Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/hYcOltYQ3coRzHfHtwK1cUy8X-c.asa
File:                     hYcOltYQ3coRzHfHtwK1cUy8X-c.asa (raw, json)
Hash identifier:          GLuGjxVic7tB9lRTvZboOAKtaGC1m0nPNnwMd0FZxG0=
Subject key identifier:   85:87:0E:96:D6:10:DD:CA:11:CC:77:C7:B7:02:B5:71:4C:BC:5F:E7
Certificate issuer:       /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial:       019D3E7A074804174F5753C8900256D6C4D2
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/hYcOltYQ3coRzHfHtwK1cUy8X-c.asa
Signing time:             Mon 30 Mar 2026 11:21:17 +0000
ASPA not before:          Mon 30 Mar 2026 11:21:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208510
Providers:                AS: 49192
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3e:7a:07:48:04:17:4f:57:53:c8:90:02:56:d6:c4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
        Validity
            Not Before: Mar 30 11:21:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=85870e96d610ddca11cc77c7b702b5714cbc5fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:fc:fa:00:4d:59:1e:de:c2:07:b8:ba:9f:
                    da:e3:7d:31:c2:41:38:04:50:fe:80:2f:2e:3b:35:
                    16:49:ee:c8:0a:e9:78:37:ac:13:e9:53:e9:66:12:
                    2d:70:79:f1:d0:e5:6c:e8:55:db:17:f1:d3:c8:af:
                    d4:34:8d:61:5e:8f:4f:c7:06:1e:8c:83:60:1b:c0:
                    a8:9e:b7:3d:73:26:af:29:cd:6d:5b:59:44:3e:42:
                    83:98:85:4a:5d:66:69:94:96:95:86:dc:ad:e4:fa:
                    87:96:34:f1:0a:9f:37:19:c3:3a:ed:39:64:dd:2e:
                    f4:32:e9:d6:0e:31:8a:95:c3:a9:4f:e6:8b:b3:77:
                    bc:43:d8:4e:8b:db:4e:26:1b:8d:fd:75:b5:b4:d9:
                    84:91:de:73:fc:fd:21:54:72:36:4c:44:01:0f:27:
                    a3:fb:2c:ff:fa:4e:48:a2:0a:61:19:4c:18:90:a6:
                    30:b4:99:88:bd:24:bb:fa:ed:ac:ca:68:1e:a4:18:
                    aa:fd:59:a3:ad:02:37:66:24:ab:69:d1:95:d5:09:
                    10:16:a5:9e:c7:4b:72:76:b6:92:ab:95:64:84:1d:
                    3f:96:27:7e:34:72:3b:7b:d1:ac:d0:cf:9f:96:9f:
                    69:21:1a:aa:9a:08:fc:a1:07:48:71:f9:fd:15:a6:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:87:0E:96:D6:10:DD:CA:11:CC:77:C7:B7:02:B5:71:4C:BC:5F:E7
            X509v3 Authority Key Identifier:
                keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/hYcOltYQ3coRzHfHtwK1cUy8X-c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208510

    Signature Algorithm: sha256WithRSAEncryption
         c6:be:c4:d0:56:2b:9e:ad:c8:52:11:47:54:45:d4:01:37:b7:
         8f:57:21:09:17:0b:ac:c4:9f:52:ec:93:47:c2:0c:ce:24:df:
         ce:8b:9c:7a:74:9a:22:92:23:c7:90:e5:da:ff:f2:f3:7b:ad:
         20:20:1d:82:fc:12:a7:5c:b9:8f:b0:46:2e:f9:85:18:e7:a2:
         4e:ba:8e:f2:cb:bd:58:8c:db:3e:4f:db:0d:33:cd:3c:62:91:
         7e:0d:fd:22:7c:5e:75:46:cd:80:a0:63:db:b4:9d:09:e7:80:
         6d:15:42:03:65:7d:9e:72:7e:21:2c:91:f9:7b:bf:bb:a8:fc:
         73:bb:70:87:ac:aa:e9:ac:46:b8:7c:03:fc:aa:a9:8b:74:03:
         c6:31:3a:1b:bf:2b:04:ac:a1:cf:d7:0f:47:ea:93:53:0d:a4:
         d2:08:45:18:88:e7:05:59:85:c1:8f:53:d4:e5:07:48:46:64:
         87:bb:7b:8f:d6:fd:7e:5e:b8:f6:92:f2:1b:0a:3d:2d:b6:b1:
         08:53:79:6a:89:51:83:9d:2c:c7:54:8b:1a:0c:4f:45:d6:87:
         3e:80:fe:5a:c4:7f:b8:e6:99:f5:11:1d:93:fe:ab:f9:12:df:
         4d:38:52:63:53:0d:11:ca:ac:19:fb:3b:d0:60:89:c1:bb:bf:
         fe:e6:bd:38
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0+egdIBBdPV1PIkAJW1sTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGNhM2IwZGM0ZjBkOTc1YWUwZmE4MzI3NDk2ZjRiMGNl
NDU2ZGUwHhcNMjYwMzMwMTEyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTg3MGU5NmQ2MTBkZGNhMTFjYzc3YzdiNzAyYjU3MTRjYmM1ZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytH8+gBNWR7ewge4up/a430xwkE4
BFD+gC8uOzUWSe7ICul4N6wT6VPpZhItcHnx0OVs6FXbF/HTyK/UNI1hXo9PxwYe
jINgG8Conrc9cyavKc1tW1lEPkKDmIVKXWZplJaVhtyt5PqHljTxCp83GcM67Tlk
3S70MunWDjGKlcOpT+aLs3e8Q9hOi9tOJhuN/XW1tNmEkd5z/P0hVHI2TEQBDyej
+yz/+k5IogphGUwYkKYwtJmIvSS7+u2symgepBiq/VmjrQI3ZiSradGV1QkQFqWe
x0tydraSq5VkhB0/lid+NHI7e9Gs0M+flp9pIRqqmgj8oQdIcfn9FaYk9QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIWHDpbWEN3KEcx3x7cCtXFMvF/nMB8GA1UdIwQY
MBaAFO6Mo7DcTw2XWuD6gydJb0sM5FbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN295anNOeFBEWmRhNFBxREowbHZTd3prVnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZWUyMzgtNmMyOC00NWU4LWE4OTgt
ODIzYzE4NTU5ZDUzLzEvaFljT2x0WVEzY29SekhmSHR3SzFjVXk4WC1jLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZWUyMzgtNmMyOC00NWU4LWE4OTgtODIzYzE4NTU5ZDUz
LzEvN295anNOeFBEWmRhNFBxREowbHZTd3prVnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMufjANBgkqhkiG
9w0BAQsFAAOCAQEAxr7E0FYrnq3IUhFHVEXUATe3j1chCRcLrMSfUuyTR8IMziTf
zoucenSaIpIjx5Dl2v/y83utICAdgvwSp1y5j7BGLvmFGOeiTrqO8su9WIzbPk/b
DTPNPGKRfg39InxedUbNgKBj27SdCeeAbRVCA2V9nnJ+ISyR+Xu/u6j8c7twh6yq
6axGuHwD/Kqpi3QDxjE6G78rBKyhz9cPR+qTUw2k0ghFGIjnBVmFwY9T1OUHSEZk
h7t7j9b9fl649pLyGwo9LbaxCFN5aolRg50sx1SLGgxPRdaHPoD+WsR/uOaZ9REd
k/6r+RLfTThSY1MNEcqsGfs70GCJwbu//ua9OA==
-----END CERTIFICATE-----