Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/b0w2NwRKZd0v1YirWaHR-yonRpM.asa
File:                     b0w2NwRKZd0v1YirWaHR-yonRpM.asa (raw, json)
Hash identifier:          Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=
Subject key identifier:   6F:4C:36:37:04:4A:65:DD:2F:D5:88:AB:59:A1:D1:FB:2A:27:46:93
Certificate issuer:       /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial:       019F236891209C8B1064DA2557B8549F3B5F
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/b0w2NwRKZd0v1YirWaHR-yonRpM.asa
Signing time:             Thu 02 Jul 2026 15:18:03 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206867
Providers:                AS: 5602
                          AS: 12874
                          AS: 49979
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:91:20:9c:8b:10:64:da:25:57:b8:54:9f:3b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
        Validity
            Not Before: Jul  2 15:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f4c3637044a65dd2fd588ab59a1d1fb2a274693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:dc:a5:2a:54:c8:a7:67:42:3a:6f:44:52:
                    3c:37:df:fc:26:5c:64:14:d5:56:56:bc:80:f1:97:
                    1d:30:fe:86:ca:f9:bc:cc:b8:1d:18:bb:e6:18:6b:
                    35:40:26:f3:8b:3f:b0:aa:8c:1f:4d:71:1f:7f:5e:
                    3c:df:98:84:4e:2a:01:33:af:fa:0f:f6:0c:08:8a:
                    76:84:db:c0:5b:57:84:98:f8:dc:7d:aa:b9:1c:bf:
                    53:0d:62:ce:3b:74:b3:c8:03:5e:15:1d:df:fa:02:
                    0b:e7:bb:2c:b3:9d:3f:d3:68:23:ec:8b:6c:d7:d5:
                    a3:68:87:73:dd:2e:fd:2e:eb:b2:fc:63:15:67:4b:
                    3d:c6:e8:e2:54:51:a0:e8:77:f2:d8:0b:87:57:d7:
                    c5:c0:e5:52:07:78:ce:06:59:c8:03:a8:2a:4b:d8:
                    b5:16:5a:ec:e5:4d:b0:75:33:96:78:19:a4:81:0c:
                    32:a0:02:6f:52:f0:e6:e2:5c:8b:b0:54:28:09:9d:
                    16:9d:a2:95:e8:63:7f:f6:18:d2:1a:6a:30:76:12:
                    92:d8:3e:5a:79:02:59:30:97:00:81:0e:77:6b:5a:
                    27:e6:96:be:bb:27:ed:f8:1a:85:86:e6:2e:1f:6b:
                    3d:5e:74:be:52:c0:22:be:0d:f9:8a:8d:10:97:32:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:36:37:04:4A:65:DD:2F:D5:88:AB:59:A1:D1:FB:2A:27:46:93
            X509v3 Authority Key Identifier:
                keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/b0w2NwRKZd0v1YirWaHR-yonRpM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206867

    Signature Algorithm: sha256WithRSAEncryption
         40:09:d1:b1:d4:bf:45:35:31:57:73:5c:49:18:d0:18:34:88:
         6d:eb:90:5e:90:26:e7:3b:30:a1:b2:98:5b:0e:33:93:45:85:
         b6:75:a2:19:83:0b:27:24:7b:c8:dc:4c:b8:61:d1:53:19:d2:
         d7:7a:01:ba:d6:9f:d0:c4:60:65:00:84:35:10:24:4c:fb:89:
         e6:14:9a:4c:5e:83:f1:e6:d4:7b:ea:07:97:b3:70:91:d3:0d:
         4e:60:ff:48:7a:96:bf:17:89:65:6e:d0:19:c7:c6:20:54:64:
         f6:5a:f9:87:82:d7:e9:68:e3:9b:47:19:f3:6e:9d:13:7a:77:
         c1:85:c4:19:65:cc:a5:48:5b:ff:cc:01:84:3b:bc:9b:49:3e:
         f9:c6:8a:90:45:12:c5:a0:ae:8b:15:f9:e9:6e:b4:4b:8d:fe:
         b3:c1:dd:43:79:f5:fc:49:db:12:ba:61:de:2a:40:f1:2a:64:
         93:0b:5c:94:24:f4:23:dc:81:b8:9c:82:4c:06:22:c0:ab:f4:
         07:a7:27:de:53:f3:9a:8a:e9:16:7a:b6:cb:f0:95:00:d0:1d:
         39:c3:75:7e:97:7a:9c:be:96:31:6b:29:5d:5e:fd:63:88:31:
         6a:4f:f7:e8:0a:0b:ea:20:c8:c9:f5:a3:99:17:8f:c4:2f:84:
         33:e1:68:f0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8jaJEgnIsQZNolV7hUnztfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmY1NjY5Zjk4Y2ZkNTA0ZTRhOWQwZTkyNzQyN2M1MDNl
MzM3OTYwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjRjMzYzNzA0NGE2NWRkMmZkNTg4YWI1OWExZDFmYjJhMjc0NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32jcpSpUyKdnQjpvRFI8N9/8Jlxk
FNVWVryA8ZcdMP6Gyvm8zLgdGLvmGGs1QCbziz+wqowfTXEff14835iETioBM6/6
D/YMCIp2hNvAW1eEmPjcfaq5HL9TDWLOO3SzyANeFR3f+gIL57sss50/02gj7Its
19WjaIdz3S79Luuy/GMVZ0s9xujiVFGg6Hfy2AuHV9fFwOVSB3jOBlnIA6gqS9i1
Flrs5U2wdTOWeBmkgQwyoAJvUvDm4lyLsFQoCZ0WnaKV6GN/9hjSGmowdhKS2D5a
eQJZMJcAgQ53a1on5pa+uyft+BqFhuYuH2s9XnS+UsAivg35io0QlzLYAQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFG9MNjcESmXdL9WIq1mh0fsqJ0aTMB8GA1UdIwQY
MBaAFDcvVmn5jP1QTkqdDpJ0J8UD4zeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQt
OGQwNmQ4YzBlM2MxLzEvYjB3Mk53UktaZDB2MVlpcldhSFIteW9uUnBNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQtOGQwNmQ4YzBlM2Mx
LzEvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoEzANBgkqhkiG
9w0BAQsFAAOCAQEAQAnRsdS/RTUxV3NcSRjQGDSIbeuQXpAm5zswobKYWw4zk0WF
tnWiGYMLJyR7yNxMuGHRUxnS13oButaf0MRgZQCENRAkTPuJ5hSaTF6D8ebUe+oH
l7NwkdMNTmD/SHqWvxeJZW7QGcfGIFRk9lr5h4LX6Wjjm0cZ826dE3p3wYXEGWXM
pUhb/8wBhDu8m0k++caKkEUSxaCuixX56W60S43+s8HdQ3n1/EnbErph3ipA8Spk
kwtclCT0I9yBuJyCTAYiwKv0B6cn3lPzmorpFnq2y/CVANAdOcN1fpd6nL6WMWsp
XV79Y4gxak/36AoL6iDIyfWjmRePxC+EM+Fo8A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:17 2026 by rpki-client