Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/AVclKH5uCVBaYbA6dT0Au-UGS98.asa
File:                     AVclKH5uCVBaYbA6dT0Au-UGS98.asa (raw, json)
Hash identifier:          3xs/9Z38cKQ2dOzSR6cmn/M7dQXXeYoJHDHYFFYxRWY=
Subject key identifier:   01:57:25:28:7E:6E:09:50:5A:61:B0:3A:75:3D:00:BB:E5:06:4B:DF
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       019F19014E15A7BF84F0549930D7C9DCA60F
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/AVclKH5uCVBaYbA6dT0Au-UGS98.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196731
Providers:                AS: 3209
                          AS: 42184
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4e:15:a7:bf:84:f0:54:99:30:d7:c9:dc:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=015725287e6e09505a61b03a753d00bbe5064bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:7f:34:f3:02:f2:b2:39:ac:35:28:07:8d:
                    fd:12:72:22:90:66:07:1c:32:ce:3f:5a:7d:17:85:
                    f1:f7:03:41:74:e9:1e:43:03:0f:39:6b:1f:7b:38:
                    bd:de:fd:81:62:62:94:ee:61:6a:fe:1a:52:e7:15:
                    43:f9:77:f3:a1:49:e2:6c:ec:5b:57:1b:35:43:62:
                    35:ec:0c:16:61:cb:4b:26:b0:ac:f5:70:70:a1:5a:
                    1b:44:70:11:00:16:aa:4f:69:99:46:f5:75:35:18:
                    dc:d0:86:36:69:b8:83:ec:b8:ee:48:99:5f:90:39:
                    1b:06:d7:8b:5b:65:fe:e4:29:4a:70:cd:0b:88:14:
                    56:9e:7e:7e:0e:b5:e8:f1:8e:19:ce:fb:64:49:de:
                    c6:82:ff:04:0a:c5:72:64:3d:ed:25:88:9c:cd:65:
                    ce:7c:39:6b:ac:89:c8:94:a3:2c:78:e0:0b:fe:50:
                    cf:8c:6d:e4:e3:ab:99:9e:90:f5:1d:0e:47:86:44:
                    3f:aa:4a:b0:4f:11:97:0d:7c:f7:6f:62:75:78:6f:
                    80:05:f2:b7:64:17:72:8c:f4:a8:09:9e:32:d1:71:
                    b2:4f:09:19:3d:bc:90:4f:72:be:5f:ba:04:d1:4c:
                    93:20:a1:fa:e7:e2:72:60:a7:c2:7b:8b:43:19:63:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:25:28:7E:6E:09:50:5A:61:B0:3A:75:3D:00:BB:E5:06:4B:DF
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/AVclKH5uCVBaYbA6dT0Au-UGS98.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196731

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:a9:bc:38:1b:87:19:20:d1:04:8b:cc:9d:70:8b:80:b3:
         c5:bf:da:eb:ba:da:22:06:80:11:89:90:e1:77:79:d9:ce:ea:
         a3:1d:98:75:13:51:4e:f0:42:34:e5:86:8a:ba:6c:75:79:91:
         e2:cc:d0:a7:58:30:08:12:5d:22:75:5a:c1:47:db:df:1b:d9:
         30:9c:eb:2d:cc:27:9a:30:1d:ec:30:b5:f1:28:d9:52:97:ed:
         07:82:9b:7e:22:a2:8e:61:34:99:65:c7:53:51:7b:33:12:10:
         e8:f2:cf:d7:95:f6:d8:f0:b6:8e:7b:27:eb:ca:d6:a9:95:ec:
         43:ce:5f:29:ee:1a:50:9a:09:0a:7e:51:25:cb:80:90:b7:03:
         93:1d:96:91:93:1c:cb:38:3c:56:c4:35:fe:7a:9c:fd:7e:07:
         fa:0e:66:3e:46:63:8b:1d:63:f6:b3:af:b9:2c:a8:55:87:b5:
         d5:5a:8c:00:54:12:ec:18:46:46:65:37:2b:1b:13:12:fe:08:
         f7:b1:da:82:4c:26:3e:c3:70:68:f5:76:bd:38:73:74:7b:ee:
         da:72:25:2a:e3:a5:34:b0:2d:d9:37:00:a3:22:67:84:27:d7:
         a2:8b:d3:2a:6f:d7:15:cc:e6:41:00:69:fb:ba:c5:cc:75:86:
         66:eb:91:dc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAU4Vp7+E8FSZMNfJ3KYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm
ZmY0YjEwHhcNMjYwNjMwMTQ0OTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTU3MjUyODdlNmUwOTUwNWE2MWIwM2E3NTNkMDBiYmU1MDY0YmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCB/NPMC8rI5rDUoB439EnIikGYH
HDLOP1p9F4Xx9wNBdOkeQwMPOWsfezi93v2BYmKU7mFq/hpS5xVD+XfzoUnibOxb
Vxs1Q2I17AwWYctLJrCs9XBwoVobRHARABaqT2mZRvV1NRjc0IY2abiD7LjuSJlf
kDkbBteLW2X+5ClKcM0LiBRWnn5+DrXo8Y4ZzvtkSd7Ggv8ECsVyZD3tJYiczWXO
fDlrrInIlKMseOAL/lDPjG3k46uZnpD1HQ5HhkQ/qkqwTxGXDXz3b2J1eG+ABfK3
ZBdyjPSoCZ4y0XGyTwkZPbyQT3K+X7oE0UyTIKH65+JyYKfCe4tDGWPMiwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAFXJSh+bglQWmGwOnU9ALvlBkvfMB8GA1UdIwQY
MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct
MWM4MTMyZDVmNGI0LzEvQVZjbEtINXVDVkJhWWJBNmRUMEF1LVVHUzk4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0
LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMAezANBgkqhkiG
9w0BAQsFAAOCAQEAmAypvDgbhxkg0QSLzJ1wi4Czxb/a67raIgaAEYmQ4Xd52c7q
ox2YdRNRTvBCNOWGirpsdXmR4szQp1gwCBJdInVawUfb3xvZMJzrLcwnmjAd7DC1
8SjZUpftB4KbfiKijmE0mWXHU1F7MxIQ6PLP15X22PC2jnsn68rWqZXsQ85fKe4a
UJoJCn5RJcuAkLcDkx2WkZMcyzg8VsQ1/nqc/X4H+g5mPkZjix1j9rOvuSyoVYe1
1VqMAFQS7BhGRmU3KxsTEv4I97HagkwmPsNwaPV2vThzdHvu2nIlKuOlNLAt2TcA
oyJnhCfXoovTKm/XFczmQQBp+7rFzHWGZuuR3A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:48 2026 by rpki-client