Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/uZTIBpW66ELOgsfpMVny5BNAdjo.asa
File:                     uZTIBpW66ELOgsfpMVny5BNAdjo.asa (raw, json)
Hash identifier:          RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=
Subject key identifier:   B9:94:C8:06:95:BA:E8:42:CE:82:C7:E9:31:59:F2:E4:13:40:76:3A
Certificate issuer:       /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial:       019D068B5C0C8C7A67829E5305842574680C
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/uZTIBpW66ELOgsfpMVny5BNAdjo.asa
Signing time:             Thu 19 Mar 2026 14:41:29 +0000
ASPA not before:          Thu 19 Mar 2026 14:41:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200386
Providers:                AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:8b:5c:0c:8c:7a:67:82:9e:53:05:84:25:74:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
        Validity
            Not Before: Mar 19 14:41:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b994c80695bae842ce82c7e93159f2e41340763a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:22:7e:3a:de:74:bf:a0:8c:3c:c4:3d:6c:
                    d5:84:98:9a:64:88:fa:38:06:35:0c:01:c0:a5:cc:
                    7e:9c:9d:17:a3:7d:b6:77:d5:98:c6:7e:65:48:24:
                    8c:2c:96:3f:7d:c4:e4:e0:0d:c6:05:73:fb:64:71:
                    1a:c7:11:5b:ba:72:a3:0b:3b:18:68:ca:dc:4d:56:
                    2b:38:00:a5:7b:0c:f1:5f:40:26:3f:a0:cb:30:4c:
                    b5:5d:f0:f5:78:50:e8:1d:2f:cd:ac:56:9e:6f:67:
                    f4:c8:11:8c:e2:fd:f4:6a:d0:08:8e:20:48:6d:b4:
                    b5:bb:06:b2:79:c6:1c:e6:41:93:28:fc:31:24:27:
                    54:93:41:ad:4d:7f:1b:db:66:44:5a:79:55:b9:1f:
                    af:20:8a:1d:5a:3a:8a:54:ca:b1:06:01:1a:3c:9a:
                    a1:58:4f:bd:d6:dd:8c:f1:13:a6:b4:08:41:72:19:
                    3c:d5:c4:3f:97:75:2a:39:9d:8b:e7:ff:54:c3:14:
                    57:ba:48:ee:45:db:7f:bd:20:fb:08:df:1d:ea:ae:
                    97:d9:78:bb:c8:66:8f:71:52:e6:ff:c5:ff:77:85:
                    8e:89:50:4f:d3:47:90:ea:30:1a:04:36:f8:da:b0:
                    a9:04:38:09:bf:ff:3a:2c:c1:19:28:19:d8:e9:12:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:C8:06:95:BA:E8:42:CE:82:C7:E9:31:59:F2:E4:13:40:76:3A
            X509v3 Authority Key Identifier:
                keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/uZTIBpW66ELOgsfpMVny5BNAdjo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200386

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:97:16:55:86:ee:0c:e8:46:04:8b:0b:7e:09:ed:3e:ba:
         3c:93:ec:e2:68:02:44:b6:9d:71:c2:1c:d8:cb:fc:2a:42:2c:
         08:c2:d2:c0:c1:fd:78:28:89:dd:8f:33:24:8f:8e:7a:c8:f5:
         39:75:90:d8:e1:3e:6a:d2:91:27:1d:a0:0a:38:85:df:8d:91:
         62:d2:8a:df:8e:e0:f9:47:61:ab:56:cc:fd:fe:fd:5d:95:2c:
         c3:54:e1:c5:74:bb:4b:e7:5f:02:ea:c5:f0:e9:02:2a:05:1e:
         17:9f:37:31:09:ac:5e:b8:ad:10:b6:11:8a:6c:20:70:78:9f:
         e4:bb:95:20:1a:6d:3a:fb:9a:93:b8:05:13:e0:8d:97:47:17:
         f3:ac:3a:09:62:a2:04:19:1b:c7:6f:69:7b:b8:86:0a:89:4a:
         11:ca:63:d4:8a:94:8a:94:46:fc:80:3e:49:61:5c:87:f9:1a:
         ce:43:00:79:7c:98:61:b1:71:2e:ae:8a:07:1c:3d:64:26:63:
         ef:ea:a4:a7:17:74:e1:7a:3b:36:31:95:4d:20:9e:4d:39:1d:
         7b:5a:99:51:7b:2e:05:5a:19:b6:07:75:93:7b:3c:c0:94:c7:
         9d:14:67:eb:25:92:b2:10:94:ff:e7:46:11:0a:52:f5:2b:77:
         3c:e6:bf:d8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0Gi1wMjHpngp5TBYQldGgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjM5MjIyNDBkMTQwYjY2N2Y2M2ExODM0ZDFkYTM0MTAw
OGU3YjEwHhcNMjYwMzE5MTQ0MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTk0YzgwNjk1YmFlODQyY2U4MmM3ZTkzMTU5ZjJlNDEzNDA3NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtcifjredL+gjDzEPWzVhJiaZIj6
OAY1DAHApcx+nJ0Xo322d9WYxn5lSCSMLJY/fcTk4A3GBXP7ZHEaxxFbunKjCzsY
aMrcTVYrOAClewzxX0AmP6DLMEy1XfD1eFDoHS/NrFaeb2f0yBGM4v30atAIjiBI
bbS1uwayecYc5kGTKPwxJCdUk0GtTX8b22ZEWnlVuR+vIIodWjqKVMqxBgEaPJqh
WE+91t2M8ROmtAhBchk81cQ/l3UqOZ2L5/9UwxRXukjuRdt/vSD7CN8d6q6X2Xi7
yGaPcVLm/8X/d4WOiVBP00eQ6jAaBDb42rCpBDgJv/86LMEZKBnY6RLeQwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLmUyAaVuuhCzoLH6TFZ8uQTQHY6MB8GA1UdIwQY
MBaAFLFjkiJA0UC2Z/Y6GDTR2jQQCOexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dPU0lrRFJRTFpuOWpvWU5OSGFOQkFJNTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wYzgwNTItYmUwOC00MzMzLWEwZjkt
Nzc2NjgwMDliN2Q1LzEvdVpUSUJwVzY2RUxPZ3NmcE1Wbnk1Qk5BZGpvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wYzgwNTItYmUwOC00MzMzLWEwZjktNzc2NjgwMDliN2Q1
LzEvc1dPU0lrRFJRTFpuOWpvWU5OSGFOQkFJNTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOwjANBgkqhkiG
9w0BAQsFAAOCAQEACb+XFlWG7gzoRgSLC34J7T66PJPs4mgCRLadccIc2Mv8KkIs
CMLSwMH9eCiJ3Y8zJI+Oesj1OXWQ2OE+atKRJx2gCjiF342RYtKK347g+Udhq1bM
/f79XZUsw1ThxXS7S+dfAurF8OkCKgUeF583MQmsXritELYRimwgcHif5LuVIBpt
Ovuak7gFE+CNl0cX86w6CWKiBBkbx29pe7iGColKEcpj1IqUipRG/IA+SWFch/ka
zkMAeXyYYbFxLq6KBxw9ZCZj7+qkpxd04Xo7NjGVTSCeTTkde1qZUXsuBVoZtgd1
k3s8wJTHnRRn6yWSshCU/+dGEQpS9St3POa/2A==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:43 2026 by rpki-client