Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/6jLG6sHP0uH-VWDXC-aY6pQShTw.asa
File:                     6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (raw, json)
Hash identifier:          uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=
Subject key identifier:   EA:32:C6:EA:C1:CF:D2:E1:FE:55:60:D7:0B:E6:98:EA:94:12:85:3C
Certificate issuer:       /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial:       019D1AB25C5CE61FA4607E3FA8791D2CD374
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/6jLG6sHP0uH-VWDXC-aY6pQShTw.asa
Signing time:             Mon 23 Mar 2026 12:36:29 +0000
ASPA not before:          Mon 23 Mar 2026 12:36:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199958
Providers:                AS: 34224
                          AS: 57463
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:b2:5c:5c:e6:1f:a4:60:7e:3f:a8:79:1d:2c:d3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
        Validity
            Not Before: Mar 23 12:36:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea32c6eac1cfd2e1fe5560d70be698ea9412853c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:85:fc:7e:00:0f:e0:41:d0:0d:ca:5a:70:
                    69:91:f4:95:c3:1c:21:ea:9a:9d:77:4c:2c:d9:83:
                    61:7d:32:db:51:08:33:8e:60:79:78:8e:f4:7d:e2:
                    46:83:82:2c:f8:37:2e:b2:0b:20:45:8d:de:4d:94:
                    53:f4:f4:69:6c:6c:91:af:66:1d:74:89:9c:04:00:
                    d0:7b:f6:d9:a6:14:60:51:37:81:97:9a:2b:6e:2c:
                    e3:6b:27:ec:84:2f:9e:7f:6f:e3:d5:a9:86:22:6b:
                    ea:7e:66:32:61:73:2e:3b:5f:11:46:b8:c3:6e:86:
                    cb:dc:cb:7e:5d:08:7a:c0:99:00:d7:b3:f0:52:80:
                    aa:0a:1d:f4:b5:bb:94:41:19:68:81:ff:44:69:71:
                    d3:02:47:3b:fc:f8:94:44:68:39:55:3c:87:65:34:
                    6b:6b:2c:b3:f9:cd:a2:10:4e:a4:15:90:24:87:e0:
                    5a:fe:80:09:c4:03:7a:33:04:a7:e4:6d:64:58:33:
                    c0:12:b3:37:88:e7:ef:3c:c6:c9:5a:8b:07:87:0d:
                    af:66:2d:20:05:fd:5b:69:31:2f:df:ce:50:2a:72:
                    90:23:f2:64:f9:ed:2a:cd:15:24:0f:4f:64:05:96:
                    bc:f7:8d:8f:1d:7c:5d:f5:6a:d3:cb:a7:7b:e5:ba:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:32:C6:EA:C1:CF:D2:E1:FE:55:60:D7:0B:E6:98:EA:94:12:85:3C
            X509v3 Authority Key Identifier:
                keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/6jLG6sHP0uH-VWDXC-aY6pQShTw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199958

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:a1:2f:f8:db:21:4f:cb:0a:23:83:43:41:5c:70:03:db:
         11:24:30:27:34:46:a3:8f:fa:51:0d:02:25:90:45:6b:61:f1:
         90:c7:50:07:b2:a1:cf:d3:1a:2a:bc:f5:76:5a:fb:54:d6:da:
         35:4b:eb:69:53:cf:0f:d0:a3:25:13:c9:5f:48:e6:71:48:76:
         f1:ec:a0:1e:32:fa:b0:2d:59:88:82:f0:92:40:30:1a:c4:70:
         9b:d0:5a:62:66:c2:12:7c:71:06:35:b6:d6:8e:9a:87:b6:c9:
         6d:4f:c6:ba:26:01:07:6e:13:f1:fe:2d:fb:6a:9b:2d:0f:86:
         cc:f5:d0:db:1c:e5:c8:f8:da:5d:d6:99:7a:2d:2f:b0:0e:99:
         c0:c4:75:07:82:10:0b:d0:b7:87:78:0c:3e:e9:6e:7f:ae:b8:
         8e:10:84:03:5c:26:56:90:f7:ae:78:02:73:8b:6f:d6:df:4d:
         7f:04:ea:2a:e9:89:b5:7d:b6:0c:c1:f9:2b:b2:35:00:11:da:
         a6:af:3b:49:0d:de:a1:bb:56:c5:3d:17:30:8e:ac:8c:45:b2:
         cb:f4:ac:32:cd:5e:3d:9f:b1:dc:96:33:c2:80:d4:10:88:52:
         57:30:5b:0e:e3:95:05:64:ab:5f:81:fc:87:01:c2:1c:3c:cf:
         c1:85:44:14
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0aslxc5h+kYH4/qHkdLNN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODRjYWM5MmE5ZjMxMzQ5NDgxYTY4ZTk1MWJjNTVhZjUw
OGYyZTYwHhcNMjYwMzIzMTIzNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMyYzZlYWMxY2ZkMmUxZmU1NTYwZDcwYmU2OThlYTk0MTI4NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiyF/H4AD+BB0A3KWnBpkfSVwxwh
6pqdd0ws2YNhfTLbUQgzjmB5eI70feJGg4Is+DcusgsgRY3eTZRT9PRpbGyRr2Yd
dImcBADQe/bZphRgUTeBl5orbizjayfshC+ef2/j1amGImvqfmYyYXMuO18RRrjD
bobL3Mt+XQh6wJkA17PwUoCqCh30tbuUQRlogf9EaXHTAkc7/PiURGg5VTyHZTRr
ayyz+c2iEE6kFZAkh+Ba/oAJxAN6MwSn5G1kWDPAErM3iOfvPMbJWosHhw2vZi0g
Bf1baTEv385QKnKQI/Jk+e0qzRUkD09kBZa8942PHXxd9WrTy6d75bqX6wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOoyxurBz9Lh/lVg1wvmmOqUEoU8MB8GA1UdIwQY
MBaAFK+EyskqnzE0lIGmjpUbxVr1CPLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRUS3lTcWZNVFNVZ2FhT2xSdkZXdlVJOHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZGExYTAtNDRmMS00NWQ1LWE0NzMt
MzYxOGU1MDNmMjFmLzEvNmpMRzZzSFAwdUgtVldEWEMtYVk2cFFTaFR3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZGExYTAtNDRmMS00NWQ1LWE0NzMtMzYxOGU1MDNmMjFm
LzEvcjRUS3lTcWZNVFNVZ2FhT2xSdkZXdlVJOHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNFjANBgkqhkiG
9w0BAQsFAAOCAQEAjgehL/jbIU/LCiODQ0FccAPbESQwJzRGo4/6UQ0CJZBFa2Hx
kMdQB7Khz9MaKrz1dlr7VNbaNUvraVPPD9CjJRPJX0jmcUh28eygHjL6sC1ZiILw
kkAwGsRwm9BaYmbCEnxxBjW21o6ah7bJbU/GuiYBB24T8f4t+2qbLQ+GzPXQ2xzl
yPjaXdaZei0vsA6ZwMR1B4IQC9C3h3gMPuluf664jhCEA1wmVpD3rngCc4tv1t9N
fwTqKumJtX22DMH5K7I1ABHapq87SQ3eobtWxT0XMI6sjEWyy/SsMs1ePZ+x3JYz
woDUEIhSVzBbDuOVBWSrX4H8hwHCHDzPwYVEFA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:58 2026 by rpki-client