Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/j8QiskJTBHdvvA99d-3rWwwJOaA.asa
File:                     j8QiskJTBHdvvA99d-3rWwwJOaA.asa (raw, json)
Hash identifier:          bDuDOhM5+Jp1KvUDJf1XanxKvLOmOhc5UiSCXeO71Sk=
Subject key identifier:   8F:C4:22:B2:42:53:04:77:6F:BC:0F:7D:77:ED:EB:5B:0C:09:39:A0
Certificate issuer:       /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial:       019E8CF2DCCF9D35B4A8B041B45284F3D9B4
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/j8QiskJTBHdvvA99d-3rWwwJOaA.asa
Signing time:             Wed 03 Jun 2026 10:06:26 +0000
ASPA not before:          Wed 03 Jun 2026 10:06:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197545
Providers:                AS: 2856
                          AS: 51048
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8c:f2:dc:cf:9d:35:b4:a8:b0:41:b4:52:84:f3:d9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
        Validity
            Not Before: Jun  3 10:06:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fc422b2425304776fbc0f7d77edeb5b0c0939a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:e5:30:9f:49:43:ef:9a:0d:ff:86:24:32:
                    52:54:aa:66:c6:68:53:1e:79:2e:31:30:40:10:7e:
                    a9:89:e3:f0:37:61:4c:3a:ac:35:5d:7e:b7:24:71:
                    b4:a4:c0:99:2f:69:3e:c6:7b:25:11:5f:e6:aa:67:
                    0f:35:1f:32:40:a9:6b:84:87:ce:40:a9:65:59:07:
                    73:34:8a:a9:ab:0a:a1:39:90:0f:4a:de:74:30:b0:
                    c3:61:1a:fb:8c:5d:a2:f0:ec:5e:54:dd:31:be:7c:
                    ae:ec:3c:38:40:a1:ed:1d:41:34:2e:96:bf:91:04:
                    da:d1:3d:02:9b:f9:d8:eb:a6:b2:72:ae:02:2e:47:
                    dd:a7:c7:2b:6c:5b:62:fa:df:89:98:e5:80:98:e5:
                    8d:09:58:86:8e:48:2a:1b:72:81:c5:94:cb:6d:09:
                    ef:f2:59:0d:6d:2a:96:50:72:6b:57:3a:8c:26:13:
                    d2:6f:4b:6b:a1:5c:9b:86:3f:a9:5c:d1:8d:53:8f:
                    82:8f:4e:ee:25:79:03:e9:f1:35:df:97:2b:c7:17:
                    1f:81:0b:ab:34:78:5a:48:9b:d2:0b:3a:86:7f:72:
                    38:b8:55:ed:a4:24:85:d8:16:b2:98:ec:cd:2f:d1:
                    c2:0e:86:d8:40:17:d3:35:97:61:c2:97:0c:92:20:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C4:22:B2:42:53:04:77:6F:BC:0F:7D:77:ED:EB:5B:0C:09:39:A0
            X509v3 Authority Key Identifier:
                keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/j8QiskJTBHdvvA99d-3rWwwJOaA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197545

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:19:e9:cf:e0:85:ec:35:1e:0c:25:5e:a8:bf:54:36:18:
         2d:9e:aa:c0:b8:6a:f1:a4:3e:9e:7a:81:45:48:40:a6:3d:51:
         b9:43:b9:56:e6:6c:eb:60:73:d5:33:94:05:e1:2c:fe:6e:14:
         ed:c9:58:48:42:56:8f:ed:df:9a:b6:bc:1d:f9:21:7c:72:83:
         87:26:98:29:34:97:4c:37:9e:42:12:f4:bd:e1:d0:6a:de:5e:
         dd:b1:59:0c:67:62:74:a4:54:08:ce:ea:c3:8c:4a:e3:5e:15:
         bf:09:36:5f:4e:b2:13:35:41:72:ee:be:91:00:57:76:39:50:
         8e:6d:d2:fd:1d:a4:db:ba:b3:c8:1a:2e:3c:bc:6c:1e:ef:49:
         b3:11:f4:06:b1:fb:19:60:e5:97:30:70:34:42:82:57:a5:47:
         91:f4:08:02:f9:3c:d3:9c:19:ce:19:2f:e9:7e:b8:dc:83:81:
         1c:7c:37:49:b7:7a:1f:4d:3a:70:81:20:d0:c5:04:0a:c3:80:
         a9:e1:66:57:6d:68:da:db:16:ca:9d:3b:56:01:3a:09:9b:6f:
         c8:b9:97:33:af:dc:bf:c6:14:a8:ca:38:b9:5c:a1:0d:bf:52:
         63:d5:31:d2:6c:e2:eb:19:da:ac:44:d6:c3:7d:bb:af:25:9e:
         05:b6:0f:1b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6M8tzPnTW0qLBBtFKE89m0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzY1ZmViM2UyODZjOGRiYWE5YjFkNjI2ODJlNDRmYmU4
MDA3MjIwHhcNMjYwNjAzMTAwNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM0MjJiMjQyNTMwNDc3NmZiYzBmN2Q3N2VkZWI1YjBjMDkzOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzblMJ9JQ++aDf+GJDJSVKpmxmhT
HnkuMTBAEH6piePwN2FMOqw1XX63JHG0pMCZL2k+xnslEV/mqmcPNR8yQKlrhIfO
QKllWQdzNIqpqwqhOZAPSt50MLDDYRr7jF2i8OxeVN0xvnyu7Dw4QKHtHUE0Lpa/
kQTa0T0Cm/nY66aycq4CLkfdp8crbFti+t+JmOWAmOWNCViGjkgqG3KBxZTLbQnv
8lkNbSqWUHJrVzqMJhPSb0troVybhj+pXNGNU4+Cj07uJXkD6fE135crxxcfgQur
NHhaSJvSCzqGf3I4uFXtpCSF2BaymOzNL9HCDobYQBfTNZdhwpcMkiCjNQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFI/EIrJCUwR3b7wPfXft61sMCTmgMB8GA1UdIwQY
MBaAFFp2X+s+KGyNuqmx1iaC5E++gAciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTIt
NGU3Y2UxMDI4ZDE0LzEvajhRaXNrSlRCSGR2dkE5OWQtM3JXd3dKT2FBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kYWM1MjMtMjBjMy00MzA3LWFiZTItNGU3Y2UxMDI4ZDE0
LzEvV25aZjZ6NG9iSTI2cWJIV0pvTGtUNzZBQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDqTANBgkqhkiG
9w0BAQsFAAOCAQEATZkZ6c/ghew1HgwlXqi/VDYYLZ6qwLhq8aQ+nnqBRUhApj1R
uUO5VuZs62Bz1TOUBeEs/m4U7clYSEJWj+3fmra8HfkhfHKDhyaYKTSXTDeeQhL0
veHQat5e3bFZDGdidKRUCM7qw4xK414Vvwk2X06yEzVBcu6+kQBXdjlQjm3S/R2k
27qzyBouPLxsHu9JsxH0BrH7GWDllzBwNEKCV6VHkfQIAvk805wZzhkv6X643IOB
HHw3Sbd6H006cIEg0MUECsOAqeFmV21o2tsWyp07VgE6CZtvyLmXM6/cv8YUqMo4
uVyhDb9SY9Ux0mzi6xnarETWw327ryWeBbYPGw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:14 2026 by rpki-client