Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/wywENrgV9cTNnEJt2kyjfxZDgWw.asa
File:                     wywENrgV9cTNnEJt2kyjfxZDgWw.asa (raw, json)
Hash identifier:          +Yfj1V4ldVnWd67CebIjZgHqSDXzdBkKkOBcRyvVlgk=
Subject key identifier:   C3:2C:04:36:B8:15:F5:C4:CD:9C:42:6D:DA:4C:A3:7F:16:43:81:6C
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019D76919C469A3F6BB07C961121F9619BF2
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/wywENrgV9cTNnEJt2kyjfxZDgWw.asa
Signing time:             Fri 10 Apr 2026 08:45:47 +0000
ASPA not before:          Fri 10 Apr 2026 08:45:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            16016
Providers:                AS: 3212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:91:9c:46:9a:3f:6b:b0:7c:96:11:21:f9:61:9b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Apr 10 08:45:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c32c0436b815f5c4cd9c426dda4ca37f1643816c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:2c:06:70:c0:2e:94:76:e6:10:08:83:a0:
                    fe:2a:2c:00:81:c8:9f:33:0d:53:d6:8e:e9:e1:51:
                    6f:2b:5c:c6:a7:bd:aa:57:ad:8d:86:cb:24:39:34:
                    86:7f:33:8f:b3:be:ef:10:24:64:02:b5:dd:3d:b2:
                    f9:f6:ab:e0:32:3e:3a:2a:bc:c3:ec:09:4f:33:1f:
                    1d:85:35:8a:ae:3b:9c:86:19:50:90:5b:82:35:6c:
                    7b:0c:96:ab:c5:24:37:1e:85:36:77:7f:d3:8a:3c:
                    62:e4:ee:8f:3a:ec:b0:73:e3:7a:83:eb:49:1b:2c:
                    dc:90:b7:b5:87:3c:be:9e:76:97:66:1f:41:1d:eb:
                    ee:23:90:b2:7a:ee:57:f1:fd:d8:ed:d4:3e:39:b0:
                    2d:2c:82:b3:e4:25:bb:00:67:fc:33:45:62:eb:45:
                    7a:01:54:14:64:47:6d:20:56:28:e3:fc:5b:fe:17:
                    d5:71:f8:00:1e:f1:c5:3f:47:7d:c9:11:ba:4f:6a:
                    ff:fa:e9:31:f4:42:20:56:b2:53:19:e8:83:f4:09:
                    9c:2b:44:72:64:30:37:e4:8b:83:ae:5a:99:24:01:
                    2a:0b:fa:30:26:c5:ce:9d:f8:da:98:6e:b8:38:26:
                    71:d1:eb:ea:f4:44:75:1b:42:26:78:a3:40:43:2d:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:04:36:B8:15:F5:C4:CD:9C:42:6D:DA:4C:A3:7F:16:43:81:6C
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/wywENrgV9cTNnEJt2kyjfxZDgWw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16016

    Signature Algorithm: sha256WithRSAEncryption
         51:06:b2:c8:a6:49:be:13:60:e6:fc:78:98:1f:fc:8b:08:ff:
         aa:95:9a:a4:ad:5c:ef:7c:f7:c9:5e:d5:af:62:73:c2:6e:69:
         55:15:cd:8a:3c:38:ae:8b:ac:2d:b5:87:6d:ee:14:d4:16:cb:
         73:00:dc:f2:90:f8:51:4e:5e:67:b4:d2:90:08:f8:79:f9:d6:
         c3:bf:6c:fe:54:85:21:94:36:db:02:da:70:96:35:39:68:f8:
         1f:97:af:34:c2:54:a2:50:27:ce:4e:9b:26:2e:06:19:7d:1f:
         64:ba:31:2f:50:2b:dd:52:68:fc:fa:e7:45:92:d7:e7:2a:b9:
         c1:3c:07:c7:de:6c:f0:c9:d4:a8:d7:f6:0c:07:56:54:b7:5b:
         d0:bb:3a:78:cd:6c:10:bb:d6:d4:72:9e:e6:0c:1a:42:89:67:
         65:c6:b0:de:40:1d:ec:ca:fe:72:2c:aa:e8:6a:4f:0a:54:c0:
         e5:3d:a8:d9:78:e7:e4:86:44:b7:02:51:d6:3d:38:d1:ea:c4:
         26:5d:bf:74:82:a0:27:4c:f1:28:44:f3:2a:08:8a:ba:50:53:
         1c:60:1d:24:a6:30:03:59:e3:1d:31:8c:31:d8:7a:83:14:c1:
         1b:b4:95:8c:15:ea:1e:00:52:b0:de:ce:ff:da:d3:c1:b3:ae:
         4e:0a:44:aa
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ12kZxGmj9rsHyWESH5YZvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjlhMjRiZDI2Y2M4MjE3NTE4YTExZjU5OGU2MzcyMDI1
ZThhZTkwHhcNMjYwNDEwMDg0NTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzJjMDQzNmI4MTVmNWM0Y2Q5YzQyNmRkYTRjYTM3ZjE2NDM4MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/8sBnDALpR25hAIg6D+KiwAgcif
Mw1T1o7p4VFvK1zGp72qV62NhsskOTSGfzOPs77vECRkArXdPbL59qvgMj46KrzD
7AlPMx8dhTWKrjuchhlQkFuCNWx7DJarxSQ3HoU2d3/Tijxi5O6POuywc+N6g+tJ
GyzckLe1hzy+nnaXZh9BHevuI5Cyeu5X8f3Y7dQ+ObAtLIKz5CW7AGf8M0Vi60V6
AVQUZEdtIFYo4/xb/hfVcfgAHvHFP0d9yRG6T2r/+ukx9EIgVrJTGeiD9AmcK0Ry
ZDA35IuDrlqZJAEqC/owJsXOnfjamG64OCZx0evq9ER1G0ImeKNAQy24/wIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFMMsBDa4FfXEzZxCbdpMo38WQ4FsMB8GA1UdIwQY
MBaAFID5okvSbMghdRihH1mOY3ICXorpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODkt
OTY1NTI5ZjIwZDExLzEvd3l3RU5yZ1Y5Y1RObkVKdDJreWpmeFpEZ1d3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODktOTY1NTI5ZjIwZDEx
LzEvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj6QMA0GCSqGSIb3
DQEBCwUAA4IBAQBRBrLIpkm+E2Dm/HiYH/yLCP+qlZqkrVzvfPfJXtWvYnPCbmlV
Fc2KPDiui6wttYdt7hTUFstzANzykPhRTl5ntNKQCPh5+dbDv2z+VIUhlDbbAtpw
ljU5aPgfl680wlSiUCfOTpsmLgYZfR9kujEvUCvdUmj8+udFktfnKrnBPAfH3mzw
ydSo1/YMB1ZUt1vQuzp4zWwQu9bUcp7mDBpCiWdlxrDeQB3syv5yLKroak8KVMDl
PajZeOfkhkS3AlHWPTjR6sQmXb90gqAnTPEoRPMqCIq6UFMcYB0kpjADWeMdMYwx
2HqDFMEbtJWMFeoeAFKw3s7/2tPBs65OCkSq
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:28:32 2026 by rpki-client