Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa
File:                     SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa (raw, json)
Hash identifier:          Hy6zUn6CPOdPhp0PUaBkdSVPrH4LoH2MpjhK4spZ01E=
Subject key identifier:   49:1B:C2:52:9B:79:12:31:95:77:C6:18:04:05:85:AB:D1:7F:4C:CC
Certificate issuer:       /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial:       019EAB3B4F8591E48452F856491847EE087F
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa
Signing time:             Tue 09 Jun 2026 07:14:11 +0000
ASPA not before:          Tue 09 Jun 2026 07:14:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211161
Providers:                AS: 9145
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ab:3b:4f:85:91:e4:84:52:f8:56:49:18:47:ee:08:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
        Validity
            Not Before: Jun  9 07:14:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=491bc2529b7912319577c618040585abd17f4ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:75:c3:66:55:a6:ac:28:7c:8e:87:6d:73:
                    39:48:fc:fc:14:96:1e:f1:5e:40:61:ab:f9:3a:d6:
                    c3:c8:e0:d0:0f:d3:35:83:89:19:37:b9:6d:9f:33:
                    3f:a6:8f:f9:04:96:c4:45:6e:93:c0:3a:01:dc:bd:
                    4c:0e:99:6c:0e:27:b1:e8:a6:28:83:e3:cb:da:e3:
                    ab:8a:a7:e7:91:6b:e4:9f:8b:95:25:d4:78:99:66:
                    97:3c:fb:77:c9:e7:39:96:38:7b:43:23:69:27:0b:
                    d7:c3:96:79:c3:ec:25:b5:69:85:f7:c9:ea:e6:7b:
                    6b:9e:e4:71:c8:d5:20:72:49:da:b0:16:99:56:5a:
                    a1:81:05:1c:33:b9:51:56:19:82:ae:12:81:da:56:
                    32:12:41:19:44:7d:d2:c3:11:fc:00:dc:1e:a7:bd:
                    8c:fb:a2:14:f6:1c:02:4c:0f:72:96:cd:c4:47:31:
                    ea:df:d0:8e:97:d8:81:01:d7:76:be:a9:29:05:82:
                    ce:00:9f:d8:b1:58:ae:68:bd:02:b2:95:60:68:1d:
                    48:cf:bd:c7:bd:24:2f:08:9f:84:18:bc:0b:75:d9:
                    42:e4:cb:36:ba:5f:3d:64:06:d7:07:65:26:23:0f:
                    ae:5c:1c:17:b0:1e:3e:47:66:96:8f:62:18:a6:88:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1B:C2:52:9B:79:12:31:95:77:C6:18:04:05:85:AB:D1:7F:4C:CC
            X509v3 Authority Key Identifier:
                keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211161

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:39:b7:7f:03:b6:6e:33:3f:b3:27:72:fa:6f:ec:3c:d8:
         18:52:df:e9:e6:e2:b9:f7:a3:1b:80:3c:ff:a6:fb:95:f1:e9:
         30:18:6f:d7:c1:45:78:54:38:f0:5c:fa:6e:e4:a8:ae:51:55:
         26:90:ed:79:bd:c4:8d:84:da:78:ea:28:a7:b8:5a:dd:70:51:
         0f:4d:7e:f1:f9:88:0e:51:89:2b:8e:c6:d5:b2:bc:f4:97:13:
         fd:2a:bc:fe:e9:25:63:32:96:a0:a3:9d:5e:ef:aa:c0:1b:e0:
         71:97:56:9c:53:7e:cf:7c:35:e5:04:92:ab:d1:67:55:f2:42:
         f7:30:ea:b3:f0:73:4f:72:3f:5b:b5:ec:0a:16:94:db:aa:83:
         1f:69:c1:7e:67:31:95:3b:3c:3e:88:b1:bd:fe:6c:78:e1:f1:
         88:26:b2:d0:01:01:ed:82:9f:9c:b8:bc:1f:31:90:71:ba:2d:
         f9:42:71:fd:31:77:78:c5:96:8c:83:af:59:73:a7:87:37:32:
         dd:fe:6d:08:77:e1:f0:ad:23:c5:62:a4:4a:5e:69:c5:b7:14:
         2c:05:a4:dd:82:34:25:f2:d2:dd:3a:8f:09:2f:4e:3c:1f:1d:
         8e:3d:57:fa:63:1e:30:1b:65:bb:e3:2a:ec:d3:35:71:e1:87:
         4f:0e:c4:6f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ6rO0+FkeSEUvhWSRhH7gh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwY2VjMWMxNzk5Y2U2MTUwM2Y5MDhhZDg0OTA5MjBmYjg5
ODk0MmEwHhcNMjYwNjA5MDcxNDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTFiYzI1MjliNzkxMjMxOTU3N2M2MTgwNDA1ODVhYmQxN2Y0Y2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWh1w2ZVpqwofI6HbXM5SPz8FJYe
8V5AYav5OtbDyODQD9M1g4kZN7ltnzM/po/5BJbERW6TwDoB3L1MDplsDiex6KYo
g+PL2uOriqfnkWvkn4uVJdR4mWaXPPt3yec5ljh7QyNpJwvXw5Z5w+wltWmF98nq
5ntrnuRxyNUgcknasBaZVlqhgQUcM7lRVhmCrhKB2lYyEkEZRH3SwxH8ANwep72M
+6IU9hwCTA9yls3ERzHq39COl9iBAdd2vqkpBYLOAJ/YsViuaL0CspVgaB1Iz73H
vSQvCJ+EGLwLddlC5Ms2ul89ZAbXB2UmIw+uXBwXsB4+R2aWj2IYpojJzQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEkbwlKbeRIxlXfGGAQFhavRf0zMMB8GA1UdIwQY
MBaAFLDOwcF5nOYVA/kIrYSQkg+4mJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc003QndYbWM1aFVELVFpdGhKQ1NEN2lZbENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82MzU4ODgtNjk1Ny00YmRlLWIxNTgt
NGZlNjcyN2U5YjI1LzEvU1J2Q1VwdDVFakdWZDhZWUJBV0ZxOUZfVE13LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82MzU4ODgtNjk1Ny00YmRlLWIxNTgtNGZlNjcyN2U5YjI1
LzEvc003QndYbWM1aFVELVFpdGhKQ1NEN2lZbENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM42TANBgkqhkiG
9w0BAQsFAAOCAQEAZKQ5t38Dtm4zP7Mncvpv7DzYGFLf6ebiufejG4A8/6b7lfHp
MBhv18FFeFQ48Fz6buSorlFVJpDteb3EjYTaeOoop7ha3XBRD01+8fmIDlGJK47G
1bK89JcT/Sq8/uklYzKWoKOdXu+qwBvgcZdWnFN+z3w15QSSq9FnVfJC9zDqs/Bz
T3I/W7XsChaU26qDH2nBfmcxlTs8Poixvf5seOHxiCay0AEB7YKfnLi8HzGQcbot
+UJx/TF3eMWWjIOvWXOnhzcy3f5tCHfh8K0jxWKkSl5pxbcULAWk3YI0JfLS3TqP
CS9OPB8djj1X+mMeMBtlu+Mq7NM1ceGHTw7Ebw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:09 2026 by rpki-client