vjIZRmhhBTEUSHySkt/VgDdc6BrA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 12:30:38 2026 by rpki-client