Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa
File:                     qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa (raw, json)
Hash identifier:          R4ifag0KL4ofvb+CfHhgXUOYRgZ/gtNDck18NNBrhqc=
Subject key identifier:   AA:36:89:1F:0C:DC:D5:6F:B0:1C:9E:64:BB:1A:8E:99:6E:F8:1B:FB
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       019F19014BAB38B916AA89081B3DE629F5DC
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197885
Providers:                AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4b:ab:38:b9:16:aa:89:08:1b:3d:e6:29:f5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa36891f0cdcd56fb01c9e64bb1a8e996ef81bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:a0:8f:df:66:54:ce:17:0c:86:06:16:be:
                    d0:bc:92:0b:01:fe:b1:2e:c6:bf:b2:da:0c:00:6f:
                    13:e3:32:13:6b:9c:e0:e2:9a:1b:c6:3e:ce:a7:df:
                    da:11:22:84:3a:88:1c:f5:12:a1:ef:64:19:ad:3c:
                    e7:4a:12:99:83:ef:ea:aa:cb:fe:df:49:ca:dd:78:
                    96:2d:d0:44:d8:5e:53:2a:e1:29:db:f9:56:29:fd:
                    6a:93:6a:a9:d4:77:bf:4b:19:67:9d:f4:03:97:01:
                    c7:72:39:87:c7:90:35:2b:4a:13:8a:ba:c1:ce:da:
                    e9:fc:1b:8a:25:05:69:86:7e:50:b4:f3:3a:fb:44:
                    a5:82:20:f0:02:ba:26:f7:e7:dd:d0:97:51:6c:66:
                    3c:74:3b:9e:91:83:29:dd:9f:63:05:56:63:80:f2:
                    a3:f1:cb:fe:60:45:4f:b0:ba:f7:a0:cc:5a:7f:61:
                    56:a8:1b:f4:69:35:fc:c9:4c:36:ee:cc:11:81:c4:
                    f8:64:36:00:af:8d:40:21:6b:46:9a:86:6f:6c:ac:
                    51:bc:4b:c5:21:43:78:d9:cb:16:b3:c2:c4:ec:de:
                    d6:5a:c6:34:9e:32:60:0e:f2:fb:ff:1a:c0:ab:24:
                    0d:2b:9b:57:60:ca:11:18:a7:f5:72:4e:7d:4a:48:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:36:89:1F:0C:DC:D5:6F:B0:1C:9E:64:BB:1A:8E:99:6E:F8:1B:FB
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197885

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:ba:a6:47:c7:e0:99:41:e4:8d:af:41:34:c5:af:ba:b2:
         80:28:bc:3a:b2:de:d7:98:ec:85:be:16:cc:46:f7:70:93:4f:
         49:80:d8:62:eb:66:8b:30:bf:a1:e3:21:e5:5e:aa:1a:a4:0b:
         1a:75:ab:3b:79:18:91:fd:8a:d3:82:b7:95:e4:eb:57:89:51:
         89:5c:34:b3:25:d6:29:19:ba:2d:30:fd:13:ee:a2:ed:c2:60:
         10:49:6c:fd:8f:61:4b:a9:63:81:75:d1:a6:7d:3a:db:d6:d5:
         47:2f:9c:cf:15:8c:23:28:5a:d9:4f:79:46:6f:40:a3:cc:18:
         90:12:26:c7:b5:b1:d6:e6:62:6d:e9:17:c0:98:32:eb:ea:2a:
         cc:65:c2:06:a4:19:08:07:50:68:7a:1e:b4:8e:d9:dd:82:ab:
         51:88:6d:bd:91:3e:41:bc:c7:c2:64:64:de:57:ce:e7:b5:fb:
         7e:0a:df:43:e6:02:24:13:dd:96:9d:24:7c:ea:f2:eb:5b:84:
         f5:bc:16:32:e3:5e:c1:d6:6d:9f:49:fe:84:92:dd:e4:3f:8b:
         38:90:f9:d4:1a:ff:c5:d8:fc:1f:81:9a:06:5f:0f:9a:b5:fe:
         eb:92:b1:00:79:ca:50:2d:39:6b:63:e8:81:ec:6c:ab:15:c2:
         8a:0c:c2:2f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAUurOLkWqokIGz3mKfXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjYwNjMwMTQ0OTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTM2ODkxZjBjZGNkNTZmYjAxYzllNjRiYjFhOGU5OTZlZjgxYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt86gj99mVM4XDIYGFr7QvJILAf6x
Lsa/stoMAG8T4zITa5zg4pobxj7Op9/aESKEOogc9RKh72QZrTznShKZg+/qqsv+
30nK3XiWLdBE2F5TKuEp2/lWKf1qk2qp1He/SxlnnfQDlwHHcjmHx5A1K0oTirrB
ztrp/BuKJQVphn5QtPM6+0SlgiDwArom9+fd0JdRbGY8dDuekYMp3Z9jBVZjgPKj
8cv+YEVPsLr3oMxaf2FWqBv0aTX8yUw27swRgcT4ZDYAr41AIWtGmoZvbKxRvEvF
IUN42csWs8LE7N7WWsY0njJgDvL7/xrAqyQNK5tXYMoRGKf1ck59SkikkwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKo2iR8M3NVvsByeZLsajplu+Bv7MB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvcWphSkh3emMxVy13SEo1a3V4cU9tVzc0R19zLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwME/TANBgkqhkiG
9w0BAQsFAAOCAQEACK26pkfH4JlB5I2vQTTFr7qygCi8OrLe15jshb4WzEb3cJNP
SYDYYutmizC/oeMh5V6qGqQLGnWrO3kYkf2K04K3leTrV4lRiVw0syXWKRm6LTD9
E+6i7cJgEEls/Y9hS6ljgXXRpn0629bVRy+czxWMIyha2U95Rm9Ao8wYkBImx7Wx
1uZibekXwJgy6+oqzGXCBqQZCAdQaHoetI7Z3YKrUYhtvZE+QbzHwmRk3lfO57X7
fgrfQ+YCJBPdlp0kfOry61uE9bwWMuNewdZtn0n+hJLd5D+LOJD51Br/xdj8H4Ga
Bl8PmrX+65KxAHnKUC05a2PogexsqxXCigzCLw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:06 2026 by rpki-client