Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/_Fyf7zFGzeDW7zsznMYR472wYMY.asa
File:                     _Fyf7zFGzeDW7zsznMYR472wYMY.asa (raw, json)
Hash identifier:          O8OCjw/AFz0U+dbA2ny1AUn9RnUyhuTFkhwfS9CKoG4=
Subject key identifier:   FC:5C:9F:EF:31:46:CD:E0:D6:EF:3B:33:9C:C6:11:E3:BD:B0:60:C6
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019D7239BDCE8D920EB90A1F8D95290FF4AE
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/_Fyf7zFGzeDW7zsznMYR472wYMY.asa
Signing time:             Thu 09 Apr 2026 12:31:19 +0000
ASPA not before:          Thu 09 Apr 2026 12:31:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213093
Providers:                AS: 48355
                          AS: 57619
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:72:39:bd:ce:8d:92:0e:b9:0a:1f:8d:95:29:0f:f4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Apr  9 12:31:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc5c9fef3146cde0d6ef3b339cc611e3bdb060c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:0a:d8:3f:81:c8:17:93:fd:ac:59:08:26:
                    4a:5d:5f:9d:c4:77:76:bc:f0:d2:2e:4b:27:ce:26:
                    86:fd:24:0a:fb:17:9a:46:fe:8f:84:9e:76:1d:27:
                    b1:8b:04:b8:8f:dd:7d:03:e9:5a:b0:f1:07:55:0f:
                    db:82:6d:f0:cb:17:cb:0e:be:be:62:f8:e9:5b:89:
                    10:65:71:a1:04:9d:55:04:89:2c:69:2f:cb:69:de:
                    59:5a:d6:52:fd:3c:0d:2a:05:bd:bb:09:7b:67:1c:
                    e8:70:80:77:c2:23:28:45:83:45:3f:92:0c:68:19:
                    5f:6f:e7:38:7b:fb:07:0c:42:4e:96:65:15:7b:cb:
                    76:f1:58:d5:9e:30:82:72:be:b5:d0:8a:8c:c9:af:
                    6e:41:72:92:a7:94:7f:da:15:33:d4:d9:5c:67:2a:
                    ee:36:e0:ce:0d:41:35:9b:ff:41:37:5e:07:7a:eb:
                    e2:13:ea:d4:c6:3a:2e:59:3d:e4:e6:55:3c:e3:7c:
                    20:5a:e2:fa:96:8a:f2:d5:54:9c:e0:b2:9f:f4:87:
                    f4:8c:d9:5d:a8:8d:67:63:15:ec:be:2c:ba:d9:5d:
                    c8:f9:47:29:dc:e2:14:b2:55:e5:37:9e:4e:c0:93:
                    ca:f3:e3:6e:70:a7:4f:f9:0a:b8:df:25:2d:db:ba:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:9F:EF:31:46:CD:E0:D6:EF:3B:33:9C:C6:11:E3:BD:B0:60:C6
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/_Fyf7zFGzeDW7zsznMYR472wYMY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213093

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:fe:eb:b6:a5:ef:c1:a0:24:17:07:2d:37:c6:0b:93:a9:
         bb:a2:5f:31:36:d1:3b:bc:51:5c:75:5f:3d:d5:1c:c1:b0:02:
         22:84:cc:e7:83:63:94:b3:ef:a1:23:08:28:e8:4f:37:31:e1:
         3e:6e:02:38:cc:af:dd:f1:32:9d:30:19:06:b1:fa:35:8f:fe:
         48:e3:52:d2:34:f1:43:9e:8d:ad:70:e3:e2:02:a7:00:64:b0:
         ef:50:e6:f2:4e:b7:7e:25:d2:d5:b2:bd:65:e9:dd:91:ca:d9:
         60:bf:1f:5c:9f:dd:e5:e3:19:2e:c0:30:81:5c:34:8f:af:8d:
         f2:78:7a:19:cf:39:4c:d2:a6:98:84:65:0c:af:2c:83:a5:9d:
         41:df:cd:18:fc:4f:a0:93:ac:37:f9:5c:6d:30:f9:76:ab:02:
         97:c1:16:25:ad:a5:d7:07:ed:3f:1c:16:92:79:a1:42:21:76:
         48:4b:a7:4d:cc:01:66:9d:c6:9c:75:8a:47:f2:2b:20:43:9c:
         be:f9:44:46:50:ed:aa:44:34:4b:42:d2:3d:3b:8f:8e:14:75:
         a4:fb:36:09:89:6a:d3:15:b1:6f:d8:5d:ec:38:8e:c5:8f:b9:
         40:3d:f4:be:90:15:b4:07:55:c7:27:0e:e0:ca:a4:66:cb:0d:
         7c:34:af:c9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1yOb3OjZIOuQofjZUpD/SuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTJkYjgyMDkwYjM0M2Y4OWY3YzYzN2NmNDFhOTRiY2Zk
NDM0NmEwHhcNMjYwNDA5MTIzMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzVjOWZlZjMxNDZjZGUwZDZlZjNiMzM5Y2M2MTFlM2JkYjA2MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYEK2D+ByBeT/axZCCZKXV+dxHd2
vPDSLksnziaG/SQK+xeaRv6PhJ52HSexiwS4j919A+lasPEHVQ/bgm3wyxfLDr6+
YvjpW4kQZXGhBJ1VBIksaS/Lad5ZWtZS/TwNKgW9uwl7ZxzocIB3wiMoRYNFP5IM
aBlfb+c4e/sHDEJOlmUVe8t28VjVnjCCcr610IqMya9uQXKSp5R/2hUz1NlcZyru
NuDODUE1m/9BN14HeuviE+rUxjouWT3k5lU843wgWuL6lory1VSc4LKf9If0jNld
qI1nYxXsviy62V3I+Ucp3OIUslXlN55OwJPK8+NucKdP+Qq43yUt27rMQQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPxcn+8xRs3g1u87M5zGEeO9sGDGMB8GA1UdIwQY
MBaAFK5S24IJCzQ/iffGN89BqUvP1DRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUt
ZDdiNjA2M2RjYTM3LzEvX0Z5Zjd6Rkd6ZURXN3pzem5NWVI0NzJ3WU1ZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUtZDdiNjA2M2RjYTM3
LzEvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAZTANBgkqhkiG
9w0BAQsFAAOCAQEAUA/+67al78GgJBcHLTfGC5Opu6JfMTbRO7xRXHVfPdUcwbAC
IoTM54NjlLPvoSMIKOhPNzHhPm4COMyv3fEynTAZBrH6NY/+SONS0jTxQ56NrXDj
4gKnAGSw71Dm8k63fiXS1bK9ZendkcrZYL8fXJ/d5eMZLsAwgVw0j6+N8nh6Gc85
TNKmmIRlDK8sg6WdQd/NGPxPoJOsN/lcbTD5dqsCl8EWJa2l1wftPxwWknmhQiF2
SEunTcwBZp3GnHWKR/IrIEOcvvlERlDtqkQ0S0LSPTuPjhR1pPs2CYlq0xWxb9hd
7DiOxY+5QD30vpAVtAdVxycO4MqkZssNfDSvyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:42 2026 by rpki-client