Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa
File:                     rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa (raw, json)
Hash identifier:          Q+nYBQ+gQsTBmSCinQLhjNQ/n5eKHzDbFRDbYdwd7Mw=
Subject key identifier:   AC:2B:6D:F2:C2:B6:18:E6:0A:1B:DE:12:BE:EF:F6:B9:1E:5D:76:14
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       019D61D7CC6F5555EA00BD35BF43C2FF91D0
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa
Signing time:             Mon 06 Apr 2026 08:10:25 +0000
ASPA not before:          Mon 06 Apr 2026 08:10:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57152
Providers:                AS: 7768
                          AS: 9121
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:61:d7:cc:6f:55:55:ea:00:bd:35:bf:43:c2:ff:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Apr  6 08:10:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac2b6df2c2b618e60a1bde12beeff6b91e5d7614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:19:ba:16:33:e3:51:48:42:c0:fa:e2:4a:
                    06:d1:39:cc:66:62:16:79:37:59:f8:16:28:24:79:
                    76:97:03:72:e5:dc:cc:bd:6a:40:f8:56:78:b0:cb:
                    fd:8e:c8:e6:f7:c8:8a:17:b5:cf:e5:61:d3:d5:85:
                    9e:71:19:f6:0e:cd:ab:54:05:28:30:f2:d3:93:3c:
                    9b:a8:b4:16:f4:05:7b:53:46:93:29:3c:5d:e5:40:
                    c4:e7:d4:eb:fd:c1:08:e6:43:5e:62:c0:06:2e:37:
                    6d:da:be:0d:66:d0:90:17:26:d7:4c:47:f2:31:77:
                    6b:49:55:25:a5:d8:18:ce:d4:a0:91:bd:e3:17:2d:
                    78:87:3b:66:49:3c:19:60:11:59:70:2a:14:b8:43:
                    76:15:26:c2:42:97:b4:1b:3a:47:c5:50:b9:dc:de:
                    8f:34:f7:b9:0e:4e:75:f8:0a:f3:07:30:9a:30:f9:
                    cf:1a:40:1e:c5:1f:48:ed:b7:d3:5e:a9:33:d2:88:
                    a9:a7:65:34:23:26:81:80:0d:65:92:7c:f5:1f:2d:
                    b2:07:3f:10:ca:9d:f4:02:4f:6e:74:b0:d3:6d:69:
                    44:1e:2c:49:71:ae:75:1d:4b:93:8a:a8:3f:9a:fb:
                    b0:c6:68:09:fc:18:d5:c0:17:45:aa:7e:ac:9e:4f:
                    36:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:6D:F2:C2:B6:18:E6:0A:1B:DE:12:BE:EF:F6:B9:1E:5D:76:14
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57152

    Signature Algorithm: sha256WithRSAEncryption
         08:10:0b:ce:5f:a3:90:27:d5:d6:7d:cf:b3:c2:e8:8d:5f:f3:
         36:9f:af:63:36:fc:b9:e0:f3:04:47:37:a0:d1:ec:db:04:b6:
         40:49:d7:b4:d8:00:2c:1c:d8:b8:47:8f:21:45:a7:8d:ce:27:
         9a:25:bd:cc:e6:88:7d:eb:71:fb:7c:62:64:15:52:54:2f:ef:
         1f:79:a2:dd:ae:dd:cc:b4:81:a3:04:2a:55:ef:de:d7:e8:83:
         78:c0:c5:20:68:fc:00:c9:a2:d2:a2:46:a1:68:81:3f:4a:88:
         cf:c9:fd:95:a7:b6:92:0d:97:3f:4c:6f:91:3f:87:df:4d:38:
         b8:72:f2:90:ce:f4:b9:89:b0:10:48:f6:cd:87:ce:72:8c:6b:
         e5:a5:47:91:35:9d:1e:94:36:42:94:53:f0:ce:28:1c:19:b0:
         04:1b:43:5e:2f:1d:f8:cc:10:c5:e0:da:1c:0c:10:5d:bf:2b:
         af:bf:d0:78:e8:e0:c7:2f:f5:40:89:59:c2:31:39:14:d4:2f:
         b8:b5:b8:d4:8b:61:3e:be:c0:be:37:75:65:a8:f8:12:ff:2b:
         bc:75:ff:e2:51:e2:70:59:72:1d:2d:30:ad:58:bb:2f:d6:9a:
         18:1d:9b:56:dc:ec:11:28:85:07:a2:52:39:c9:65:c0:eb:dd:
         11:f9:8e:df
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1h18xvVVXqAL01v0PC/5HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzcwOTg1ZjgzZjQxMzMwMTExYzM1MGNkNmIxZTFlZWFk
NTI2YWEwHhcNMjYwNDA2MDgxMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzJiNmRmMmMyYjYxOGU2MGExYmRlMTJiZWVmZjZiOTFlNWQ3NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkIZuhYz41FIQsD64koG0TnMZmIW
eTdZ+BYoJHl2lwNy5dzMvWpA+FZ4sMv9jsjm98iKF7XP5WHT1YWecRn2Ds2rVAUo
MPLTkzybqLQW9AV7U0aTKTxd5UDE59Tr/cEI5kNeYsAGLjdt2r4NZtCQFybXTEfy
MXdrSVUlpdgYztSgkb3jFy14hztmSTwZYBFZcCoUuEN2FSbCQpe0GzpHxVC53N6P
NPe5Dk51+ArzBzCaMPnPGkAexR9I7bfTXqkz0oipp2U0IyaBgA1lknz1Hy2yBz8Q
yp30Ak9udLDTbWlEHixJca51HUuTiqg/mvuwxmgJ/BjVwBdFqn6snk82NwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKwrbfLCthjmChveEr7v9rkeXXYUMB8GA1UdIwQY
MBaAFO43CYX4P0EzARHDUM1rHh7q1SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAt
MzI0NDU0NmY4Y2JmLzEvckN0dDhzSzJHT1lLRzk0U3Z1XzJ1UjVkZGhRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAtMzI0NDU0NmY4Y2Jm
LzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDfQDANBgkqhkiG
9w0BAQsFAAOCAQEACBALzl+jkCfV1n3Ps8LojV/zNp+vYzb8ueDzBEc3oNHs2wS2
QEnXtNgALBzYuEePIUWnjc4nmiW9zOaIfetx+3xiZBVSVC/vH3mi3a7dzLSBowQq
Ve/e1+iDeMDFIGj8AMmi0qJGoWiBP0qIz8n9lae2kg2XP0xvkT+H3004uHLykM70
uYmwEEj2zYfOcoxr5aVHkTWdHpQ2QpRT8M4oHBmwBBtDXi8d+MwQxeDaHAwQXb8r
r7/QeOjgxy/1QIlZwjE5FNQvuLW41IthPr7Avjd1Zaj4Ev8rvHX/4lHicFlyHS0w
rVi7L9aaGB2bVtzsESiFB6JSOcllwOvdEfmO3w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:02 2026 by rpki-client