Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/qgrQCVmykbnCGorMw6L6atIBXLU.asa
File:                     qgrQCVmykbnCGorMw6L6atIBXLU.asa (raw, json)
Hash identifier:          sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=
Subject key identifier:   AA:0A:D0:09:59:B2:91:B9:C2:1A:8A:CC:C3:A2:FA:6A:D2:01:5C:B5
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019EB0437570624AD78EB25FF778A7673330
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/qgrQCVmykbnCGorMw6L6atIBXLU.asa
Signing time:             Wed 10 Jun 2026 06:41:11 +0000
ASPA not before:          Wed 10 Jun 2026 06:41:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199674
Providers:                AS: 34872
                          AS: 202409
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b0:43:75:70:62:4a:d7:8e:b2:5f:f7:78:a7:67:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Jun 10 06:41:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa0ad00959b291b9c21a8accc3a2fa6ad2015cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:e5:3d:66:44:9c:cd:5c:00:5f:34:cd:93:
                    d2:b6:e7:61:9c:85:7e:81:7b:ec:ee:e9:49:31:b9:
                    44:f2:e4:31:25:4b:69:3b:ef:69:72:9d:c6:e1:98:
                    f5:54:69:92:1f:3c:c0:8d:ce:df:a4:48:54:9e:bb:
                    2c:cc:93:9a:cb:35:83:ea:3f:b0:e8:7a:12:06:e3:
                    a5:a3:5e:35:61:e5:65:25:89:6a:34:8b:3f:cb:84:
                    88:46:26:cc:99:ee:16:aa:92:72:b0:73:3b:e0:36:
                    d7:57:58:fc:1d:fa:7e:79:ef:76:ae:86:1e:7b:fd:
                    82:01:35:44:a6:bc:82:8e:5d:d7:8d:5a:90:bc:8f:
                    da:5a:56:f5:7e:24:27:84:56:02:56:10:c8:19:1c:
                    fb:fd:9c:27:9a:20:3c:df:36:4b:4d:14:5f:b5:f0:
                    26:9e:40:fe:45:d9:e1:a4:7c:50:39:75:83:9c:d4:
                    94:ef:e1:b9:e4:43:c7:86:0d:e9:eb:62:23:dd:1f:
                    6d:fd:0c:39:c5:7b:d6:85:92:06:da:fe:e1:14:f2:
                    3d:b3:6c:a9:5c:55:31:24:12:aa:c4:00:31:7e:7f:
                    44:3d:4b:e8:05:dd:fb:db:c7:85:ca:02:c4:1f:d2:
                    ca:c0:85:c9:28:0e:85:ff:32:4b:39:d7:00:e8:51:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:D0:09:59:B2:91:B9:C2:1A:8A:CC:C3:A2:FA:6A:D2:01:5C:B5
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/qgrQCVmykbnCGorMw6L6atIBXLU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199674

    Signature Algorithm: sha256WithRSAEncryption
         35:78:77:4a:58:dd:75:06:88:60:21:a0:e9:ac:c6:1e:cd:22:
         9f:f6:93:6e:12:35:63:f5:0e:75:ac:d1:4d:14:cf:6f:bf:9a:
         86:92:be:a6:c2:63:05:2c:68:2e:4e:e3:33:75:58:cc:43:ee:
         a8:05:4d:ed:a1:56:4f:fa:3f:97:43:ec:d4:5d:99:2d:6b:7b:
         1a:6c:17:ee:40:2f:d9:3c:80:c2:4a:66:01:40:ea:f7:a9:ff:
         50:57:d3:50:3f:88:2e:86:99:cc:ed:45:a9:e1:ee:e8:cf:a5:
         5d:79:43:c1:fb:70:2c:b1:06:c3:10:0d:06:94:61:4d:69:4a:
         80:6b:51:89:2c:45:cf:25:ed:30:ac:e0:4c:22:5a:64:e7:5d:
         f8:be:47:d0:bf:7a:cd:36:dd:1a:9f:7c:59:3a:39:d1:c5:e4:
         84:89:d4:b4:6b:b3:47:09:9c:84:3d:e5:83:d8:b0:57:12:51:
         13:d4:61:12:59:02:ab:47:18:f1:5a:55:51:a0:8d:97:82:43:
         74:73:92:8b:03:10:40:b5:d6:60:b0:29:e8:8d:14:46:c3:d7:
         9f:30:c7:49:5c:ff:f8:70:0b:0a:ec:60:aa:de:b2:e2:3a:30:
         1e:e5:40:bb:aa:40:7e:ef:55:cf:5e:d0:7f:70:77:67:78:89:
         b6:20:f0:77
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6wQ3VwYkrXjrJf93inZzMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTM4NDhjMGNmOTA0NjhkMDdkNjk5ZjcxNGM3ZmQ3NDhh
MTMyNjkwHhcNMjYwNjEwMDY0MTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBhZDAwOTU5YjI5MWI5YzIxYThhY2NjM2EyZmE2YWQyMDE1Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP3lPWZEnM1cAF80zZPStudhnIV+
gXvs7ulJMblE8uQxJUtpO+9pcp3G4Zj1VGmSHzzAjc7fpEhUnrsszJOayzWD6j+w
6HoSBuOlo141YeVlJYlqNIs/y4SIRibMme4WqpJysHM74DbXV1j8Hfp+ee92roYe
e/2CATVEpryCjl3XjVqQvI/aWlb1fiQnhFYCVhDIGRz7/ZwnmiA83zZLTRRftfAm
nkD+RdnhpHxQOXWDnNSU7+G55EPHhg3p62Ij3R9t/Qw5xXvWhZIG2v7hFPI9s2yp
XFUxJBKqxAAxfn9EPUvoBd3728eFygLEH9LKwIXJKA6F/zJLOdcA6FHYGwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKoK0AlZspG5whqKzMOi+mrSAVy1MB8GA1UdIwQY
MBaAFHEThIwM+QRo0H1pn3FMf9dIoTJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQt
MjZhY2NiN2VmZDdmLzEvcWdyUUNWbXlrYm5DR29yTXc2TDZhdElCWExVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQtMjZhY2NiN2VmZDdm
LzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwML+jANBgkqhkiG
9w0BAQsFAAOCAQEANXh3SljddQaIYCGg6azGHs0in/aTbhI1Y/UOdazRTRTPb7+a
hpK+psJjBSxoLk7jM3VYzEPuqAVN7aFWT/o/l0Ps1F2ZLWt7GmwX7kAv2TyAwkpm
AUDq96n/UFfTUD+ILoaZzO1FqeHu6M+lXXlDwftwLLEGwxANBpRhTWlKgGtRiSxF
zyXtMKzgTCJaZOdd+L5H0L96zTbdGp98WTo50cXkhInUtGuzRwmchD3lg9iwVxJR
E9RhElkCq0cY8VpVUaCNl4JDdHOSiwMQQLXWYLAp6I0URsPXnzDHSVz/+HALCuxg
qt6y4jowHuVAu6pAfu9Vz17Qf3B3Z3iJtiDwdw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:23 2026 by rpki-client