Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa
File:                     XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa (raw, json)
Hash identifier:          zqWFt0kHjs9uY0vdqEIk0IdTor9HMxLABVos3H7Y+8c=
Subject key identifier:   5E:C6:13:A3:F8:06:C6:FB:08:61:0D:D0:8C:57:3B:B5:91:9B:C5:95
Certificate issuer:       /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial:       019D545147315AF9ECC354FD9A213C5B75C3
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa
Signing time:             Fri 03 Apr 2026 17:08:25 +0000
ASPA not before:          Fri 03 Apr 2026 17:08:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204092
Providers:                AS: 20766
                          AS: 30781
                          AS: 34019
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:54:51:47:31:5a:f9:ec:c3:54:fd:9a:21:3c:5b:75:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
        Validity
            Not Before: Apr  3 17:08:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ec613a3f806c6fb08610dd08c573bb5919bc595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:23:cd:5d:21:0c:c5:8d:8d:7f:39:92:1d:
                    3c:e0:29:87:b5:09:6b:5b:36:7e:e8:a3:fe:07:48:
                    ce:6a:a2:a1:0d:9c:5f:9c:ff:93:fb:53:de:2e:c1:
                    70:80:4f:17:ef:26:14:53:34:33:3e:ab:44:18:42:
                    c5:ba:af:65:f7:a6:09:d2:54:76:a8:6c:43:89:72:
                    6a:2f:7c:ad:6e:8d:ce:95:6b:1a:2d:85:64:5e:6c:
                    cd:d0:0d:6f:4b:74:2e:06:05:0c:60:d0:8d:db:40:
                    2d:03:44:c2:6b:0a:65:d0:23:e0:c8:26:a9:80:83:
                    1f:02:31:6a:4f:cc:45:3b:81:0d:4c:db:c8:aa:a9:
                    19:29:3d:7b:a3:12:27:bb:f8:15:ef:b1:48:a5:f9:
                    ea:36:bb:43:f6:a4:76:21:43:17:fd:ce:1e:17:d7:
                    b1:e0:81:ec:fd:c8:da:ed:1a:64:b6:74:96:92:10:
                    2c:77:65:57:1a:52:5a:4a:50:65:7e:29:6b:03:fb:
                    6f:35:7f:d7:8b:4a:31:2c:c3:2b:66:ee:0b:c3:e7:
                    64:79:79:c7:cc:97:1a:09:a3:7a:d2:b8:5c:18:be:
                    d1:a0:4d:e8:17:7a:3e:55:f3:35:49:7d:4c:22:be:
                    21:d8:3c:11:fc:ff:c7:62:d1:2f:68:63:3c:89:1a:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C6:13:A3:F8:06:C6:FB:08:61:0D:D0:8C:57:3B:B5:91:9B:C5:95
            X509v3 Authority Key Identifier:
                keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/XsYTo_gGxvsIYQ3QjFc7tZGbxZU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204092

    Signature Algorithm: sha256WithRSAEncryption
         6b:2d:2e:f5:b8:79:83:3d:c3:d3:dc:ff:42:bb:28:55:e0:e5:
         dd:ab:2f:66:ff:60:d6:44:06:b2:dd:05:02:b5:00:4b:c8:ca:
         d7:c6:9a:f1:67:48:77:87:43:fc:7a:51:f8:e1:50:87:d6:ea:
         95:27:64:30:52:58:ce:83:85:18:1a:5f:11:dc:48:2d:a2:a3:
         a6:a7:79:2f:9a:66:57:64:46:f5:8e:7d:6e:ed:68:9a:41:e3:
         3d:99:82:c9:71:ba:4b:6d:0c:c8:91:96:5c:01:3e:3d:e2:73:
         aa:1d:bc:d0:ee:aa:7d:2b:c7:5f:c5:a7:af:29:ea:7a:0b:be:
         64:be:7f:1c:91:c8:71:9a:5e:8c:87:8f:55:aa:60:f9:80:cb:
         b4:26:e4:93:75:7b:ba:f1:da:29:c2:6f:36:03:7e:51:73:7a:
         9b:62:78:3e:66:5c:b2:0b:70:7e:84:d8:a8:0f:6a:77:83:3b:
         4a:3a:4e:67:03:94:ac:fc:57:93:9f:99:13:62:c2:b1:5b:1c:
         fb:8b:fc:1b:65:e7:09:c9:e0:c9:15:8d:4f:ea:20:e6:97:d9:
         3c:a5:b9:87:43:81:e5:47:c9:ed:86:90:c5:21:d1:54:36:a5:
         4b:12:b4:3a:b0:48:50:88:60:10:82:00:56:5c:5c:9d:61:7a:
         f3:02:9e:ae
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1UUUcxWvnsw1T9miE8W3XDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2RhOTAyNTFjMjJiNWJhNThjMGJhMjhiYTA0OTBiOWQ2
ZDQyMDUwHhcNMjYwNDAzMTcwODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWM2MTNhM2Y4MDZjNmZiMDg2MTBkZDA4YzU3M2JiNTkxOWJjNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB0jzV0hDMWNjX85kh084CmHtQlr
WzZ+6KP+B0jOaqKhDZxfnP+T+1PeLsFwgE8X7yYUUzQzPqtEGELFuq9l96YJ0lR2
qGxDiXJqL3ytbo3OlWsaLYVkXmzN0A1vS3QuBgUMYNCN20AtA0TCawpl0CPgyCap
gIMfAjFqT8xFO4ENTNvIqqkZKT17oxInu/gV77FIpfnqNrtD9qR2IUMX/c4eF9ex
4IHs/cja7RpktnSWkhAsd2VXGlJaSlBlfilrA/tvNX/Xi0oxLMMrZu4Lw+dkeXnH
zJcaCaN60rhcGL7RoE3oF3o+VfM1SX1MIr4h2DwR/P/HYtEvaGM8iRpqIQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF7GE6P4Bsb7CGEN0IxXO7WRm8WVMB8GA1UdIwQY
MBaAFFl9qQJRwitbpYwLoougSQudbUIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMt
ZTE3YmU4MmY0M2NjLzEvWHNZVG9fZ0d4dnNJWVEzUWpGYzd0WkdieFpVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMtZTE3YmU4MmY0M2Nj
LzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdPDANBgkqhkiG
9w0BAQsFAAOCAQEAay0u9bh5gz3D09z/QrsoVeDl3asvZv9g1kQGst0FArUAS8jK
18aa8WdId4dD/HpR+OFQh9bqlSdkMFJYzoOFGBpfEdxILaKjpqd5L5pmV2RG9Y59
bu1omkHjPZmCyXG6S20MyJGWXAE+PeJzqh280O6qfSvHX8Wnrynqegu+ZL5/HJHI
cZpejIePVapg+YDLtCbkk3V7uvHaKcJvNgN+UXN6m2J4PmZcsgtwfoTYqA9qd4M7
SjpOZwOUrPxXk5+ZE2LCsVsc+4v8G2XnCcngyRWNT+og5pfZPKW5h0OB5UfJ7YaQ
xSHRVDalSxK0OrBIUIhgEIIAVlxcnWF68wKerg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:51 2026 by rpki-client