Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/MyskQcDy1iD50lHwlkpWk2pfgJo.asa
File:                     MyskQcDy1iD50lHwlkpWk2pfgJo.asa (raw, json)
Hash identifier:          w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=
Subject key identifier:   33:2B:24:41:C0:F2:D6:20:F9:D2:51:F0:96:4A:56:93:6A:5F:80:9A
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       019C4C748E04915185EC8247A545E706C213
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/MyskQcDy1iD50lHwlkpWk2pfgJo.asa
Signing time:             Wed 11 Feb 2026 11:27:12 +0000
ASPA not before:          Wed 11 Feb 2026 11:27:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208398
Providers:                AS: 174
                          AS: 1299
                          AS: 3491
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:74:8e:04:91:51:85:ec:82:47:a5:45:e7:06:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Feb 11 11:27:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=332b2441c0f2d620f9d251f0964a56936a5f809a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:c6:c3:18:23:ac:08:2f:ea:6b:b0:be:b2:
                    ff:ef:2c:d3:21:d9:cd:41:2c:47:a1:eb:49:0b:0d:
                    a2:9a:4c:eb:e3:f5:4b:a7:b8:f2:f6:64:dd:c6:c6:
                    14:a0:89:28:d5:99:34:42:47:15:c9:81:27:6b:64:
                    0e:05:4d:d9:b3:f8:4f:72:28:b9:af:b3:fa:da:ad:
                    ee:9b:af:24:f3:b6:d7:bc:d2:89:4c:48:af:4e:1d:
                    b4:63:21:ce:30:15:ab:db:ec:c9:35:c4:25:4f:aa:
                    e7:af:a9:d0:50:3e:51:6b:ce:77:79:ee:9a:73:c5:
                    d0:82:2b:c7:06:ba:fd:cf:f5:43:46:3d:7b:12:ca:
                    c3:00:00:c6:dd:b0:4f:49:93:60:df:bb:3a:b7:3e:
                    72:17:78:59:ad:fc:03:ba:04:96:79:10:f6:75:81:
                    a8:d5:f9:05:e3:ca:b6:3a:8e:16:55:17:09:2a:70:
                    00:92:7f:2e:90:90:b5:62:14:5b:20:e3:c4:ed:62:
                    67:b0:52:a8:91:54:60:2a:12:96:ab:46:e1:99:2b:
                    f3:cc:1c:bc:48:37:38:cb:62:6f:35:4b:be:f5:62:
                    7a:99:f6:c5:27:f7:33:be:f4:48:99:dd:ba:8b:2a:
                    b7:d7:72:7f:5c:61:0e:d1:2c:50:90:36:c0:45:80:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:24:41:C0:F2:D6:20:F9:D2:51:F0:96:4A:56:93:6A:5F:80:9A
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/MyskQcDy1iD50lHwlkpWk2pfgJo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208398

    Signature Algorithm: sha256WithRSAEncryption
         65:52:80:08:92:94:ff:f5:8a:84:01:fd:87:16:e4:41:f6:74:
         3c:09:63:fe:aa:72:66:fb:34:5b:e3:e0:d4:b4:37:30:1d:93:
         3a:0f:6c:1b:9c:24:8e:ba:b2:94:b5:8c:89:ba:95:54:46:bb:
         8a:e5:a7:14:bc:ef:55:79:16:4f:4a:c4:ee:bd:92:b2:99:5e:
         03:be:77:b0:ac:7f:99:6e:15:66:5b:1b:7a:35:b7:c8:74:93:
         5b:71:e5:50:5b:4e:42:62:46:6c:85:9a:c5:46:55:43:2b:91:
         04:87:6e:77:9c:3c:5d:a8:0b:b6:48:00:b0:5e:28:e0:ce:68:
         5c:21:cf:47:b0:6d:78:50:41:c9:cd:3f:cd:53:3e:51:7c:b9:
         e4:60:60:3e:8f:57:68:cc:d1:60:d1:b8:96:0d:e4:f3:ee:bc:
         38:81:e3:45:4b:20:7c:cd:b5:f8:67:ce:24:e4:03:ca:da:3a:
         34:f7:d3:91:dd:2b:48:2d:95:8e:d6:81:fd:68:b1:50:41:7f:
         e6:df:5c:0b:b1:ba:63:77:a6:43:3c:8e:9d:ec:9f:07:d4:7b:
         4f:05:bc:dd:81:9a:c6:69:d1:f2:a1:9f:18:3a:8e:d3:70:34:
         76:5f:75:1f:8f:2a:77:33:f2:0f:16:80:a7:1c:e2:e4:bd:55:
         8f:07:28:1c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxMdI4EkVGF7IJHpUXnBsITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2
NGRlMTAwHhcNMjYwMjExMTEyNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzJiMjQ0MWMwZjJkNjIwZjlkMjUxZjA5NjRhNTY5MzZhNWY4MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HnGwxgjrAgv6muwvrL/7yzTIdnN
QSxHoetJCw2imkzr4/VLp7jy9mTdxsYUoIko1Zk0QkcVyYEna2QOBU3Zs/hPcii5
r7P62q3um68k87bXvNKJTEivTh20YyHOMBWr2+zJNcQlT6rnr6nQUD5Ra853ee6a
c8XQgivHBrr9z/VDRj17EsrDAADG3bBPSZNg37s6tz5yF3hZrfwDugSWeRD2dYGo
1fkF48q2Oo4WVRcJKnAAkn8ukJC1YhRbIOPE7WJnsFKokVRgKhKWq0bhmSvzzBy8
SDc4y2JvNUu+9WJ6mfbFJ/czvvRImd26iyq313J/XGEO0SxQkDbARYB6awIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDMrJEHA8tYg+dJR8JZKVpNqX4CaMB8GA1UdIwQY
MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt
MjY3MDFiMTYyZmMzLzEvTXlza1FjRHkxaUQ1MGxId2xrcFdrMnBmZ0pvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz
LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuDjANBgkqhkiG
9w0BAQsFAAOCAQEAZVKACJKU//WKhAH9hxbkQfZ0PAlj/qpyZvs0W+Pg1LQ3MB2T
Og9sG5wkjrqylLWMibqVVEa7iuWnFLzvVXkWT0rE7r2SspleA753sKx/mW4VZlsb
ejW3yHSTW3HlUFtOQmJGbIWaxUZVQyuRBIdud5w8XagLtkgAsF4o4M5oXCHPR7Bt
eFBByc0/zVM+UXy55GBgPo9XaMzRYNG4lg3k8+68OIHjRUsgfM21+GfOJOQDyto6
NPfTkd0rSC2VjtaB/WixUEF/5t9cC7G6Y3emQzyOneyfB9R7TwW83YGaxmnR8qGf
GDqO03A0dl91H48qdzPyDxaApxzi5L1VjwcoHA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:57 2026 by rpki-client