Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa
File:                     F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (raw, json)
Hash identifier:          wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=
Subject key identifier:   17:97:4A:AC:C5:70:BC:50:6B:7F:3F:20:93:65:73:F7:0E:42:4D:5F
Certificate issuer:       /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial:       019D714ACA0F3910246285A868D900E06392
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa
Signing time:             Thu 09 Apr 2026 08:10:19 +0000
ASPA not before:          Thu 09 Apr 2026 08:10:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212022
Providers:                AS: 20485
                          AS: 41794
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:71:4a:ca:0f:39:10:24:62:85:a8:68:d9:00:e0:63:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
        Validity
            Not Before: Apr  9 08:10:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17974aacc570bc506b7f3f20936573f70e424d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:25:8e:7c:d9:b9:c3:95:24:2b:dd:da:3b:
                    a1:08:ee:a3:27:b3:11:79:de:b4:5b:27:78:9f:76:
                    9f:a0:b7:89:68:c2:26:63:20:70:b9:7d:d3:7e:e0:
                    a2:bc:aa:41:91:4e:d6:33:d9:e1:f1:46:38:2d:ac:
                    fe:1f:b5:25:d5:80:27:bc:0a:4a:e8:a7:9b:d6:0b:
                    ed:c7:ae:3c:d1:1c:49:34:c2:8b:09:8a:e2:11:a5:
                    f7:23:4a:05:20:25:ca:6f:8f:f1:af:d0:97:c8:97:
                    65:4a:a5:9d:7c:f2:1a:1a:9e:60:f7:4f:9d:28:96:
                    ad:00:41:31:53:cb:ab:09:a3:eb:d6:2b:cd:7e:0f:
                    ee:15:82:55:cb:70:df:33:63:b5:22:1e:c6:cf:87:
                    0e:01:67:ba:ab:b8:e8:d5:da:df:42:03:ba:16:38:
                    f5:d7:50:c6:ea:d7:a0:e8:6d:f0:15:c6:39:e7:92:
                    f4:e1:8d:05:4f:3d:21:e1:7c:a3:f7:99:db:92:c0:
                    7c:8d:f2:ac:f1:80:11:86:a7:69:9f:bc:95:98:e9:
                    50:86:9a:84:6b:4a:c4:87:77:03:6e:17:0d:ea:6b:
                    2c:d1:19:ad:7e:77:7d:65:bc:fa:a1:f3:4d:27:e3:
                    3e:d4:fe:09:3c:ee:d8:8b:e0:56:23:99:4e:1e:67:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:97:4A:AC:C5:70:BC:50:6B:7F:3F:20:93:65:73:F7:0E:42:4D:5F
            X509v3 Authority Key Identifier:
                keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212022

    Signature Algorithm: sha256WithRSAEncryption
         23:62:a5:71:e5:19:b8:df:b1:91:81:cb:fb:e9:ad:41:51:ea:
         bb:c6:6f:cc:6a:ce:b8:9d:5b:a1:6d:74:25:70:42:24:8d:16:
         08:01:2d:9c:c7:1e:ca:f6:ce:24:bc:bf:6b:c9:65:3f:35:10:
         d0:56:ba:26:7c:4d:9c:02:87:35:80:c1:5c:ec:6b:2b:fd:f6:
         dc:f2:1d:8d:71:50:a4:96:7f:55:d9:ce:c7:2b:f3:1d:b6:80:
         b3:05:69:07:35:29:27:e8:4d:bb:91:20:eb:ab:ac:3b:a5:a1:
         05:3c:57:54:a1:77:88:e1:cd:3a:fb:c7:77:35:c7:ca:03:a2:
         98:17:b5:29:d7:ea:da:de:db:95:87:a9:fb:67:96:a3:62:8d:
         7f:f4:6a:71:ed:06:7d:6b:4f:7d:8c:76:ff:aa:6b:33:c3:fc:
         08:cb:ae:c0:76:2a:06:ce:ee:55:7e:77:ad:e6:a6:27:cb:8e:
         46:cd:17:ca:22:ce:5e:44:1d:0b:24:ac:62:a2:e2:9d:74:b1:
         3a:1d:a3:9d:c7:70:d0:a9:9e:af:b1:1a:6b:8b:a7:3f:6c:d0:
         e5:4c:9f:8e:92:8e:bc:0c:2a:47:3d:38:fb:57:45:8b:9c:17:
         c5:12:09:31:99:62:91:69:21:f6:9b:ec:3c:5f:ec:c9:34:7d:
         2e:0a:11:2f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1xSsoPORAkYoWoaNkA4GOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzgyOTNhOTkwMDlkM2FmOTkwMTAzMGIxODRkYWRhMDFi
MGIyOWIwHhcNMjYwNDA5MDgxMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk3NGFhY2M1NzBiYzUwNmI3ZjNmMjA5MzY1NzNmNzBlNDI0ZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z4ljnzZucOVJCvd2juhCO6jJ7MR
ed60Wyd4n3afoLeJaMImYyBwuX3TfuCivKpBkU7WM9nh8UY4Laz+H7Ul1YAnvApK
6Keb1gvtx6480RxJNMKLCYriEaX3I0oFICXKb4/xr9CXyJdlSqWdfPIaGp5g90+d
KJatAEExU8urCaPr1ivNfg/uFYJVy3DfM2O1Ih7Gz4cOAWe6q7jo1drfQgO6Fjj1
11DG6teg6G3wFcY555L04Y0FTz0h4Xyj95nbksB8jfKs8YARhqdpn7yVmOlQhpqE
a0rEh3cDbhcN6mss0Rmtfnd9Zbz6ofNNJ+M+1P4JPO7Yi+BWI5lOHmfH4QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBeXSqzFcLxQa38/IJNlc/cOQk1fMB8GA1UdIwQY
MBaAFIPIKTqZAJ06+ZAQMLGE2toBsLKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYt
ZWIxMTdhZWUyY2MxLzEvRjVkS3JNVnd2RkJyZno4Z2syVno5dzVDVFY4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYtZWIxMTdhZWUyY2Mx
LzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8NjANBgkqhkiG
9w0BAQsFAAOCAQEAI2KlceUZuN+xkYHL++mtQVHqu8ZvzGrOuJ1boW10JXBCJI0W
CAEtnMceyvbOJLy/a8llPzUQ0Fa6JnxNnAKHNYDBXOxrK/323PIdjXFQpJZ/VdnO
xyvzHbaAswVpBzUpJ+hNu5Eg66usO6WhBTxXVKF3iOHNOvvHdzXHygOimBe1Kdfq
2t7blYep+2eWo2KNf/Rqce0GfWtPfYx2/6prM8P8CMuuwHYqBs7uVX53reamJ8uO
Rs0XyiLOXkQdCySsYqLinXSxOh2jncdw0Kmer7Eaa4unP2zQ5UyfjpKOvAwqRz04
+1dFi5wXxRIJMZlikWkh9pvsPF/syTR9LgoRLw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:41 2026 by rpki-client