Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/vKgQ12Jb9ofSvR9YSCXLzDjpwd0.asa
File:                     vKgQ12Jb9ofSvR9YSCXLzDjpwd0.asa (raw, json)
Hash identifier:          s7KZHL/6T1Fmheoj7A/p0mjrZuyg1ES9DUCwn5Mt/VQ=
Subject key identifier:   BC:A8:10:D7:62:5B:F6:87:D2:BD:1F:58:48:25:CB:CC:38:E9:C1:DD
Certificate issuer:       /CN=31ef8c7f2cbae9ab2c8f9de4938b6ec71c2a07c6
Certificate serial:       019D90B2F3C949AD098D9CD4782EE59F5886
Authority key identifier: 31:EF:8C:7F:2C:BA:E9:AB:2C:8F:9D:E4:93:8B:6E:C7:1C:2A:07:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/vKgQ12Jb9ofSvR9YSCXLzDjpwd0.asa
Signing time:             Wed 15 Apr 2026 10:32:19 +0000
ASPA not before:          Wed 15 Apr 2026 10:32:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39557
Providers:                AS: 15713
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:90:b2:f3:c9:49:ad:09:8d:9c:d4:78:2e:e5:9f:58:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ef8c7f2cbae9ab2c8f9de4938b6ec71c2a07c6
        Validity
            Not Before: Apr 15 10:32:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bca810d7625bf687d2bd1f584825cbcc38e9c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:61:e1:f4:e2:57:a4:b7:e0:45:6d:20:3b:
                    e0:55:1d:57:88:a1:e3:cb:73:c1:b3:e3:93:9a:23:
                    fa:71:42:8d:61:bb:3a:fc:b9:24:3b:1d:54:3b:f5:
                    79:5a:7c:bf:c6:6a:74:10:54:44:25:a6:c7:6c:aa:
                    97:dd:32:e0:28:f5:b5:d6:50:17:f5:8d:b5:f6:fc:
                    5d:0e:61:8b:ca:f6:41:67:3f:80:a9:3b:dc:2a:f0:
                    2e:33:cc:4f:85:86:1a:4e:c2:66:75:18:fc:3e:06:
                    9d:4c:8b:15:e3:60:b0:ac:67:bc:9f:2d:d1:4c:0d:
                    37:a6:9f:76:a4:eb:c7:bb:de:7b:7d:6f:dc:11:e1:
                    7b:90:c1:71:4b:a2:6e:ad:8b:f6:6f:e5:11:f5:36:
                    0c:ee:c9:3b:96:80:1f:5b:59:69:e5:38:88:c4:8f:
                    25:0b:8f:f2:98:31:77:dd:23:cc:6e:07:05:5f:e1:
                    76:24:d2:d6:94:34:35:75:40:7f:42:bf:b2:ed:9f:
                    c0:79:2e:36:48:26:1a:60:05:b3:17:61:7b:e3:14:
                    7d:18:bc:3f:2d:c5:4e:d0:31:d7:f9:b0:61:b7:56:
                    5c:87:70:27:d5:95:5c:b3:13:e3:7b:50:6e:a1:70:
                    49:9a:38:04:1f:36:a7:38:d5:8d:6e:91:65:cd:da:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A8:10:D7:62:5B:F6:87:D2:BD:1F:58:48:25:CB:CC:38:E9:C1:DD
            X509v3 Authority Key Identifier:
                keyid:31:EF:8C:7F:2C:BA:E9:AB:2C:8F:9D:E4:93:8B:6E:C7:1C:2A:07:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/vKgQ12Jb9ofSvR9YSCXLzDjpwd0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39557

