Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/zE1sOss2Cg32j0X0LNQt0cDGXbo.asa
File:                     zE1sOss2Cg32j0X0LNQt0cDGXbo.asa (raw, json)
Hash identifier:          HavmcuBg0wPxS/tbiRtJOzpEY6kAVYKIWL2lIcI0BrM=
Subject key identifier:   CC:4D:6C:3A:CB:36:0A:0D:F6:8F:45:F4:2C:D4:2D:D1:C0:C6:5D:BA
Certificate issuer:       /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial:       019F1901235F6AE92410A3DBEF3E3A92E7FB
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/zE1sOss2Cg32j0X0LNQt0cDGXbo.asa
Signing time:             Tue 30 Jun 2026 14:48:52 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:52 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212577
Providers:                AS: 57050
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:23:5f:6a:e9:24:10:a3:db:ef:3e:3a:92:e7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
        Validity
            Not Before: Jun 30 14:48:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cc4d6c3acb360a0df68f45f42cd42dd1c0c65dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:75:f5:e1:92:7b:64:88:92:e8:6f:53:9f:
                    5c:7b:3e:cc:81:22:92:0f:e5:0c:d3:09:24:ce:e2:
                    5b:dd:49:9d:ef:20:9a:33:1f:88:ba:5e:85:bd:88:
                    51:4a:b6:87:f9:c6:7f:ae:13:bd:0f:db:06:c2:f9:
                    bf:31:af:5a:f3:32:25:d4:4a:78:8d:f5:8b:5b:af:
                    ed:ab:1a:fa:3a:36:12:2e:61:fa:e7:30:a5:5f:a4:
                    3a:a3:7d:57:6e:db:88:53:1c:59:d2:6b:c4:7c:bb:
                    d5:65:37:d2:1e:7c:c6:03:2c:0c:cc:9e:e1:38:1a:
                    f4:ee:bf:40:af:3e:0e:5b:8c:6e:a1:e2:20:65:2d:
                    47:84:ea:e5:00:73:43:20:02:25:5d:0b:ca:d4:12:
                    70:60:25:68:26:62:e6:fe:00:e5:4c:80:87:a1:ea:
                    2b:5e:b0:e0:84:bf:39:f1:ec:96:9a:6a:c5:00:46:
                    a7:a3:85:8f:ab:1c:e3:ec:be:b5:8f:e2:75:0b:f4:
                    91:3f:c0:7b:d8:64:fc:a8:38:7f:ac:af:d8:8e:36:
                    76:82:07:97:06:b1:0d:73:5c:57:e3:3c:f0:d7:30:
                    93:73:1b:db:08:98:5d:ca:3d:b3:14:29:70:42:6b:
                    81:dc:61:cf:de:be:ba:35:d0:3f:9f:02:56:d4:df:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4D:6C:3A:CB:36:0A:0D:F6:8F:45:F4:2C:D4:2D:D1:C0:C6:5D:BA
            X509v3 Authority Key Identifier:
                keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/zE1sOss2Cg32j0X0LNQt0cDGXbo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212577

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:0f:db:25:95:71:0e:2c:ed:af:26:67:7c:cf:b2:52:1d:
         6a:20:27:f7:45:0c:bf:4a:a2:cb:6f:dc:f2:31:2d:c5:3c:d1:
         4c:12:2e:57:e0:4a:da:86:16:78:23:8d:43:af:48:62:18:d0:
         c5:fa:c2:64:fc:a2:da:46:92:a4:a6:03:2c:6b:2c:e5:a2:3d:
         28:ba:7b:88:29:98:c5:a0:7c:2a:7e:0d:4c:b4:ca:fd:fe:a0:
         3f:a4:93:0f:e6:55:c2:fb:43:f3:ab:69:46:a5:bd:9c:57:36:
         7a:d1:9b:09:51:1f:3c:43:1d:34:56:ae:3c:c4:ce:fb:b2:ec:
         62:6c:da:b5:fc:64:4f:38:34:0c:d9:69:be:ed:57:39:e1:98:
         83:f5:28:e2:d2:08:e6:db:0f:dc:74:2f:0b:42:37:c0:46:4c:
         d0:ea:84:a5:0c:be:27:49:dc:bc:22:bb:b3:e0:51:b7:9b:a5:
         7c:e0:f8:e6:60:71:ca:b3:78:13:86:f8:35:5f:3e:02:f4:91:
         a4:d4:c3:cc:10:8c:83:64:a3:f6:c1:2b:84:8d:7d:3f:10:32:
         c3:8c:41:4f:59:a3:ed:81:d3:37:c5:0f:38:7a:65:3b:0f:48:
         66:87:ed:9c:a4:c1:6a:ef:94:63:53:3f:75:84:76:fe:64:3e:
         a5:86:1b:74
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZASNfaukkEKPb7z46kuf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw
MTJiMTEwHhcNMjYwNjMwMTQ0ODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRkNmMzYWNiMzYwYTBkZjY4ZjQ1ZjQyY2Q0MmRkMWMwYzY1ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPp19eGSe2SIkuhvU59cez7MgSKS
D+UM0wkkzuJb3Umd7yCaMx+Iul6FvYhRSraH+cZ/rhO9D9sGwvm/Ma9a8zIl1Ep4
jfWLW6/tqxr6OjYSLmH65zClX6Q6o31XbtuIUxxZ0mvEfLvVZTfSHnzGAywMzJ7h
OBr07r9Arz4OW4xuoeIgZS1HhOrlAHNDIAIlXQvK1BJwYCVoJmLm/gDlTICHoeor
XrDghL858eyWmmrFAEano4WPqxzj7L61j+J1C/SRP8B72GT8qDh/rK/YjjZ2ggeX
BrENc1xX4zzw1zCTcxvbCJhdyj2zFClwQmuB3GHP3r66NdA/nwJW1N8HjwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMxNbDrLNgoN9o9F9CzULdHAxl26MB8GA1UdIwQY
MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt
YWRlYzA3ZDIyZjQ2LzEvekUxc09zczJDZzMyajBYMExOUXQwY0RHWGJvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2
LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+YTANBgkqhkiG
9w0BAQsFAAOCAQEAFBsP2yWVcQ4s7a8mZ3zPslIdaiAn90UMv0qiy2/c8jEtxTzR
TBIuV+BK2oYWeCONQ69IYhjQxfrCZPyi2kaSpKYDLGss5aI9KLp7iCmYxaB8Kn4N
TLTK/f6gP6STD+ZVwvtD86tpRqW9nFc2etGbCVEfPEMdNFauPMTO+7LsYmzatfxk
Tzg0DNlpvu1XOeGYg/Uo4tII5tsP3HQvC0I3wEZM0OqEpQy+J0ncvCK7s+BRt5ul
fOD45mBxyrN4E4b4NV8+AvSRpNTDzBCMg2Sj9sErhI19PxAyw4xBT1mj7YHTN8UP
OHplOw9IZoftnKTBau+UY1M/dYR2/mQ+pYYbdA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:25 2026 by rpki-client