Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/iMBvWaEVek624NxkPYz0mVMqzU8.asa
File:                     iMBvWaEVek624NxkPYz0mVMqzU8.asa (raw, json)
Hash identifier:          EV9hZVQWYG5VK72R2HvAXXml8YuFZ3Jkmj2x+D06+GU=
Subject key identifier:   88:C0:6F:59:A1:15:7A:4E:B6:E0:DC:64:3D:8C:F4:99:53:2A:CD:4F
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       019E0842338C74D4FDD020DB44F9104696A4
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/iMBvWaEVek624NxkPYz0mVMqzU8.asa
Signing time:             Fri 08 May 2026 15:43:36 +0000
ASPA not before:          Fri 08 May 2026 15:43:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202032
Providers:                AS: 174
                          AS: 1299
                          AS: 3356
                          AS: 5398
                          AS: 6730
                          AS: 6939
                          AS: 8220
                          AS: 9002
                          AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:08:42:33:8c:74:d4:fd:d0:20:db:44:f9:10:46:96:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: May  8 15:43:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=88c06f59a1157a4eb6e0dc643d8cf499532acd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:07:4e:8d:71:f1:b1:60:2a:58:e7:05:aa:
                    45:bd:43:c2:a7:56:cb:d5:ae:2d:6f:bd:ab:ca:f3:
                    ee:3d:e2:72:47:49:2c:8e:df:63:04:42:3b:80:ec:
                    25:2e:c6:a4:33:fe:e8:cf:e6:42:b8:4b:8e:70:ba:
                    91:0a:bd:87:59:27:f8:91:8e:15:f4:1b:8a:1d:d3:
                    e6:23:99:e4:54:dd:e0:53:f7:ca:1d:23:09:b9:ac:
                    fc:5b:e4:61:57:4b:5d:e8:21:bf:15:75:c1:30:51:
                    16:8e:85:f7:09:25:bd:4f:bd:03:a9:39:40:81:eb:
                    2a:3e:16:7c:24:5a:e8:73:ec:07:de:cd:c7:47:c3:
                    4d:e3:22:1d:56:1b:74:e1:4d:12:13:4d:73:ad:6d:
                    0b:7d:1e:09:1d:fa:e5:3f:42:df:5d:5f:40:d0:77:
                    a7:f0:f8:f0:5c:17:bb:ac:02:17:41:ac:bf:71:1f:
                    a7:24:1b:d3:18:d1:50:3e:31:cc:a6:bf:bf:dd:bb:
                    96:d3:49:5c:ca:c0:0e:9c:a2:da:f3:74:3e:be:2b:
                    44:66:9b:2a:be:c7:cb:79:8f:4d:b9:35:7e:94:01:
                    83:56:c4:7e:86:e9:f3:25:75:f3:03:86:64:79:ab:
                    1f:a7:2b:dd:10:52:56:b6:a6:c7:43:52:ac:69:d0:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:6F:59:A1:15:7A:4E:B6:E0:DC:64:3D:8C:F4:99:53:2A:CD:4F
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/iMBvWaEVek624NxkPYz0mVMqzU8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202032

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:6c:ea:d4:b4:a4:8c:16:ec:f2:36:d1:da:c5:70:90:58:
         1a:7a:ab:03:24:78:9b:35:fb:6b:2a:41:2d:1f:65:f9:63:3b:
         ab:d6:1e:1d:4b:8a:a3:a9:a2:99:88:95:c5:f3:ca:e5:a5:eb:
         cc:ac:78:ef:af:77:57:4c:b2:86:04:5b:87:58:4f:d6:c9:07:
         98:41:d2:13:8b:cc:8a:31:5a:ae:26:51:e6:e6:de:1e:da:dc:
         bd:39:23:cb:19:06:9a:3c:47:e7:5d:30:d8:18:cd:db:39:d0:
         ef:04:30:0a:8e:41:b1:47:4d:78:ff:02:29:fe:b0:33:e9:6f:
         d4:3d:6c:ec:dd:fb:21:ad:5f:73:7d:ed:ae:f9:7d:e4:d1:22:
         9a:ac:98:63:85:a5:e2:a1:3a:3f:33:07:c6:ed:10:6d:dc:d8:
         63:d1:a5:41:e9:a0:52:cb:61:8e:80:3b:cb:96:8f:6c:40:c6:
         df:16:cc:5e:73:6e:cd:ca:51:0e:74:9a:e4:10:68:a6:c8:ef:
         3b:73:68:d9:22:d1:08:f0:e8:a2:fd:45:63:69:65:50:b5:a1:
         e1:63:1f:5d:76:7d:fe:99:d2:6d:02:db:1e:34:5b:09:96:82:
         e8:bb:1f:0c:a4:29:57:e2:a3:6a:25:66:c2:55:ea:60:71:ad:
         5b:42:db:35
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4IQjOMdNT90CDbRPkQRpakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh
YjZkYjQwHhcNMjYwNTA4MTU0MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGMwNmY1OWExMTU3YTRlYjZlMGRjNjQzZDhjZjQ5OTUzMmFjZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZwHTo1x8bFgKljnBapFvUPCp1bL
1a4tb72ryvPuPeJyR0ksjt9jBEI7gOwlLsakM/7oz+ZCuEuOcLqRCr2HWSf4kY4V
9BuKHdPmI5nkVN3gU/fKHSMJuaz8W+RhV0td6CG/FXXBMFEWjoX3CSW9T70DqTlA
gesqPhZ8JFroc+wH3s3HR8NN4yIdVht04U0SE01zrW0LfR4JHfrlP0LfXV9A0Hen
8PjwXBe7rAIXQay/cR+nJBvTGNFQPjHMpr+/3buW00lcysAOnKLa83Q+vitEZpsq
vsfLeY9NuTV+lAGDVsR+hunzJXXzA4ZkeasfpyvdEFJWtqbHQ1KsadCm8wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIjAb1mhFXpOtuDcZD2M9JlTKs1PMB8GA1UdIwQY
MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt
MWY2NmZhYWI0YWI1LzEvaU1CdldhRVZlazYyNE54a1BZejBtVk1xelU4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1
LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVMDANBgkqhkiG
9w0BAQsFAAOCAQEAUcZs6tS0pIwW7PI20drFcJBYGnqrAyR4mzX7aypBLR9l+WM7
q9YeHUuKo6mimYiVxfPK5aXrzKx47693V0yyhgRbh1hP1skHmEHSE4vMijFariZR
5ubeHtrcvTkjyxkGmjxH510w2BjN2znQ7wQwCo5BsUdNeP8CKf6wM+lv1D1s7N37
Ia1fc33trvl95NEimqyYY4Wl4qE6PzMHxu0QbdzYY9GlQemgUsthjoA7y5aPbEDG
3xbMXnNuzcpRDnSa5BBopsjvO3No2SLRCPDoov1FY2llULWh4WMfXXZ9/pnSbQLb
HjRbCZaC6LsfDKQpV+KjaiVmwlXqYHGtW0LbNQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:56 2026 by rpki-client