Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/egiEHr2WR8rBb2S9AoXjNrRe6SI.asa
File:                     egiEHr2WR8rBb2S9AoXjNrRe6SI.asa (raw, json)
Hash identifier:          +F1NPoSJ7zieN8nKd424PJvQQuv32Y1xryB26LSSqhk=
Subject key identifier:   7A:08:84:1E:BD:96:47:CA:C1:6F:64:BD:02:85:E3:36:B4:5E:E9:22
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019F19014C11A5AD7F936487130A674EE4CA
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/egiEHr2WR8rBb2S9AoXjNrRe6SI.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41731
Providers:                AS: 196610
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4c:11:a5:ad:7f:93:64:87:13:0a:67:4e:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a08841ebd9647cac16f64bd0285e336b45ee922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:85:27:e9:cc:02:f4:74:0e:45:da:fb:45:
                    99:b2:f4:07:d6:cd:4d:cd:31:b0:44:25:fc:10:16:
                    5c:fb:d0:07:d6:9e:39:e8:23:36:c3:7f:09:3c:25:
                    a5:36:b5:85:ea:fb:43:86:fc:ab:39:b0:fe:7e:35:
                    4b:c8:8e:fb:49:85:f4:92:c0:89:f4:d7:f6:c0:37:
                    11:a6:87:62:ec:89:a5:7e:4a:2e:4d:82:fb:08:37:
                    72:34:6b:7b:b5:e9:5d:bf:80:ee:ca:38:b3:e5:89:
                    cb:c0:77:c7:72:4f:0c:ac:e5:54:0c:5b:ac:47:3c:
                    32:ac:18:4f:50:2b:f5:ab:27:e8:b1:62:bb:94:04:
                    cc:9a:18:6f:e7:4d:85:3c:56:95:ff:a1:be:52:15:
                    96:b3:0e:06:58:be:85:76:82:f0:2b:2b:9e:ef:8e:
                    88:c5:ce:32:b9:d9:91:e9:db:ed:29:40:ea:23:2a:
                    9f:88:2b:6c:80:d0:b5:9c:8d:18:80:67:7d:a6:86:
                    f9:6b:25:ea:31:e3:0a:22:18:64:6c:1e:13:86:6c:
                    f3:69:cb:46:b6:a5:b9:ba:7e:a5:91:d6:79:14:87:
                    c5:e5:51:c7:09:97:dc:c7:8e:31:d5:15:7b:7a:01:
                    e0:f7:2b:d4:09:d8:07:ac:29:eb:a6:a4:78:51:cf:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:84:1E:BD:96:47:CA:C1:6F:64:BD:02:85:E3:36:B4:5E:E9:22
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/egiEHr2WR8rBb2S9AoXjNrRe6SI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41731

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:ba:f8:21:ef:54:68:51:d8:78:b5:d3:95:97:0e:2b:f6:
         23:92:0d:39:d4:ca:43:5b:0c:bf:87:15:28:59:32:6f:82:b7:
         fb:76:02:7c:5e:63:6c:ae:e4:5d:46:d9:80:8f:e5:f0:7f:5d:
         63:37:a8:8a:94:34:1d:91:e1:ac:48:ae:ef:68:87:76:96:fe:
         63:c9:99:7b:e1:57:75:90:e9:d1:a6:c7:5a:0d:d7:e5:ea:18:
         64:b0:b1:59:70:65:3b:14:6d:31:28:3c:14:7c:d3:fc:26:3a:
         ec:22:d1:90:ee:1c:bf:28:ec:80:e4:b8:1e:4a:c7:1b:dc:e9:
         75:b1:fc:8c:06:d5:c4:08:f7:dd:6a:2a:98:60:c1:90:12:67:
         86:19:b8:a0:e4:e9:89:c7:2f:54:0b:be:bf:30:51:c6:f7:e0:
         2c:1d:03:67:5d:cd:c2:90:92:bc:cc:54:2c:44:d5:ec:3b:04:
         b6:f8:3c:d4:25:07:0b:3d:0e:66:0c:b2:a6:c2:10:2a:86:10:
         76:1f:ca:8d:78:3a:0c:b2:72:33:78:3a:3c:0e:10:82:a4:5c:
         bd:03:43:dc:36:ac:f1:d5:03:88:a7:cc:37:b4:56:0a:db:e8:
         23:a1:c7:74:8d:a9:c0:c9:eb:59:d1:72:ac:a2:61:60:d5:ba:
         de:0b:07:12
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAUwRpa1/k2SHEwpnTuTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYwNjMwMTQ0OTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTA4ODQxZWJkOTY0N2NhYzE2ZjY0YmQwMjg1ZTMzNmI0NWVlOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHuFJ+nMAvR0DkXa+0WZsvQH1s1N
zTGwRCX8EBZc+9AH1p456CM2w38JPCWlNrWF6vtDhvyrObD+fjVLyI77SYX0ksCJ
9Nf2wDcRpodi7ImlfkouTYL7CDdyNGt7teldv4Duyjiz5YnLwHfHck8MrOVUDFus
RzwyrBhPUCv1qyfosWK7lATMmhhv502FPFaV/6G+UhWWsw4GWL6FdoLwKyue746I
xc4yudmR6dvtKUDqIyqfiCtsgNC1nI0YgGd9pob5ayXqMeMKIhhkbB4ThmzzactG
tqW5un6lkdZ5FIfF5VHHCZfcx44x1RV7egHg9yvUCdgHrCnrpqR4Uc81kQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHoIhB69lkfKwW9kvQKF4za0XukiMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvZWdpRUhyMldSOHJCYjJTOUFvWGpOclJlNlNJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCjAzANBgkqhkiG
9w0BAQsFAAOCAQEAYOy6+CHvVGhR2Hi105WXDiv2I5INOdTKQ1sMv4cVKFkyb4K3
+3YCfF5jbK7kXUbZgI/l8H9dYzeoipQ0HZHhrEiu72iHdpb+Y8mZe+FXdZDp0abH
Wg3X5eoYZLCxWXBlOxRtMSg8FHzT/CY67CLRkO4cvyjsgOS4HkrHG9zpdbH8jAbV
xAj33WoqmGDBkBJnhhm4oOTpiccvVAu+vzBRxvfgLB0DZ13NwpCSvMxULETV7DsE
tvg81CUHCz0OZgyypsIQKoYQdh/KjXg6DLJyM3g6PA4QgqRcvQND3Das8dUDiKfM
N7RWCtvoI6HHdI2pwMnrWdFyrKJhYNW63gsHEg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:25 2026 by rpki-client