Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/E-yRnzG7ZI-qWGUM5EP-InpQDNU.asa
File:                     E-yRnzG7ZI-qWGUM5EP-InpQDNU.asa (raw, json)
Hash identifier:          pzdSZPp7JHmHwqTyi0CsWbcwsAVLCV+NGK2ZhfJeNWg=
Subject key identifier:   13:EC:91:9F:31:BB:64:8F:AA:58:65:0C:E4:43:FE:22:7A:50:0C:D5
Certificate issuer:       /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial:       019FA37530951DADAA18D6628ABFB545E83A
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/E-yRnzG7ZI-qWGUM5EP-InpQDNU.asa
Signing time:             Mon 27 Jul 2026 12:03:14 +0000
ASPA not before:          Mon 27 Jul 2026 12:03:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215842
Providers:                AS: 8283
                          AS: 34927
                          AS: 202585
                          AS: 203291
                          AS: 212635
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:75:30:95:1d:ad:aa:18:d6:62:8a:bf:b5:45:e8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
        Validity
            Not Before: Jul 27 12:03:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13ec919f31bb648faa58650ce443fe227a500cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:fe:34:57:85:91:8d:72:49:e3:23:c9:0a:
                    15:0b:f4:32:bc:a1:71:e8:61:2d:77:c4:8a:91:25:
                    9d:98:b2:12:5e:17:c8:0d:e0:89:8b:f3:e2:ef:40:
                    af:46:f8:4d:a7:31:96:03:e8:e8:44:49:87:c0:ef:
                    31:d6:f1:dc:79:8e:e6:4d:99:e5:ae:8a:58:99:5c:
                    c3:ba:c7:be:21:2c:29:54:7e:d0:ad:ef:07:a1:39:
                    86:19:ac:37:96:f9:e8:75:98:62:28:53:a5:62:c5:
                    17:e6:24:be:0a:99:b1:21:53:eb:58:b5:97:65:52:
                    28:4d:c4:79:7a:27:5f:bc:3f:24:f3:62:e7:cf:9d:
                    9c:fe:39:8b:15:be:ea:e8:96:bb:3c:9b:84:d7:6a:
                    1c:69:67:de:21:a6:53:cc:7b:13:0a:a9:df:36:66:
                    8a:3e:19:8d:73:4f:34:94:f1:5d:32:36:39:ac:48:
                    45:16:d2:3b:e5:82:b4:16:4c:24:3b:d9:d3:86:39:
                    47:34:e0:c5:54:3b:d2:71:76:98:a2:42:0f:72:86:
                    d0:1a:f1:ec:a4:6b:12:69:fa:68:8a:e9:85:aa:89:
                    56:97:1b:04:2f:a0:78:f1:67:ab:b0:00:34:60:fa:
                    55:01:6c:65:a6:c8:a8:85:f6:1d:14:98:c4:6c:65:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:91:9F:31:BB:64:8F:AA:58:65:0C:E4:43:FE:22:7A:50:0C:D5
            X509v3 Authority Key Identifier:
                keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/E-yRnzG7ZI-qWGUM5EP-InpQDNU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215842

    Signature Algorithm: sha256WithRSAEncryption
         37:76:7f:9f:4e:fa:2d:0c:83:ee:78:e5:24:be:24:06:c6:41:
         a9:60:8d:11:b9:e9:81:41:2e:16:b4:31:4f:86:49:93:d8:fc:
         89:9a:da:46:cd:18:05:72:28:6f:13:8c:e2:cc:dd:c0:e7:de:
         ff:f2:04:bf:c9:26:9f:4d:1d:72:92:f3:98:03:54:be:df:4b:
         75:84:9d:13:ef:79:00:f8:f8:c3:8d:06:8f:1b:44:a8:9f:31:
         9d:f2:b7:5f:34:8d:42:86:d2:57:3d:16:24:db:17:57:b7:32:
         d6:8e:cf:2b:67:ff:fd:2e:86:0e:f7:32:4e:c3:35:b8:c3:83:
         21:e1:f9:6c:70:e6:5a:26:6c:d6:b8:35:3f:0a:93:12:b0:db:
         e9:33:2b:36:1c:3f:5d:28:11:b2:ef:a8:83:ea:fa:2b:82:0c:
         e3:aa:97:83:53:1e:91:96:29:be:59:89:9d:e6:d0:65:23:4f:
         36:ac:36:e0:89:12:d7:96:33:1b:44:4e:3f:b7:55:17:c9:fd:
         be:f3:b3:8e:e0:c3:fd:c3:80:a3:28:02:5d:b1:65:22:43:de:
         67:f5:72:ca:c9:30:7d:ce:41:35:7c:59:f3:8c:5b:7b:9a:45:
         91:09:81:cd:6f:ca:77:db:77:24:25:59:b5:ad:5c:c0:67:2c:
         49:90:b6:6d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ+jdTCVHa2qGNZiir+1Reg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj
ZmIxNjcwHhcNMjYwNzI3MTIwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2VjOTE5ZjMxYmI2NDhmYWE1ODY1MGNlNDQzZmUyMjdhNTAwY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5D+NFeFkY1ySeMjyQoVC/QyvKFx
6GEtd8SKkSWdmLISXhfIDeCJi/Pi70CvRvhNpzGWA+joREmHwO8x1vHceY7mTZnl
ropYmVzDuse+ISwpVH7Qre8HoTmGGaw3lvnodZhiKFOlYsUX5iS+CpmxIVPrWLWX
ZVIoTcR5eidfvD8k82Lnz52c/jmLFb7q6Ja7PJuE12ocaWfeIaZTzHsTCqnfNmaK
PhmNc080lPFdMjY5rEhFFtI75YK0FkwkO9nThjlHNODFVDvScXaYokIPcobQGvHs
pGsSafpoiumFqolWlxsEL6B48WersAA0YPpVAWxlpsiohfYdFJjEbGXbOwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBPskZ8xu2SPqlhlDORD/iJ6UAzVMB8GA1UdIwQY
MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt
ZjhmZGYwNDNmYTQ3LzEvRS15Um56RzdaSS1xV0dVTTVFUC1JbnBRRE5VLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3
LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLIjANBgkqhkiG
9w0BAQsFAAOCAQEAN3Z/n076LQyD7njlJL4kBsZBqWCNEbnpgUEuFrQxT4ZJk9j8
iZraRs0YBXIobxOM4szdwOfe//IEv8kmn00dcpLzmANUvt9LdYSdE+95APj4w40G
jxtEqJ8xnfK3XzSNQobSVz0WJNsXV7cy1o7PK2f//S6GDvcyTsM1uMODIeH5bHDm
WiZs1rg1PwqTErDb6TMrNhw/XSgRsu+og+r6K4IM46qXg1MekZYpvlmJnebQZSNP
Nqw24IkS15YzG0ROP7dVF8n9vvOzjuDD/cOAoygCXbFlIkPeZ/Vyyskwfc5BNXxZ
84xbe5pFkQmBzW/Kd9t3JCVZta1cwGcsSZC2bQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:55 2026 by rpki-client