    Signature Algorithm: sha256WithRSAEncryption
         86:10:47:89:c4:4e:21:ee:ad:6d:5e:e4:4f:53:c1:d6:a5:df:
         1c:d4:b5:46:c3:26:08:e9:46:9c:0d:44:38:ca:0c:11:ad:07:
         5f:11:27:a2:d4:a4:4e:d7:59:82:03:45:90:2a:f0:15:ff:56:
         fd:fc:3a:4a:ff:3c:30:40:fd:3a:f2:be:f1:e3:d0:7b:89:33:
         03:1e:e7:08:37:0a:d1:45:ae:a7:1f:39:74:ed:3a:b1:2a:26:
         ac:8c:c2:7e:17:1e:6f:28:f8:a1:de:f4:92:14:0f:ea:5b:2e:
         28:8a:fe:52:d8:c2:63:8f:b8:1a:a9:0b:5e:5d:25:79:1e:a9:
         c2:b9:ee:bb:20:f4:42:51:9c:35:d2:30:58:c5:1f:23:f4:b2:
         d4:b4:be:93:89:29:d6:75:26:45:d3:97:05:97:4e:49:e1:65:
         d8:90:49:59:57:7f:5e:c8:23:14:ea:cc:41:01:ab:05:dd:f5:
         25:a8:4d:8e:37:de:5b:88:26:9b:32:29:d1:a5:6b:bc:89:c8:
         09:2e:db:1a:18:23:93:9a:86:9b:f3:59:5f:1b:b6:51:15:46:
         2e:7b:7b:cd:81:1d:c3:d5:aa:89:9b:5f:a5:60:ce:8a:c7:e9:
         e0:49:6a:94:b3:28:56:bb:f1:4b:20:16:76:68:67:39:42:69:
         77:4f:04:ec
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ2QsvPJSa0JjZzUeC7ln1iGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZWY4YzdmMmNiYWU5YWIyYzhmOWRlNDkzOGI2ZWM3MWMy
YTA3YzYwHhcNMjYwNDE1MTAzMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2E4MTBkNzYyNWJmNjg3ZDJiZDFmNTg0ODI1Y2JjYzM4ZTljMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn9h4fTiV6S34EVtIDvgVR1XiKHj
y3PBs+OTmiP6cUKNYbs6/LkkOx1UO/V5Wny/xmp0EFREJabHbKqX3TLgKPW11lAX
9Y219vxdDmGLyvZBZz+AqTvcKvAuM8xPhYYaTsJmdRj8PgadTIsV42CwrGe8ny3R
TA03pp92pOvHu957fW/cEeF7kMFxS6JurYv2b+UR9TYM7sk7loAfW1lp5TiIxI8l
C4/ymDF33SPMbgcFX+F2JNLWlDQ1dUB/Qr+y7Z/AeS42SCYaYAWzF2F74xR9GLw/
LcVO0DHX+bBht1Zch3An1ZVcsxPje1BuoXBJmjgEHzanONWNbpFlzdp8IwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLyoENdiW/aH0r0fWEgly8w46cHdMB8GA1UdIwQY
MBaAFDHvjH8suumrLI+d5JOLbsccKgfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWUtTWZ5eTY2YXNzajUza2s0dHV4eHdxQjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTA5OGItZTEyMi00ZDFkLTkxMjYt
M2JhN2NmZWRhOGE1LzEvdktnUTEySmI5b2ZTdlI5WVNDWEx6RGpwd2QwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZTA5OGItZTEyMi00ZDFkLTkxMjYtM2JhN2NmZWRhOGE1
LzEvTWUtTWZ5eTY2YXNzajUza2s0dHV4eHdxQjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCahTANBgkqhkiG
9w0BAQsFAAOCAQEAhhBHicROIe6tbV7kT1PB1qXfHNS1RsMmCOlGnA1EOMoMEa0H
XxEnotSkTtdZggNFkCrwFf9W/fw6Sv88MED9OvK+8ePQe4kzAx7nCDcK0UWupx85
dO06sSomrIzCfhcebyj4od70khQP6lsuKIr+UtjCY4+4GqkLXl0leR6pwrnuuyD0
QlGcNdIwWMUfI/Sy1LS+k4kp1nUmRdOXBZdOSeFl2JBJWVd/XsgjFOrMQQGrBd31
JahNjjfeW4gmmzIp0aVrvInICS7bGhgjk5qGm/NZXxu2URVGLnt7zYEdw9WqiZtf
pWDOisfp4ElqlLMoVrvxSyAWdmhnOUJpd08E7A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:14 2026 by rpki-client