Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/D-r3D7TjflJW1amM5h7I8MR0oUk.asa
File:                     D-r3D7TjflJW1amM5h7I8MR0oUk.asa (raw, json)
Hash identifier:          z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=
Subject key identifier:   0F:EA:F7:0F:B4:E3:7E:52:56:D5:A9:8C:E6:1E:C8:F0:C4:74:A1:49
Certificate issuer:       /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial:       019C75EED88E756CE0BDDD1E2D76846A70A7
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/D-r3D7TjflJW1amM5h7I8MR0oUk.asa
Signing time:             Thu 19 Feb 2026 12:45:12 +0000
ASPA not before:          Thu 19 Feb 2026 12:45:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200910
Providers:                AS: 5617
                          AS: 206082
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:75:ee:d8:8e:75:6c:e0:bd:dd:1e:2d:76:84:6a:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
        Validity
            Not Before: Feb 19 12:45:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0feaf70fb4e37e5256d5a98ce61ec8f0c474a149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:8a:5d:44:88:4e:3b:b4:4f:58:f0:33:0a:
                    38:d1:c5:87:8c:25:ab:5a:5d:a9:8c:8f:b5:83:0c:
                    d5:9f:9e:b6:d8:23:63:89:14:b6:37:69:d8:48:df:
                    82:31:88:0f:a5:34:26:ee:40:e0:fe:01:d0:3f:d5:
                    bb:9e:91:6e:a2:f0:94:73:77:45:ae:23:c8:8a:c7:
                    ce:ba:d8:0f:55:ab:a6:9a:eb:4f:ca:ba:b7:69:b3:
                    e7:2d:3b:08:ac:9e:77:03:24:f9:43:d3:8e:07:5e:
                    76:11:09:01:01:43:47:08:7d:c0:c2:40:37:e2:b5:
                    93:c8:a5:ab:f3:3e:43:d6:32:43:3f:75:9e:f5:c8:
                    a6:e5:36:ec:1c:f0:dc:51:b1:e6:66:af:c5:6e:eb:
                    64:02:fe:ea:5a:31:ce:c0:a5:50:0f:84:31:4e:e4:
                    90:31:62:9d:f7:9c:8a:33:ef:cb:75:a2:33:e9:39:
                    d5:33:06:c9:1f:8e:ab:1a:2a:d1:5b:ff:d2:5a:09:
                    fe:8a:bf:1f:fa:f6:4f:f9:ab:9a:c1:3c:74:94:60:
                    f2:f4:18:55:7c:66:2c:5d:a6:eb:6b:95:15:ad:c8:
                    33:27:32:9c:b5:ee:88:52:08:9b:7b:33:e9:97:82:
                    f8:ba:8d:fd:44:fa:ce:a0:ca:96:8b:2f:c0:89:4d:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:F7:0F:B4:E3:7E:52:56:D5:A9:8C:E6:1E:C8:F0:C4:74:A1:49
            X509v3 Authority Key Identifier:
                keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/D-r3D7TjflJW1amM5h7I8MR0oUk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200910

    Signature Algorithm: sha256WithRSAEncryption
         d3:de:19:c3:56:b2:dd:e3:67:45:cf:ca:fa:5b:e2:9a:15:a5:
         61:26:7e:7d:52:cf:2d:98:cb:00:4e:6c:3b:40:bd:f4:0a:37:
         ba:29:86:39:ac:33:6b:0c:31:6c:b0:5b:4f:89:62:59:73:14:
         25:d2:73:85:9c:27:da:b2:89:4a:bf:d6:bc:46:68:d3:55:b7:
         fb:a2:5b:c0:1e:14:fc:b6:d5:1c:e2:be:c8:4c:5a:ff:bf:96:
         79:81:db:6a:8f:75:5d:b6:9e:a6:58:69:76:5e:e0:71:28:90:
         e3:c1:3e:7d:8c:04:49:51:ce:af:fc:93:fc:1c:1c:6b:82:f8:
         08:73:8a:ad:ac:1d:37:37:23:74:91:ee:04:24:01:c3:5c:c0:
         48:47:72:a4:f0:d4:86:57:b7:69:25:f9:24:96:3a:55:59:85:
         70:a9:29:d9:e6:a3:ac:b3:76:b0:b0:65:f7:03:6d:a9:30:1c:
         9b:72:80:ab:e8:d9:8e:f4:64:0e:0a:58:a7:5f:80:ed:41:a5:
         ce:ec:0f:6f:22:96:ff:10:c2:e5:24:8e:87:0e:6b:11:12:2e:
         c7:37:84:51:48:80:64:51:cf:92:8c:40:c8:00:6b:28:79:36:
         f6:a6:eb:c9:7a:33:1f:e4:d7:88:5f:2c:b6:5f:ac:25:ca:91:
         6a:7b:c3:e8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx17tiOdWzgvd0eLXaEanCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjhlMzdmNTEzZGRjMjlmZmQ3OTFjMzhjOTY2MzIzNjlj
YTU0NTEwHhcNMjYwMjE5MTI0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVhZjcwZmI0ZTM3ZTUyNTZkNWE5OGNlNjFlYzhmMGM0NzRhMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoWKXUSITju0T1jwMwo40cWHjCWr
Wl2pjI+1gwzVn5622CNjiRS2N2nYSN+CMYgPpTQm7kDg/gHQP9W7npFuovCUc3dF
riPIisfOutgPVaummutPyrq3abPnLTsIrJ53AyT5Q9OOB152EQkBAUNHCH3AwkA3
4rWTyKWr8z5D1jJDP3We9cim5TbsHPDcUbHmZq/FbutkAv7qWjHOwKVQD4QxTuSQ
MWKd95yKM+/LdaIz6TnVMwbJH46rGirRW//SWgn+ir8f+vZP+auawTx0lGDy9BhV
fGYsXabra5UVrcgzJzKcte6IUgibezPpl4L4uo39RPrOoMqWiy/AiU0PqQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA/q9w+0435SVtWpjOYeyPDEdKFJMB8GA1UdIwQY
MBaAFBy4439RPdwp/9eRw4yWYyNpylRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMt
ZTFjZGIyNGMxODBiLzEvRC1yM0Q3VGpmbEpXMWFtTTVoN0k4TVIwb1VrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMtZTFjZGIyNGMxODBi
LzEvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMQzjANBgkqhkiG
9w0BAQsFAAOCAQEA094Zw1ay3eNnRc/K+lvimhWlYSZ+fVLPLZjLAE5sO0C99Ao3
uimGOawzawwxbLBbT4liWXMUJdJzhZwn2rKJSr/WvEZo01W3+6JbwB4U/LbVHOK+
yExa/7+WeYHbao91Xbaeplhpdl7gcSiQ48E+fYwESVHOr/yT/Bwca4L4CHOKrawd
NzcjdJHuBCQBw1zASEdypPDUhle3aSX5JJY6VVmFcKkp2eajrLN2sLBl9wNtqTAc
m3KAq+jZjvRkDgpYp1+A7UGlzuwPbyKW/xDC5SSOhw5rERIuxzeEUUiAZFHPkoxA
yABrKHk29qbryXozH+TXiF8stl+sJcqRanvD6A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:37 2026 by rpki-client