Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/0zv8thgM094fauKo7yb9m7KXvp4.asa
File:                     0zv8thgM094fauKo7yb9m7KXvp4.asa (raw, json)
Hash identifier:          6HbLgwXUkv7C6GvCQ+QYiV39nDZw16/P94MxN+o+sH0=
Subject key identifier:   D3:3B:FC:B6:18:0C:D3:DE:1F:6A:E2:A8:EF:26:FD:9B:B2:97:BE:9E
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       01A0C0C9844C389417D5925D925E43FAAA0B
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/0zv8thgM094fauKo7yb9m7KXvp4.asa
Signing time:             Sun 20 Sep 2026 21:47:07 +0000
ASPA not before:          Sun 20 Sep 2026 21:47:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211422
Providers:                AS: 44547
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:c9:84:4c:38:94:17:d5:92:5d:92:5e:43:fa:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Sep 20 21:47:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d33bfcb6180cd3de1f6ae2a8ef26fd9bb297be9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:9b:d0:61:86:eb:63:e2:95:5b:4e:b7:65:
                    06:4e:94:53:d3:a3:f1:31:65:bb:3b:f2:5f:34:85:
                    3f:dc:51:c2:3a:7a:45:3f:59:41:70:55:50:07:b7:
                    3f:ed:6c:f4:ee:5a:50:94:e3:f6:2b:c8:c9:d9:15:
                    47:ef:43:b9:f2:a1:7e:0b:30:9a:34:2a:75:54:57:
                    b3:d1:0d:c9:9c:60:b1:44:09:e8:a8:22:ce:8c:81:
                    d8:9c:39:ed:4d:08:bd:8a:a7:ff:12:42:d8:8a:02:
                    ef:0c:95:c6:9b:70:36:a8:86:87:dc:70:3b:09:ed:
                    8c:fb:38:60:9b:e8:d9:8e:9d:77:d6:82:c9:d2:c9:
                    63:6c:aa:4d:4b:fb:86:55:54:e5:18:d2:62:19:91:
                    97:28:3c:11:bf:80:41:df:b8:2a:17:12:13:ce:f3:
                    29:e9:de:1b:2e:61:cf:02:0f:69:68:33:e2:38:45:
                    51:e5:9f:9c:b1:6a:f0:cf:41:33:d1:30:d2:d2:ce:
                    df:f3:db:e5:c5:cd:eb:4d:65:b7:59:4d:4c:cb:26:
                    95:dd:e9:2e:36:e1:aa:50:15:0c:64:74:03:ee:6b:
                    3f:1a:46:e2:06:2a:79:70:d9:55:b5:7d:0f:0f:05:
                    2d:2f:ab:a7:74:b1:02:5e:25:8c:28:1f:28:7d:89:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:FC:B6:18:0C:D3:DE:1F:6A:E2:A8:EF:26:FD:9B:B2:97:BE:9E
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/0zv8thgM094fauKo7yb9m7KXvp4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211422

    Signature Algorithm: sha256WithRSAEncryption
         62:19:36:2d:3e:50:c4:dd:c9:2c:91:98:c7:39:f1:bc:64:32:
         e3:5a:9c:d4:56:90:a5:e7:35:cc:21:cc:e2:ec:7e:e3:c8:70:
         9b:44:10:20:fc:44:21:65:ff:db:e6:ca:19:26:e5:1f:00:48:
         89:e3:9c:cd:34:7a:88:ba:93:46:34:5e:95:97:1f:36:b7:de:
         dc:cf:f5:44:ed:20:6e:61:87:89:bf:bb:22:28:04:4d:ec:9a:
         38:36:08:c2:e0:d9:cf:32:25:e2:bd:e5:55:5a:08:a9:88:c4:
         08:10:49:5e:b5:2f:85:2e:ac:0a:4e:cd:c6:29:45:e0:47:67:
         99:75:68:ef:f3:81:d1:fc:98:73:1e:11:e7:16:14:b6:c9:54:
         21:71:aa:09:07:67:d4:3c:c5:fd:68:97:a0:68:25:c9:9d:17:
         29:4f:f2:6d:09:47:37:cf:d0:5e:b4:01:d9:33:ed:89:99:c4:
         6f:e4:3f:ab:e1:1c:15:77:0b:16:7f:61:40:fe:8a:3b:74:e3:
         42:ea:11:bb:0d:a2:7e:6f:52:47:9d:65:b0:32:24:6a:91:fa:
         5a:73:eb:cf:53:06:03:7a:6a:09:a6:f9:18:37:38:ec:47:fe:
         fa:87:80:7b:d4:dd:30:55:87:15:b0:7f:86:2c:46:da:e6:6b:
         0f:29:01:a0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDAyYRMOJQX1ZJdkl5D+qoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3
MGUwY2QwHhcNMjYwOTIwMjE0NzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzNiZmNiNjE4MGNkM2RlMWY2YWUyYThlZjI2ZmQ5YmIyOTdiZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLib0GGG62PilVtOt2UGTpRT06Px
MWW7O/JfNIU/3FHCOnpFP1lBcFVQB7c/7Wz07lpQlOP2K8jJ2RVH70O58qF+CzCa
NCp1VFez0Q3JnGCxRAnoqCLOjIHYnDntTQi9iqf/EkLYigLvDJXGm3A2qIaH3HA7
Ce2M+zhgm+jZjp131oLJ0sljbKpNS/uGVVTlGNJiGZGXKDwRv4BB37gqFxITzvMp
6d4bLmHPAg9paDPiOEVR5Z+csWrwz0Ez0TDS0s7f89vlxc3rTWW3WU1MyyaV3eku
NuGqUBUMZHQD7ms/GkbiBip5cNlVtX0PDwUtL6undLECXiWMKB8ofYk67wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNM7/LYYDNPeH2riqO8m/Zuyl76eMB8GA1UdIwQY
MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt
Yzk5NWQyZWM5ZTk0LzEvMHp2OHRoZ00wOTRmYXVLbzd5YjltN0tYdnA0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0
LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM53jANBgkqhkiG
9w0BAQsFAAOCAQEAYhk2LT5QxN3JLJGYxznxvGQy41qc1FaQpec1zCHM4ux+48hw
m0QQIPxEIWX/2+bKGSblHwBIieOczTR6iLqTRjRelZcfNrfe3M/1RO0gbmGHib+7
IigETeyaODYIwuDZzzIl4r3lVVoIqYjECBBJXrUvhS6sCk7NxilF4EdnmXVo7/OB
0fyYcx4R5xYUtslUIXGqCQdn1DzF/WiXoGglyZ0XKU/ybQlHN8/QXrQB2TPtiZnE
b+Q/q+EcFXcLFn9hQP6KO3TjQuoRuw2ifm9SR51lsDIkapH6WnPrz1MGA3pqCab5
GDc47Ef++oeAe9TdMFWHFbB/hixG2uZrDykBoA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:29 2026 by rpki-client