Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/sMFJYO9pghdo8vlEJsdIErQh-nk.asa
File:                     sMFJYO9pghdo8vlEJsdIErQh-nk.asa (raw, json)
Hash identifier:          3eoRUhv4dICMBmHKDZtNl3L4O/US2KjEN8hQl/0JOUo=
Subject key identifier:   B0:C1:49:60:EF:69:82:17:68:F2:F9:44:26:C7:48:12:B4:21:FA:79
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01A0196FBBD2346752D2D7DB29D792B174E1
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/sMFJYO9pghdo8vlEJsdIErQh-nk.asa
Signing time:             Wed 19 Aug 2026 09:52:27 +0000
ASPA not before:          Wed 19 Aug 2026 09:52:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209445
Providers:                AS: 174
                          AS: 1299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:19:6f:bb:d2:34:67:52:d2:d7:db:29:d7:92:b1:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Aug 19 09:52:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b0c14960ef69821768f2f94426c74812b421fa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:3a:ea:ba:41:ea:70:49:6e:c5:81:64:9f:
                    58:20:26:ba:60:16:70:36:8d:1b:9b:10:f6:9a:8a:
                    34:07:90:50:d7:f9:70:99:30:35:08:f8:6b:92:1c:
                    89:1b:69:68:20:97:dc:66:35:1e:fc:dd:80:fc:69:
                    10:5f:bd:d4:70:d6:b6:36:13:84:8a:84:a1:13:49:
                    67:88:5a:2d:c2:b8:45:a4:4e:f6:bc:3f:19:da:ae:
                    f9:0b:1f:b7:2e:46:c3:17:5e:2f:e5:9b:4b:1f:de:
                    0a:fe:73:ec:ba:fe:5d:a2:3a:ec:bc:2c:00:c7:f0:
                    17:13:90:92:ca:09:c1:8e:70:8c:dd:26:7f:c7:d5:
                    a5:9c:c5:da:74:b1:b3:dd:ba:7b:19:6b:d4:a5:62:
                    99:07:95:b5:6c:2a:7a:7b:93:f3:df:c2:98:7c:a5:
                    bc:3a:9f:e1:33:23:41:41:de:23:e8:d2:90:85:e6:
                    9a:ce:55:0b:25:be:3a:0a:ed:22:d6:26:36:26:26:
                    bd:35:a1:5e:35:9f:3a:31:b0:6f:1a:3d:91:43:06:
                    b2:ea:52:84:82:ea:07:b4:81:bf:f7:6a:cc:02:bf:
                    68:a0:7d:76:70:d0:8e:03:d7:5a:67:fc:66:48:da:
                    38:b0:1d:0d:ee:1f:c0:2b:39:7f:44:99:95:3e:98:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C1:49:60:EF:69:82:17:68:F2:F9:44:26:C7:48:12:B4:21:FA:79
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/sMFJYO9pghdo8vlEJsdIErQh-nk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209445

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:39:d2:e2:7e:6d:ae:dc:fe:aa:97:64:77:ec:51:88:6e:
         7d:e3:90:35:14:a3:ae:b0:dc:93:1c:f7:a2:8d:ee:89:f7:e6:
         a1:9a:91:2c:6e:69:e3:b9:11:bc:dd:cf:19:86:62:64:9e:dd:
         35:68:14:b7:9f:eb:0a:98:ea:56:bc:74:10:18:d2:9c:f1:8e:
         1a:b6:42:32:29:85:af:5f:1e:e8:33:eb:71:22:ec:6c:d6:de:
         2d:b7:ef:25:66:09:34:3e:69:8b:c5:74:fc:9a:75:b7:25:44:
         de:4f:9e:37:f4:48:b7:3a:0f:44:00:63:e1:0a:e4:ac:5d:2c:
         d8:0d:a2:76:0b:6b:c9:9f:8b:fd:6f:ef:5e:7d:d2:14:c7:09:
         56:77:9f:c7:d8:a7:58:a2:a3:c8:a7:61:ea:b4:13:56:58:6b:
         f5:95:24:49:58:cd:77:d9:80:01:22:29:75:b4:6a:0c:e2:72:
         9d:71:51:33:d3:88:77:da:a3:70:a0:ed:d5:10:aa:2d:2c:0a:
         f7:c2:e4:72:d2:ed:49:69:03:2b:53:f5:ec:9e:d2:87:23:1c:
         c9:21:68:a5:eb:c2:58:52:07:ab:63:bb:80:da:84:a5:c1:6b:
         ff:a5:9f:c3:42:2e:44:3e:32:d7:15:2a:b1:a9:20:6a:8f:8c:
         d3:33:e3:56
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaAZb7vSNGdS0tfbKdeSsXThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwODE5MDk1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGMxNDk2MGVmNjk4MjE3NjhmMmY5NDQyNmM3NDgxMmI0MjFmYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FQ66rpB6nBJbsWBZJ9YICa6YBZw
No0bmxD2moo0B5BQ1/lwmTA1CPhrkhyJG2loIJfcZjUe/N2A/GkQX73UcNa2NhOE
ioShE0lniFotwrhFpE72vD8Z2q75Cx+3LkbDF14v5ZtLH94K/nPsuv5dojrsvCwA
x/AXE5CSygnBjnCM3SZ/x9WlnMXadLGz3bp7GWvUpWKZB5W1bCp6e5Pz38KYfKW8
Op/hMyNBQd4j6NKQheaazlULJb46Cu0i1iY2Jia9NaFeNZ86MbBvGj2RQway6lKE
guoHtIG/92rMAr9ooH12cNCOA9daZ/xmSNo4sB0N7h/AKzl/RJmVPpjZvwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLDBSWDvaYIXaPL5RCbHSBK0Ifp5MB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvc01GSllPOXBnaGRvOHZsRUpzZElFclFoLW5rLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMyJTANBgkqhkiG
9w0BAQsFAAOCAQEAgks50uJ+ba7c/qqXZHfsUYhufeOQNRSjrrDckxz3oo3uiffm
oZqRLG5p47kRvN3PGYZiZJ7dNWgUt5/rCpjqVrx0EBjSnPGOGrZCMimFr18e6DPr
cSLsbNbeLbfvJWYJND5pi8V0/Jp1tyVE3k+eN/RItzoPRABj4QrkrF0s2A2idgtr
yZ+L/W/vXn3SFMcJVnefx9inWKKjyKdh6rQTVlhr9ZUkSVjNd9mAASIpdbRqDOJy
nXFRM9OId9qjcKDt1RCqLSwK98LkctLtSWkDK1P17J7ShyMcySFopevCWFIHq2O7
gNqEpcFr/6Wfw0IuRD4y1xUqsakgao+M0zPjVg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:22 2026 by rpki-client