Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/uFDhrp45x2S15YuMbH58dJYEMFI.asa
File:                     uFDhrp45x2S15YuMbH58dJYEMFI.asa (raw, json)
Hash identifier:          AUBNykXKGbFKhvh9Mvpa3SOfRAcYIzZmiYje8ZwFI3k=
Subject key identifier:   B8:50:E1:AE:9E:39:C7:64:B5:E5:8B:8C:6C:7E:7C:74:96:04:30:52
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019F19012622FA7649E118FFDBBBEFDDD72B
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/uFDhrp45x2S15YuMbH58dJYEMFI.asa
Signing time:             Tue 30 Jun 2026 14:48:53 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208974
Providers:                AS: 204680
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:26:22:fa:76:49:e1:18:ff:db:bb:ef:dd:d7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jun 30 14:48:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b850e1ae9e39c764b5e58b8c6c7e7c7496043052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:10:22:9b:17:e3:0e:a1:06:7e:a9:19:b4:
                    db:3a:2d:b0:b5:0d:c1:13:2a:e9:15:38:3f:70:5f:
                    26:8d:06:6a:03:54:26:e4:01:2d:4e:92:c4:f8:5e:
                    c2:60:5d:53:ae:19:f3:03:bc:18:c9:18:97:47:b7:
                    ce:c2:58:33:ec:80:71:c5:7d:b4:86:34:d1:8b:c7:
                    00:ec:92:0b:ef:55:e7:48:31:4f:5e:17:af:74:22:
                    0f:0f:56:38:42:bf:8d:80:d9:0a:3b:52:13:f7:82:
                    7b:27:ef:bc:69:74:fb:2b:33:71:ec:53:b5:0c:f1:
                    fe:14:df:64:e2:18:3c:ca:32:bd:75:a7:5b:ac:ef:
                    20:b0:15:a2:fa:e0:19:b3:39:10:1c:28:55:d3:ad:
                    22:71:f4:01:59:29:76:5e:59:91:c9:eb:40:a0:f5:
                    8d:16:d7:95:9e:2a:e0:47:80:c6:13:ec:fc:92:05:
                    2e:da:7a:ba:4e:7a:be:5f:bb:da:06:c8:f9:2c:1d:
                    43:65:a5:4e:a5:fe:bf:ed:43:4c:a5:97:69:18:2e:
                    5e:a8:8e:08:3f:50:1d:29:37:b7:c5:07:e3:0d:af:
                    9e:c2:38:fc:22:26:a2:6f:68:ac:7b:7f:18:21:7c:
                    23:87:2c:4d:74:f7:d8:ee:6f:bd:62:8e:90:2d:31:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:E1:AE:9E:39:C7:64:B5:E5:8B:8C:6C:7E:7C:74:96:04:30:52
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/uFDhrp45x2S15YuMbH58dJYEMFI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208974

    Signature Algorithm: sha256WithRSAEncryption
         c9:f0:58:60:b3:1c:79:9a:51:d2:80:a0:b5:5f:12:51:47:9b:
         02:8f:17:eb:4a:85:53:9f:03:90:9f:29:5c:1d:4e:1c:0a:2c:
         0d:6a:67:87:4a:24:28:2f:94:17:72:dc:b1:c9:ec:d2:13:df:
         2f:a5:fb:9c:ea:05:64:00:71:4e:df:6b:08:f0:71:73:bf:20:
         bc:74:a0:b5:47:6c:81:bc:5e:c3:2c:8c:ea:f4:fb:a9:7b:63:
         56:eb:e9:47:74:2d:2c:82:8d:d3:2a:a6:51:18:6d:9f:6a:77:
         e8:f1:d2:d4:0b:fe:6e:b3:31:12:b7:52:78:8d:ee:3a:25:94:
         36:76:ea:74:e8:2d:c8:88:9d:d4:97:4a:7f:a1:8c:47:78:af:
         b9:4f:71:01:0c:24:6a:b5:52:65:d1:5b:90:b0:c7:cd:22:43:
         74:20:f1:a6:5c:75:50:69:74:cf:fb:e0:bc:79:75:5c:2f:ab:
         65:67:61:e7:fe:91:8c:48:6c:38:50:b5:58:69:93:b6:a9:63:
         3d:0e:7b:76:65:7b:63:36:38:88:16:d4:a0:52:3b:47:47:f2:
         b3:2b:fc:f3:9c:ef:fe:d6:48:6a:61:b8:b1:ce:6e:f3:51:d1:
         9f:76:7f:97:f3:80:4e:f5:95:c0:7c:19:5e:d3:21:ec:8a:84:
         f8:1d:53:18
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZASYi+nZJ4Rj/27vv3dcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjYwNjMwMTQ0ODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODUwZTFhZTllMzljNzY0YjVlNThiOGM2YzdlN2M3NDk2MDQzMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAQIpsX4w6hBn6pGbTbOi2wtQ3B
EyrpFTg/cF8mjQZqA1Qm5AEtTpLE+F7CYF1TrhnzA7wYyRiXR7fOwlgz7IBxxX20
hjTRi8cA7JIL71XnSDFPXhevdCIPD1Y4Qr+NgNkKO1IT94J7J++8aXT7KzNx7FO1
DPH+FN9k4hg8yjK9dadbrO8gsBWi+uAZszkQHChV060icfQBWSl2XlmRyetAoPWN
FteVnirgR4DGE+z8kgUu2nq6Tnq+X7vaBsj5LB1DZaVOpf6/7UNMpZdpGC5eqI4I
P1AdKTe3xQfjDa+ewjj8Iiaib2ise38YIXwjhyxNdPfY7m+9Yo6QLTFfKQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLhQ4a6eOcdkteWLjGx+fHSWBDBSMB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvdUZEaHJwNDV4MlMxNVl1TWJINThkSllFTUZJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwTjANBgkqhkiG
9w0BAQsFAAOCAQEAyfBYYLMceZpR0oCgtV8SUUebAo8X60qFU58DkJ8pXB1OHAos
DWpnh0okKC+UF3Lcscns0hPfL6X7nOoFZABxTt9rCPBxc78gvHSgtUdsgbxewyyM
6vT7qXtjVuvpR3QtLIKN0yqmURhtn2p36PHS1Av+brMxErdSeI3uOiWUNnbqdOgt
yIid1JdKf6GMR3ivuU9xAQwkarVSZdFbkLDHzSJDdCDxplx1UGl0z/vgvHl1XC+r
ZWdh5/6RjEhsOFC1WGmTtqljPQ57dmV7YzY4iBbUoFI7R0fysyv885zv/tZIamG4
sc5u81HRn3Z/l/OATvWVwHwZXtMh7IqE+B1TGA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:31 2026 by rpki-client