Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/5hc4aUb2VLwERMgdF6JkSl9fWf0.asa
File:                     5hc4aUb2VLwERMgdF6JkSl9fWf0.asa (raw, json)
Hash identifier:          j9/1PXx3xR2VNQwDsOYKFoQWF5EMTQQRt2vo77feDmY=
Subject key identifier:   E6:17:38:69:46:F6:54:BC:04:44:C8:1D:17:A2:64:4A:5F:5F:59:FD
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019C99EEC0D95F14F7B0E9C0341CB8DBB1BE
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/5hc4aUb2VLwERMgdF6JkSl9fWf0.asa
Signing time:             Thu 26 Feb 2026 12:31:26 +0000
ASPA not before:          Thu 26 Feb 2026 12:31:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48510
Providers:                AS: 174
                          AS: 1299
                          AS: 6762
                          AS: 12713
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:99:ee:c0:d9:5f:14:f7:b0:e9:c0:34:1c:b8:db:b1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Feb 26 12:31:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e617386946f654bc0444c81d17a2644a5f5f59fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:88:06:53:4d:0b:f5:65:9d:d4:40:29:1d:d0:
                    20:b4:43:af:a3:4b:bb:6b:0a:22:33:56:a6:ce:bd:
                    20:f2:e3:7e:f1:85:12:1e:8c:87:e9:cb:c4:82:17:
                    e0:d3:85:0a:f8:a8:6f:69:51:ea:53:d9:e2:96:70:
                    f7:88:be:07:6f:a1:4a:d2:a0:3d:d6:87:9e:47:e6:
                    0c:40:f7:53:24:6e:db:d7:b1:65:a1:c2:69:c2:db:
                    84:0f:de:34:22:1d:00:b5:e1:30:05:1e:49:b4:79:
                    cd:ee:2f:99:ac:8c:07:6d:7f:03:fe:00:7b:d0:8c:
                    e9:ce:e5:bb:ad:42:7b:f9:76:5d:6a:ce:87:14:46:
                    05:07:b6:4e:a9:dc:06:00:56:38:49:03:48:c3:e2:
                    39:81:3d:fd:80:30:e1:ba:5e:a8:92:14:3f:27:5f:
                    17:ed:3c:47:fe:89:a7:48:a3:c5:a5:6a:65:22:db:
                    15:5c:da:cd:9a:cd:94:f2:a6:3f:2d:7d:1e:71:e9:
                    fb:74:34:a7:37:ff:3b:b9:d1:b0:ec:2d:a9:c3:64:
                    53:f6:22:fa:ed:5e:15:3c:c3:0f:fa:49:0b:52:18:
                    09:77:65:a1:f7:1a:d8:ed:08:4b:40:f6:20:24:a4:
                    6e:3d:b7:a4:8e:d6:00:b0:bc:68:f0:b9:4a:ed:6b:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:38:69:46:F6:54:BC:04:44:C8:1D:17:A2:64:4A:5F:5F:59:FD
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/5hc4aUb2VLwERMgdF6JkSl9fWf0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48510

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:e1:6a:33:a2:54:7a:53:b3:4e:ef:b1:17:ab:91:1e:aa:
         6e:98:57:fe:95:44:07:26:c7:5e:3a:5f:4c:a6:ce:d5:ef:5e:
         fa:54:03:fc:f0:20:e1:15:2d:aa:d7:78:43:85:cd:8b:05:c6:
         64:21:93:d2:53:84:55:cc:f5:f2:48:67:59:c6:77:ca:ee:9a:
         11:c2:50:27:2b:f4:d6:14:45:df:b0:bf:34:07:8d:66:88:17:
         43:53:de:cd:58:f1:84:6f:b3:35:7b:a8:89:b8:98:5e:18:a7:
         8b:60:e3:e5:86:6e:e1:32:e5:5d:a9:05:f6:8f:50:80:bc:a6:
         79:98:1d:f6:00:e5:6c:4d:c7:27:69:b1:f9:cb:fb:a8:e8:79:
         bd:d2:e8:87:57:0b:47:19:02:8b:ee:5e:df:c3:8b:9f:22:83:
         f2:9f:87:45:c3:17:17:ea:bd:09:92:2a:07:17:98:84:42:4d:
         b4:73:d1:f0:2e:9f:c5:1e:b5:2c:5d:d6:ea:de:d7:d1:0b:82:
         11:02:ea:58:8b:2d:42:42:66:e3:f2:c9:85:47:3d:b9:68:fe:
         15:23:9e:07:d5:93:ac:bb:17:16:ea:71:db:ad:3f:a7:22:e9:
         f4:69:5c:f6:fb:d5:57:8e:c2:7a:14:51:c0:de:a4:51:c7:59:
         4e:30:14:ab
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyZ7sDZXxT3sOnANBy427G+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjYwMjI2MTIzMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjE3Mzg2OTQ2ZjY1NGJjMDQ0NGM4MWQxN2EyNjQ0YTVmNWY1OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YgGU00L9WWd1EApHdAgtEOvo0u7
awoiM1amzr0g8uN+8YUSHoyH6cvEghfg04UK+KhvaVHqU9nilnD3iL4Hb6FK0qA9
1oeeR+YMQPdTJG7b17FlocJpwtuED940Ih0AteEwBR5JtHnN7i+ZrIwHbX8D/gB7
0IzpzuW7rUJ7+XZdas6HFEYFB7ZOqdwGAFY4SQNIw+I5gT39gDDhul6okhQ/J18X
7TxH/omnSKPFpWplItsVXNrNms2U8qY/LX0ecen7dDSnN/87udGw7C2pw2RT9iL6
7V4VPMMP+kkLUhgJd2Wh9xrY7QhLQPYgJKRuPbekjtYAsLxo8LlK7Wv44wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOYXOGlG9lS8BETIHReiZEpfX1n9MB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvNWhjNGFVYjJWTHdFUk1nZEY2SmtTbDlmV2YwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9fjANBgkqhkiG
9w0BAQsFAAOCAQEAjgLhajOiVHpTs07vsRerkR6qbphX/pVEBybHXjpfTKbO1e9e
+lQD/PAg4RUtqtd4Q4XNiwXGZCGT0lOEVcz18khnWcZ3yu6aEcJQJyv01hRF37C/
NAeNZogXQ1PezVjxhG+zNXuoibiYXhini2Dj5YZu4TLlXakF9o9QgLymeZgd9gDl
bE3HJ2mx+cv7qOh5vdLoh1cLRxkCi+5e38OLnyKD8p+HRcMXF+q9CZIqBxeYhEJN
tHPR8C6fxR61LF3W6t7X0QuCEQLqWIstQkJm4/LJhUc9uWj+FSOeB9WTrLsXFupx
260/pyLp9Glc9vvVV47CehRRwN6kUcdZTjAUqw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:36 2026 by rpki-client