Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa
File:                     v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (raw, json)
Hash identifier:          RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=
Subject key identifier:   BF:7A:EB:E6:DF:DA:84:DD:D2:19:5A:76:02:94:F5:A8:5D:FE:7F:00
Certificate issuer:       /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial:       019CFCD3DF7A22CC4535A2D35183DCDA60D2
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa
Signing time:             Tue 17 Mar 2026 17:24:29 +0000
ASPA not before:          Tue 17 Mar 2026 17:24:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200079
Providers:                AS: 834
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fc:d3:df:7a:22:cc:45:35:a2:d3:51:83:dc:da:60:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
        Validity
            Not Before: Mar 17 17:24:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf7aebe6dfda84ddd2195a760294f5a85dfe7f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:eb:43:7e:dc:f3:15:d2:ea:46:ab:ca:6f:
                    09:08:72:a0:85:ad:fc:ed:dc:02:b8:78:83:64:1e:
                    2e:ff:53:99:ea:52:be:7d:a5:5b:bc:b2:8f:8a:6b:
                    eb:0c:de:d0:6d:17:a5:05:12:1a:f0:45:49:e8:96:
                    0d:c8:be:d9:23:fa:4a:7c:69:6b:42:35:24:01:c2:
                    f2:c3:5a:9c:4e:9f:dc:92:4a:09:d6:46:7c:58:ef:
                    2a:a1:e8:ef:35:86:1b:57:40:37:87:00:30:22:4b:
                    cf:7f:09:b7:4d:ea:96:0b:8b:37:34:f8:0c:6e:7c:
                    ec:44:80:a0:6f:e9:b6:51:90:cd:63:12:e7:71:70:
                    32:4c:ff:b0:56:23:a1:9e:c4:11:61:f4:da:45:16:
                    de:01:e9:3e:51:ee:98:75:25:27:17:5c:e8:10:f3:
                    76:76:b2:b0:be:31:78:ab:4a:67:ef:01:b1:d8:18:
                    39:bb:4f:09:08:16:16:d8:65:99:f5:93:11:3a:32:
                    00:8c:f8:8b:5a:9f:ca:d7:63:a2:22:62:23:ec:db:
                    b6:ab:43:19:29:b5:19:35:92:10:d6:5c:fc:01:b1:
                    3e:31:c3:3c:72:a9:c8:81:c2:20:0b:98:d3:6c:18:
                    66:b1:06:08:a1:ca:01:78:2d:2c:53:43:ad:8c:cd:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7A:EB:E6:DF:DA:84:DD:D2:19:5A:76:02:94:F5:A8:5D:FE:7F:00
            X509v3 Authority Key Identifier:
                keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200079

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:6c:e2:29:92:03:dc:f7:19:aa:19:25:55:e8:bc:13:2d:
         08:de:d1:ad:aa:cb:bf:6b:f6:5a:73:e6:58:c6:de:c3:16:24:
         16:59:fc:9f:98:7c:ae:59:d2:03:5d:4d:5e:b3:61:d6:6b:eb:
         66:1b:78:2b:9e:dd:f4:bd:41:91:60:e6:1f:e2:22:f8:c6:4a:
         bc:d3:40:e7:e0:eb:5a:f9:ff:0b:7b:cd:32:7d:b3:ee:4e:28:
         19:98:f0:e9:69:ab:f9:72:8a:9c:a5:df:f2:e9:a8:94:9b:65:
         80:0f:2d:65:ed:cf:d9:fe:a8:9f:39:65:e2:4e:12:71:fc:c1:
         0e:7a:c1:f3:b9:28:22:a2:81:4f:be:4c:37:51:3b:67:29:83:
         1d:43:05:5a:2c:5a:e4:06:13:38:22:46:76:82:5e:81:05:a1:
         d2:dc:14:01:dd:62:27:9a:6a:2e:fa:b2:49:46:13:3f:db:90:
         85:6f:09:27:d2:91:cc:ca:59:1c:80:d9:14:2a:69:90:ec:6d:
         e4:f8:da:70:17:ea:7a:f8:3c:92:04:78:86:5b:d5:35:99:1e:
         c0:dd:a7:1a:99:c6:81:7e:71:ad:5b:3f:66:5d:7c:64:88:04:
         93:eb:76:73:fc:6c:49:6c:5b:a0:5a:95:51:bf:a3:03:13:46:
         a4:04:66:9a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZz80996IsxFNaLTUYPc2mDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDQ5Y2NiOWEyNTQ4YTAxYWZhMzAxNzQxNTE1NzRhMGM3
YTQxMmMwHhcNMjYwMzE3MTcyNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjdhZWJlNmRmZGE4NGRkZDIxOTVhNzYwMjk0ZjVhODVkZmU3ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhfrQ37c8xXS6karym8JCHKgha38
7dwCuHiDZB4u/1OZ6lK+faVbvLKPimvrDN7QbRelBRIa8EVJ6JYNyL7ZI/pKfGlr
QjUkAcLyw1qcTp/ckkoJ1kZ8WO8qoejvNYYbV0A3hwAwIkvPfwm3TeqWC4s3NPgM
bnzsRICgb+m2UZDNYxLncXAyTP+wViOhnsQRYfTaRRbeAek+Ue6YdSUnF1zoEPN2
drKwvjF4q0pn7wGx2Bg5u08JCBYW2GWZ9ZMROjIAjPiLWp/K12OiImIj7Nu2q0MZ
KbUZNZIQ1lz8AbE+McM8cqnIgcIgC5jTbBhmsQYIocoBeC0sU0OtjM34cQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFL966+bf2oTd0hladgKU9ahd/n8AMB8GA1UdIwQY
MBaAFJgEnMuaJUigGvowF0FRV0oMekEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQt
OTJjN2NmYWE4YjdkLzEvdjNycjV0X2FoTjNTR1ZwMkFwVDFxRjMtZndBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQtOTJjN2NmYWE4Yjdk
LzEvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNjzANBgkqhkiG
9w0BAQsFAAOCAQEAEPts4imSA9z3GaoZJVXovBMtCN7RrarLv2v2WnPmWMbewxYk
Fln8n5h8rlnSA11NXrNh1mvrZht4K57d9L1BkWDmH+Ii+MZKvNNA5+DrWvn/C3vN
Mn2z7k4oGZjw6Wmr+XKKnKXf8umolJtlgA8tZe3P2f6onzll4k4ScfzBDnrB87ko
IqKBT75MN1E7ZymDHUMFWixa5AYTOCJGdoJegQWh0twUAd1iJ5pqLvqySUYTP9uQ
hW8JJ9KRzMpZHIDZFCppkOxt5PjacBfqevg8kgR4hlvVNZkewN2nGpnGgX5xrVs/
Zl18ZIgEk+t2c/xsSWxboFqVUb+jAxNGpARmmg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:31 2026 by rpki-client