Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/wqC_NxiWyjJgLTJPPHhovqD7_pk.asa
File:                     wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (raw, json)
Hash identifier:          aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=
Subject key identifier:   C2:A0:BF:37:18:96:CA:32:60:2D:32:4F:3C:78:68:BE:A0:FB:FE:99
Certificate issuer:       /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial:       019F19012AAAB9607454DFD09BAD24D6857A
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/wqC_NxiWyjJgLTJPPHhovqD7_pk.asa
Signing time:             Tue 30 Jun 2026 14:48:54 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209807
Providers:                AS: 6939
                          AS: 34927
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2a:aa:b9:60:74:54:df:d0:9b:ad:24:d6:85:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
        Validity
            Not Before: Jun 30 14:48:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2a0bf371896ca32602d324f3c7868bea0fbfe99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:1a:a7:f8:35:60:cf:30:f8:db:75:46:d7:
                    67:be:7e:d4:4f:8a:b1:76:55:b5:46:bd:cc:1a:d2:
                    d6:36:ba:1a:44:62:e6:13:31:ad:27:b9:14:90:c9:
                    9f:25:fb:1d:87:3c:2c:d3:8a:73:b2:d5:38:99:54:
                    3c:95:9c:03:cb:f3:a7:01:83:76:62:b4:e2:3d:49:
                    f7:55:ed:d0:b8:df:f9:20:9c:db:b5:2e:b4:35:3a:
                    60:49:26:5d:a2:0d:3d:2a:5e:5e:6c:fc:29:66:3d:
                    48:b6:88:7a:1a:26:f7:a5:f6:69:89:a0:c1:b8:16:
                    79:78:a8:d4:d3:4b:71:32:47:c3:55:4b:26:b1:de:
                    60:ff:71:50:41:1f:75:45:70:56:4d:8e:44:e9:68:
                    fe:72:37:c2:b5:82:24:4f:02:fe:d9:49:74:0b:e5:
                    a0:a0:33:33:a1:76:18:45:8e:72:91:f3:3f:3a:49:
                    1e:58:80:9d:bc:f3:0a:eb:3c:ea:db:ce:bf:22:e9:
                    df:61:ec:59:50:1f:1b:b5:3d:e4:e1:26:0f:b1:65:
                    26:dc:a9:9a:12:1d:e5:57:57:6f:24:6a:28:d3:82:
                    87:c1:26:45:6a:94:f1:7e:50:d3:f5:fb:32:cc:e8:
                    f4:8f:0e:28:da:0a:89:c1:64:fe:f9:5e:9f:29:82:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:BF:37:18:96:CA:32:60:2D:32:4F:3C:78:68:BE:A0:FB:FE:99
            X509v3 Authority Key Identifier:
                keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/wqC_NxiWyjJgLTJPPHhovqD7_pk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209807

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:48:9e:19:70:69:50:61:87:97:5f:95:f8:4b:6d:0f:0a:
         37:a5:f7:11:ff:28:e5:51:f3:a7:28:21:88:fd:58:ab:15:0e:
         ee:92:6c:dc:14:53:4c:f0:68:e3:5d:b0:4e:f7:c7:f6:91:1f:
         76:a8:3c:fe:7f:45:57:6c:e5:f6:f9:64:32:51:20:68:71:13:
         c9:53:1f:69:fe:88:0a:fa:83:05:1b:c7:d8:97:41:32:1a:5c:
         2a:39:4d:c9:ea:f1:1b:ca:96:96:e3:94:b8:74:ac:48:b5:57:
         f2:04:59:d3:f4:85:7e:59:12:28:e6:04:23:43:bf:83:07:62:
         5e:6c:de:33:b1:8a:78:e2:e2:ef:38:39:49:8b:7a:19:c5:47:
         ca:79:5a:f3:68:12:80:79:0a:81:38:b7:be:11:a5:9c:6d:35:
         47:86:82:e2:bb:9e:57:e6:3e:40:7b:61:16:af:f6:9b:bf:ce:
         32:a1:24:b4:77:15:70:59:f5:7a:0e:7d:63:4c:f7:31:00:36:
         1c:15:e1:82:54:6c:2a:2e:73:7d:b8:0c:03:a0:1a:a3:d2:d3:
         48:8c:ab:20:cc:b1:c0:de:4a:f9:3b:c2:67:cb:69:78:bf:70:
         48:a4:23:0d:bc:11:8a:20:df:89:fd:5d:12:54:ba:b4:d7:5d:
         c7:83:42:f5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZASqquWB0VN/Qm60k1oV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi
NjMyNDgwHhcNMjYwNjMwMTQ0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmEwYmYzNzE4OTZjYTMyNjAyZDMyNGYzYzc4NjhiZWEwZmJmZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHgap/g1YM8w+Nt1Rtdnvn7UT4qx
dlW1Rr3MGtLWNroaRGLmEzGtJ7kUkMmfJfsdhzws04pzstU4mVQ8lZwDy/OnAYN2
YrTiPUn3Ve3QuN/5IJzbtS60NTpgSSZdog09Kl5ebPwpZj1Itoh6Gib3pfZpiaDB
uBZ5eKjU00txMkfDVUsmsd5g/3FQQR91RXBWTY5E6Wj+cjfCtYIkTwL+2Ul0C+Wg
oDMzoXYYRY5ykfM/OkkeWICdvPMK6zzq286/IunfYexZUB8btT3k4SYPsWUm3Kma
Eh3lV1dvJGoo04KHwSZFapTxflDT9fsyzOj0jw4o2gqJwWT++V6fKYLqtwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMKgvzcYlsoyYC0yTzx4aL6g+/6ZMB8GA1UdIwQY
MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt
ZTdkYjk1ZTNiY2M0LzEvd3FDX054aVd5akpnTFRKUFBIaG92cUQ3X3BrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0
LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzjzANBgkqhkiG
9w0BAQsFAAOCAQEAccxInhlwaVBhh5dflfhLbQ8KN6X3Ef8o5VHzpyghiP1YqxUO
7pJs3BRTTPBo412wTvfH9pEfdqg8/n9FV2zl9vlkMlEgaHETyVMfaf6ICvqDBRvH
2JdBMhpcKjlNyerxG8qWluOUuHSsSLVX8gRZ0/SFflkSKOYEI0O/gwdiXmzeM7GK
eOLi7zg5SYt6GcVHynla82gSgHkKgTi3vhGlnG01R4aC4rueV+Y+QHthFq/2m7/O
MqEktHcVcFn1eg59Y0z3MQA2HBXhglRsKi5zfbgMA6Aao9LTSIyrIMyxwN5K+TvC
Z8tpeL9wSKQjDbwRiiDfif1dElS6tNddx4NC9Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:19 2026 by rpki-client