Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa
File:                     AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (raw, json)
Hash identifier:          vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=
Subject key identifier:   01:E2:76:CE:50:82:C4:01:AA:20:66:49:30:6C:69:7D:27:13:E1:A6
Certificate issuer:       /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial:       019F19015FF284DBB60482CDCC5FEFB708D3
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa
Signing time:             Tue 30 Jun 2026 14:49:08 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205619
Providers:                AS: 16019
                          AS: 28725
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:5f:f2:84:db:b6:04:82:cd:cc:5f:ef:b7:08:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
        Validity
            Not Before: Jun 30 14:49:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01e276ce5082c401aa206649306c697d2713e1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:f9:70:d8:6b:d6:c1:b2:e1:61:fa:dc:b0:
                    e7:59:f2:9b:2d:59:ae:e8:52:1f:d0:f6:5e:fd:d0:
                    d8:8e:04:a8:f0:8b:be:9b:50:70:f3:d1:75:96:c3:
                    bf:0b:54:fe:8b:dc:fb:63:83:46:48:7d:3e:9e:bd:
                    b7:57:d4:f9:72:97:3a:39:91:f7:cc:ce:82:c9:02:
                    fe:c8:e6:18:24:38:dc:66:69:64:6a:54:a4:cb:52:
                    0e:95:0c:fa:48:d5:80:8e:91:7b:ad:6c:dc:54:a7:
                    1a:56:82:7d:f5:7e:ff:04:c3:be:aa:10:ad:ab:02:
                    ef:29:bb:d9:6d:11:f8:67:a1:85:ea:c9:33:1a:56:
                    77:8e:0a:70:31:bf:a8:0e:15:36:ac:c6:b9:a2:8a:
                    b4:4b:64:cb:b5:57:e7:76:9a:07:60:6b:74:4b:88:
                    50:05:68:48:cb:23:b5:97:f2:9d:e9:b9:b0:a4:5d:
                    9c:92:40:ec:b4:36:be:8d:f5:d3:4f:63:77:f9:ea:
                    41:25:a6:a0:0a:48:c9:04:c4:e7:f3:f9:d0:39:5a:
                    7e:1b:88:fc:06:0d:f4:f7:6c:4c:78:03:6b:bd:90:
                    d4:63:c7:d6:72:64:c5:99:49:7c:2f:75:71:09:86:
                    c7:df:32:a2:3d:3e:04:31:da:67:e3:f7:1c:c3:f5:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:76:CE:50:82:C4:01:AA:20:66:49:30:6C:69:7D:27:13:E1:A6
            X509v3 Authority Key Identifier:
                keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205619

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:5f:9a:00:33:fb:6c:b8:2f:bd:6c:88:17:ba:7a:cd:ed:
         bd:7e:df:f5:88:0e:ee:3c:d2:d4:00:c2:71:9c:c8:f9:b9:14:
         7c:46:cb:f7:21:ef:ee:d6:a0:aa:e6:1d:d9:df:4d:e9:b1:54:
         4a:71:a1:a7:92:12:f7:d8:13:d2:22:5b:b8:47:cb:84:d1:0a:
         53:28:70:d2:c7:83:9c:b5:53:bd:f6:bf:0a:bb:2a:04:c0:c7:
         3a:16:29:da:b9:6a:8e:7e:76:0b:9c:6e:c8:a9:32:d3:cc:36:
         be:58:00:1d:ab:c1:7e:ff:2b:d7:a4:84:05:fc:9c:b6:7f:09:
         ac:f4:bf:b5:7d:76:0e:63:e0:61:46:c6:55:cb:03:74:05:70:
         6a:9a:e3:87:c2:ba:12:61:e9:71:10:1b:d3:ab:35:5e:8c:aa:
         03:f5:b9:39:99:d5:21:54:53:e4:5e:25:bf:b7:41:1a:86:09:
         d9:2f:11:60:93:04:aa:60:6a:39:f8:02:63:65:07:b5:3d:a5:
         46:f3:ff:2a:49:7b:f7:fe:eb:75:99:cd:2c:23:e8:ee:60:57:
         f5:b8:6b:c4:88:01:1d:4d:ca:fa:c9:a8:ef:f3:3d:a9:06:d9:
         37:29:bf:ac:87:22:d3:f8:9a:b4:e4:03:39:c4:62:8f:0c:6d:
         ca:65:95:18
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAV/yhNu2BILNzF/vtwjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjYwNjMwMTQ0OTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWUyNzZjZTUwODJjNDAxYWEyMDY2NDkzMDZjNjk3ZDI3MTNlMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfv5cNhr1sGy4WH63LDnWfKbLVmu
6FIf0PZe/dDYjgSo8Iu+m1Bw89F1lsO/C1T+i9z7Y4NGSH0+nr23V9T5cpc6OZH3
zM6CyQL+yOYYJDjcZmlkalSky1IOlQz6SNWAjpF7rWzcVKcaVoJ99X7/BMO+qhCt
qwLvKbvZbRH4Z6GF6skzGlZ3jgpwMb+oDhU2rMa5ooq0S2TLtVfndpoHYGt0S4hQ
BWhIyyO1l/Kd6bmwpF2ckkDstDa+jfXTT2N3+epBJaagCkjJBMTn8/nQOVp+G4j8
Bg3092xMeANrvZDUY8fWcmTFmUl8L3VxCYbH3zKiPT4EMdpn4/ccw/UDOwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAHids5QgsQBqiBmSTBsaX0nE+GmMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvQWVKMnpsQ0N4QUdxSUdaSk1HeHBmU2NUNGFZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjMzANBgkqhkiG
9w0BAQsFAAOCAQEAqWZfmgAz+2y4L71siBe6es3tvX7f9YgO7jzS1ADCcZzI+bkU
fEbL9yHv7tagquYd2d9N6bFUSnGhp5IS99gT0iJbuEfLhNEKUyhw0seDnLVTvfa/
CrsqBMDHOhYp2rlqjn52C5xuyKky08w2vlgAHavBfv8r16SEBfyctn8JrPS/tX12
DmPgYUbGVcsDdAVwaprjh8K6EmHpcRAb06s1XoyqA/W5OZnVIVRT5F4lv7dBGoYJ
2S8RYJMEqmBqOfgCY2UHtT2lRvP/Kkl79/7rdZnNLCPo7mBX9bhrxIgBHU3K+smo
7/M9qQbZNym/rIci0/iatOQDOcRijwxtymWVGA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:28 2026 by rpki-client