Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/pQCwNtxQfevwjzTWQlPSrcKIyzM.asa
File:                     pQCwNtxQfevwjzTWQlPSrcKIyzM.asa (raw, json)
Hash identifier:          fnJXuE/dTgBqB91HrhvHN15z3pJqyxsX+3auncc4g/I=
Subject key identifier:   A5:00:B0:36:DC:50:7D:EB:F0:8F:34:D6:42:53:D2:AD:C2:88:CB:33
Certificate issuer:       /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial:       019F19010A9250B3E06CFC624F1626BBB518
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/pQCwNtxQfevwjzTWQlPSrcKIyzM.asa
Signing time:             Tue 30 Jun 2026 14:48:46 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            559
Providers:                AS: 174
                          AS: 513
                          AS: 553
                          AS: 1299
                          AS: 3257
                          AS: 3356
                          AS: 20965
                          AS: 21320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:0a:92:50:b3:e0:6c:fc:62:4f:16:26:bb:b5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
        Validity
            Not Before: Jun 30 14:48:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a500b036dc507debf08f34d64253d2adc288cb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:ad:a9:0e:5a:45:a2:8d:a3:f6:8f:52:55:
                    c6:9c:90:82:c8:a6:3f:be:57:85:da:26:9c:0a:48:
                    ac:a4:be:68:59:66:b7:a8:3f:bd:76:a2:46:08:bd:
                    8d:41:d9:10:3d:9e:1f:ff:c8:aa:f3:22:df:94:7e:
                    87:62:93:13:00:55:3e:c7:1e:c5:40:e6:41:71:cf:
                    a1:58:d7:35:24:36:ce:80:d4:b9:5d:d5:dd:2d:a0:
                    2b:9a:2c:61:48:c1:8e:ef:98:23:7f:6c:50:22:d6:
                    ad:80:dd:be:4e:05:d1:2c:c3:de:77:1f:2b:d4:d6:
                    e6:01:85:a9:70:48:f9:da:d8:fc:2c:d0:09:ac:93:
                    e9:6e:5d:cc:5e:ae:b4:df:29:10:17:52:63:01:2e:
                    e3:2b:2c:7d:73:73:a3:ab:e6:4f:76:2f:06:cf:2d:
                    4d:28:ab:cb:71:9c:35:16:c5:ec:ba:31:c8:32:96:
                    77:26:93:e0:a9:c7:82:9f:1b:78:de:ff:78:c5:a3:
                    db:0b:ba:c4:5c:c6:e8:4e:d7:24:52:24:07:88:42:
                    69:6b:b0:b1:6e:ef:c6:94:3b:21:3b:42:5f:91:62:
                    7a:d9:aa:28:70:dd:73:9a:76:fe:7e:c6:45:a3:83:
                    f1:d4:bd:27:52:75:3e:7e:75:fd:18:3e:4c:c6:e4:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:B0:36:DC:50:7D:EB:F0:8F:34:D6:42:53:D2:AD:C2:88:CB:33
            X509v3 Authority Key Identifier:
                keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/pQCwNtxQfevwjzTWQlPSrcKIyzM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  559

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:eb:42:8e:29:72:a9:1d:de:6c:4b:b6:b5:83:5d:1d:1c:
         0b:24:e7:cb:5e:00:13:4b:fd:62:d4:9b:74:86:ee:58:e1:d9:
         15:05:e8:10:82:18:a0:c2:f6:d9:26:0a:30:15:43:bd:f8:86:
         3d:d2:7c:2e:a0:88:be:ec:78:c9:d3:6d:bf:1c:a4:58:9d:d7:
         e2:fe:eb:97:99:ce:b5:95:02:3b:41:3a:37:2a:50:4f:b8:48:
         77:33:30:34:8a:0a:82:f0:0a:4d:dc:56:69:2d:7d:dd:f6:4e:
         06:64:a4:16:0c:1b:4f:50:96:9f:12:8d:62:35:6e:a9:7d:29:
         1f:e1:5b:6e:cb:cd:98:26:66:ba:78:6c:e6:ee:8b:46:cd:2b:
         96:b2:cb:5b:cb:70:bd:35:83:ab:80:f5:0c:00:a0:d3:6a:dc:
         bb:68:f6:9b:15:87:34:1a:5c:40:11:a6:2a:9a:39:4b:89:f0:
         3d:db:07:9c:9f:2c:7e:97:7e:33:3a:43:7d:73:4b:da:b4:4a:
         c1:4d:99:23:4c:cd:8f:fe:8a:da:eb:48:0d:e8:64:c6:b1:b9:
         2b:85:4e:7f:8d:28:38:81:e4:bb:88:f4:6b:65:62:ab:b5:8b:
         8b:d8:eb:90:62:60:cc:b5:34:a4:0e:81:6b:22:d9:c8:11:cc:
         59:ba:fd:e2
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ8ZAQqSULPgbPxiTxYmu7UYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjYwNjMwMTQ0ODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTAwYjAzNmRjNTA3ZGViZjA4ZjM0ZDY0MjUzZDJhZGMyODhjYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR+tqQ5aRaKNo/aPUlXGnJCCyKY/
vleF2iacCkispL5oWWa3qD+9dqJGCL2NQdkQPZ4f/8iq8yLflH6HYpMTAFU+xx7F
QOZBcc+hWNc1JDbOgNS5XdXdLaArmixhSMGO75gjf2xQItatgN2+TgXRLMPedx8r
1NbmAYWpcEj52tj8LNAJrJPpbl3MXq603ykQF1JjAS7jKyx9c3Ojq+ZPdi8Gzy1N
KKvLcZw1FsXsujHIMpZ3JpPgqceCnxt43v94xaPbC7rEXMboTtckUiQHiEJpa7Cx
bu/GlDshO0JfkWJ62aoocN1zmnb+fsZFo4Px1L0nUnU+fnX9GD5MxuRzDQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFKUAsDbcUH3r8I801kJT0q3CiMszMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvcFFDd050eFFmZXZ3anpUV1FsUFNyY0tJeXpNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgIvMA0GCSqGSIb3
DQEBCwUAA4IBAQAauutCjilyqR3ebEu2tYNdHRwLJOfLXgATS/1i1Jt0hu5Y4dkV
BegQghigwvbZJgowFUO9+IY90nwuoIi+7HjJ022/HKRYndfi/uuXmc61lQI7QTo3
KlBPuEh3MzA0igqC8ApN3FZpLX3d9k4GZKQWDBtPUJafEo1iNW6pfSkf4Vtuy82Y
Jma6eGzm7otGzSuWsstby3C9NYOrgPUMAKDTaty7aPabFYc0GlxAEaYqmjlLifA9
2wecnyx+l34zOkN9c0vatErBTZkjTM2P/ora60gN6GTGsbkrhU5/jSg4geS7iPRr
ZWKrtYuL2OuQYmDMtTSkDoFrItnIEcxZuv3i
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:08 2026 by rpki-client