Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/XlF1Um0hQjtANHg7MSAgVZmYu7k.asa
File:                     XlF1Um0hQjtANHg7MSAgVZmYu7k.asa (raw, json)
Hash identifier:          vL/L3yXXlyuNpAULKIf/FSlD5vVaZNSSg6lawDMb628=
Subject key identifier:   5E:51:75:52:6D:21:42:3B:40:34:78:3B:31:20:20:55:99:98:BB:B9
Certificate issuer:       /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial:       019F1901296DF327AA05CD175F9998A766E3
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/XlF1Um0hQjtANHg7MSAgVZmYu7k.asa
Signing time:             Tue 30 Jun 2026 14:48:54 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203468
Providers:                AS: 9121
                          AS: 34984
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:29:6d:f3:27:aa:05:cd:17:5f:99:98:a7:66:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
        Validity
            Not Before: Jun 30 14:48:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e5175526d21423b4034783b312020559998bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:2f:da:a3:f0:40:aa:c3:b1:7c:a2:69:c4:
                    42:0b:8a:1b:c9:50:82:f0:8a:aa:18:dd:44:bf:29:
                    65:ea:18:b4:3a:c9:96:a7:77:00:53:2a:f6:a5:5e:
                    e1:39:8a:78:64:84:e0:76:44:54:76:a9:d9:09:f0:
                    cf:f5:3b:0d:63:28:47:00:2e:31:ef:e7:8b:91:36:
                    ea:d4:da:82:44:60:46:ef:60:8d:a1:ca:a8:d3:7c:
                    98:d8:c1:a6:bc:ed:05:ef:70:7a:27:c7:44:42:72:
                    51:51:37:ab:0f:c2:c4:87:5b:f3:d9:58:50:c3:5b:
                    f8:df:cf:60:bf:95:c2:7f:8b:55:6f:fe:4f:27:a7:
                    ce:7b:be:15:30:d6:2a:b7:c9:0e:11:86:2c:01:19:
                    16:58:96:76:d2:9e:76:cc:d1:2d:24:35:d0:88:a3:
                    9d:c4:ea:d9:10:3d:e0:aa:e2:d2:0c:75:2a:cd:ea:
                    9c:0e:b2:c4:fd:1a:e6:30:35:48:de:6c:49:a1:a9:
                    f3:98:cc:a6:f0:d6:0b:88:1b:2a:1c:15:4e:15:fd:
                    99:c2:90:a1:5c:8d:02:b6:12:8d:95:4b:79:56:b4:
                    55:f5:41:8c:5e:f2:e6:fc:3c:fb:14:d9:33:49:47:
                    25:34:1c:f9:3e:1a:8f:44:86:bb:4b:47:a7:ec:81:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:75:52:6D:21:42:3B:40:34:78:3B:31:20:20:55:99:98:BB:B9
            X509v3 Authority Key Identifier:
                keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/XlF1Um0hQjtANHg7MSAgVZmYu7k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203468

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:95:bb:1b:84:1d:a9:3e:d5:a6:1b:70:d9:de:ec:ce:e2:
         60:01:5c:5c:99:71:e3:c7:f6:ac:1a:98:32:db:3d:2e:c7:7f:
         3b:13:ff:fb:20:58:13:2c:04:a7:86:77:a2:56:0a:a9:43:59:
         d3:db:1b:46:1f:56:ac:f9:64:64:23:13:09:8d:e5:b0:03:99:
         cb:d7:eb:4c:96:af:da:2b:77:4d:33:cc:cb:0e:eb:ae:9c:5c:
         2f:5d:30:46:32:89:12:8e:a1:ab:33:7a:68:c6:3e:ce:2c:7b:
         06:67:f0:68:ed:59:1b:ae:84:ed:38:e3:fe:ae:f5:1b:4a:30:
         7d:2d:9e:d6:64:36:b2:46:9a:57:4d:12:09:64:c1:de:fb:8d:
         f9:2e:b8:34:95:e0:9c:e2:5c:59:94:73:3e:89:e1:fa:fb:9f:
         60:ab:0c:83:e0:3a:31:2c:2b:14:b0:ad:07:cc:81:7b:fc:5a:
         57:90:fd:9c:c6:6f:6e:c7:97:c2:96:5b:88:ae:91:41:21:79:
         56:3b:b2:f8:de:ce:4d:62:ed:33:cf:8c:5e:07:54:74:a9:d5:
         c5:ed:16:c9:26:cd:77:f4:76:45:34:eb:db:25:32:8e:82:7f:
         f8:98:77:23:c8:4e:63:82:1e:89:08:20:5b:26:38:c0:29:d8:
         6a:27:29:53
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZASlt8yeqBc0XX5mYp2bjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5
NmNmZTgwHhcNMjYwNjMwMTQ0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTUxNzU1MjZkMjE0MjNiNDAzNDc4M2IzMTIwMjA1NTk5OThiYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwMv2qPwQKrDsXyiacRCC4obyVCC
8IqqGN1Evyll6hi0OsmWp3cAUyr2pV7hOYp4ZITgdkRUdqnZCfDP9TsNYyhHAC4x
7+eLkTbq1NqCRGBG72CNocqo03yY2MGmvO0F73B6J8dEQnJRUTerD8LEh1vz2VhQ
w1v4389gv5XCf4tVb/5PJ6fOe74VMNYqt8kOEYYsARkWWJZ20p52zNEtJDXQiKOd
xOrZED3gquLSDHUqzeqcDrLE/RrmMDVI3mxJoanzmMym8NYLiBsqHBVOFf2ZwpCh
XI0CthKNlUt5VrRV9UGMXvLm/Dz7FNkzSUclNBz5PhqPRIa7S0en7IHBHwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF5RdVJtIUI7QDR4OzEgIFWZmLu5MB8GA1UdIwQY
MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt
N2VhMGRlYjgzMGFiLzEvWGxGMVVtMGhRanRBTkhnN01TQWdWWm1ZdTdrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi
LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMazDANBgkqhkiG
9w0BAQsFAAOCAQEAdIqVuxuEHak+1aYbcNne7M7iYAFcXJlx48f2rBqYMts9Lsd/
OxP/+yBYEywEp4Z3olYKqUNZ09sbRh9WrPlkZCMTCY3lsAOZy9frTJav2it3TTPM
yw7rrpxcL10wRjKJEo6hqzN6aMY+zix7BmfwaO1ZG66E7Tjj/q71G0owfS2e1mQ2
skaaV00SCWTB3vuN+S64NJXgnOJcWZRzPonh+vufYKsMg+A6MSwrFLCtB8yBe/xa
V5D9nMZvbseXwpZbiK6RQSF5Vjuy+N7OTWLtM8+MXgdUdKnVxe0WySbNd/R2RTTr
2yUyjoJ/+Jh3I8hOY4IeiQggWyY4wCnYaicpUw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:31 2026 by rpki-client