Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/9X79br-B5PIYOAndjXkd_R1bW30.asa
File:                     9X79br-B5PIYOAndjXkd_R1bW30.asa (raw, json)
Hash identifier:          o5UbKEXSCyVmkea3mToXMQIywUYsXBNkWkJYBnUr0LU=
Subject key identifier:   F5:7E:FD:6E:BF:81:E4:F2:18:38:09:DD:8D:79:1D:FD:1D:5B:5B:7D
Certificate issuer:       /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial:       019D3E87C2B709F4D1AB6406114E5233C572
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/9X79br-B5PIYOAndjXkd_R1bW30.asa
Signing time:             Mon 30 Mar 2026 11:36:17 +0000
ASPA not before:          Mon 30 Mar 2026 11:36:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15751
Providers:                AS: 5466
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3e:87:c2:b7:09:f4:d1:ab:64:06:11:4e:52:33:c5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
        Validity
            Not Before: Mar 30 11:36:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f57efd6ebf81e4f2183809dd8d791dfd1d5b5b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:5f:89:84:ad:db:ca:66:43:47:4d:c6:b8:
                    cf:ff:53:8f:86:32:50:10:9a:81:04:1f:d9:4a:31:
                    9f:4d:c9:4e:60:8d:08:3f:dd:92:c3:f7:e0:3c:c9:
                    c5:9f:8c:6f:08:87:6e:77:e7:23:74:1f:c9:03:31:
                    83:76:53:94:d7:c7:8a:a1:a1:4d:a4:67:41:37:ca:
                    64:f9:37:11:f5:a4:41:50:7e:db:cf:a0:16:6e:0f:
                    03:0c:f5:18:1f:85:9e:f2:9c:91:90:e8:af:8b:3d:
                    06:5b:0f:15:c8:31:01:f2:a4:2b:db:1c:05:7b:93:
                    9c:d0:c0:90:08:fe:5d:ea:a8:8b:03:62:93:c1:c1:
                    4a:c6:56:34:fd:fa:af:a5:18:11:80:66:8e:54:fa:
                    e5:ea:56:74:31:67:69:29:0f:26:f7:d2:58:ba:15:
                    03:68:c3:81:8a:36:b4:2a:c0:5e:13:de:73:68:b5:
                    27:ff:85:c4:1d:89:b3:a1:13:cd:eb:46:7c:8d:ad:
                    07:64:09:ca:7f:2a:41:94:df:c0:81:91:50:3d:60:
                    1c:8c:36:9b:ce:fa:2a:9b:f2:2a:af:b3:30:59:ff:
                    99:37:5e:a4:54:ea:d5:0d:35:d3:f6:b6:79:88:d6:
                    3d:d7:31:30:e4:d6:45:dc:ac:df:3c:a5:31:ea:80:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:FD:6E:BF:81:E4:F2:18:38:09:DD:8D:79:1D:FD:1D:5B:5B:7D
            X509v3 Authority Key Identifier:
                keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/9X79br-B5PIYOAndjXkd_R1bW30.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15751

    Signature Algorithm: sha256WithRSAEncryption
         03:33:49:fc:4e:97:a9:b0:4d:7e:83:52:c2:5d:37:73:e8:4b:
         67:58:4a:1a:54:c8:21:cd:90:b7:02:3f:c5:7f:64:e7:be:e2:
         ae:36:c5:7b:c7:fc:e7:ff:67:42:a2:06:7b:83:26:f0:69:e2:
         5b:78:4f:33:00:f2:73:06:c3:f7:24:1d:64:f0:2b:22:04:38:
         b8:ed:33:f2:ed:9d:d6:60:d3:6e:77:0e:11:2f:da:61:7f:5c:
         1d:e9:7d:61:18:bd:1b:3d:1e:49:a1:e5:1a:8d:e7:96:7f:e5:
         e2:7d:67:4a:5d:bc:d6:94:5f:b3:11:68:a8:82:ff:49:7d:bb:
         63:e2:4a:13:7f:63:ed:94:34:10:5b:c3:ff:20:1b:09:ed:f2:
         69:b8:86:35:ba:2a:e9:ba:a3:d7:da:4d:e4:a6:c5:b2:1f:cc:
         54:e9:ac:70:3d:7d:9e:21:3e:ac:88:9d:26:62:0a:18:48:60:
         47:a9:57:96:4e:ef:e5:a0:77:25:60:26:cb:05:ae:8b:b6:30:
         06:d5:38:fe:8a:d2:72:14:17:8d:d3:d7:ab:e6:17:c4:fd:ff:
         13:d3:c0:fb:cc:c6:47:c5:eb:ba:e2:ff:d1:0f:2a:26:6a:bc:
         90:47:29:67:e0:b7:d5:7c:f2:cd:d6:cc:a2:a7:8f:8f:e9:c4:
         5f:c6:93:21
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ0+h8K3CfTRq2QGEU5SM8VyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2
NTBkZGMwHhcNMjYwMzMwMTEzNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTdlZmQ2ZWJmODFlNGYyMTgzODA5ZGQ4ZDc5MWRmZDFkNWI1YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqlfiYSt28pmQ0dNxrjP/1OPhjJQ
EJqBBB/ZSjGfTclOYI0IP92Sw/fgPMnFn4xvCIdud+cjdB/JAzGDdlOU18eKoaFN
pGdBN8pk+TcR9aRBUH7bz6AWbg8DDPUYH4We8pyRkOiviz0GWw8VyDEB8qQr2xwF
e5Oc0MCQCP5d6qiLA2KTwcFKxlY0/fqvpRgRgGaOVPrl6lZ0MWdpKQ8m99JYuhUD
aMOBija0KsBeE95zaLUn/4XEHYmzoRPN60Z8ja0HZAnKfypBlN/AgZFQPWAcjDab
zvoqm/Iqr7MwWf+ZN16kVOrVDTXT9rZ5iNY91zEw5NZF3KzfPKUx6oBrLwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFPV+/W6/geTyGDgJ3Y15Hf0dW1t9MB8GA1UdIwQY
MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvOVg3OWJyLUI1UElZT0FuZGpYa2RfUjFiVzMwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj2HMA0GCSqGSIb3
DQEBCwUAA4IBAQADM0n8TpepsE1+g1LCXTdz6EtnWEoaVMghzZC3Aj/Ff2TnvuKu
NsV7x/zn/2dCogZ7gybwaeJbeE8zAPJzBsP3JB1k8CsiBDi47TPy7Z3WYNNudw4R
L9phf1wd6X1hGL0bPR5JoeUajeeWf+XifWdKXbzWlF+zEWiogv9Jfbtj4koTf2Pt
lDQQW8P/IBsJ7fJpuIY1uirpuqPX2k3kpsWyH8xU6axwPX2eIT6siJ0mYgoYSGBH
qVeWTu/loHclYCbLBa6LtjAG1Tj+itJyFBeN09er5hfE/f8T08D7zMZHxeu64v/R
DyomaryQRyln4LfVfPLN1syip4+P6cRfxpMh
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:50 2026 by rpki-client