Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/TJP6k57F2KKffGkzwtmw00x9OYg.asa
File:                     TJP6k57F2KKffGkzwtmw00x9OYg.asa (raw, json)
Hash identifier:          t56zBc/7gOvS31JdBZtqJ5AR4Nq7Y+BSjxkOYEV3eVo=
Subject key identifier:   4C:93:FA:93:9E:C5:D8:A2:9F:7C:69:33:C2:D9:B0:D3:4C:7D:39:88
Certificate issuer:       /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial:       01A0E71C1C8A41BB686EFF16B172E1D5C3F1
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/TJP6k57F2KKffGkzwtmw00x9OYg.asa
Signing time:             Mon 28 Sep 2026 08:22:54 +0000
ASPA not before:          Mon 28 Sep 2026 08:22:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204904
Providers:                AS: 42337
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:1c:1c:8a:41:bb:68:6e:ff:16:b1:72:e1:d5:c3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
        Validity
            Not Before: Sep 28 08:22:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c93fa939ec5d8a29f7c6933c2d9b0d34c7d3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:2d:00:a9:7e:fa:34:9a:27:70:86:af:72:
                    09:2a:f3:3e:52:0e:3e:f5:db:80:8c:fc:e7:76:2e:
                    0e:82:f2:b9:50:74:67:82:cf:3d:7b:e9:b0:b2:d2:
                    3d:c2:1d:d5:90:db:94:f5:a9:10:f3:24:a9:d0:3a:
                    0a:4c:19:6b:26:d5:3b:88:63:b1:e4:7b:2e:c1:8f:
                    30:e7:d3:0b:f5:ff:be:a6:d0:f0:8b:2f:c8:e9:ed:
                    93:6c:f3:69:f4:a2:3a:88:68:2b:1f:69:05:d1:79:
                    03:3e:b6:3f:33:1f:9a:28:35:f5:98:50:c8:b1:07:
                    df:6b:c7:4b:a4:d3:f5:75:c6:8b:d6:a4:69:b3:6b:
                    55:5d:17:15:f2:2c:8f:78:4c:7c:cb:58:59:8e:aa:
                    ba:ef:94:db:21:24:e2:2c:e2:3d:b1:dd:5c:75:15:
                    84:6a:fc:69:65:cb:c9:02:a0:bb:6e:52:db:25:bb:
                    18:24:80:c7:38:7a:a9:70:92:aa:6e:60:b7:52:61:
                    68:5b:62:e1:31:68:69:bb:f5:a9:26:ab:53:6f:58:
                    41:2f:ab:3f:9a:f7:c3:29:88:8a:1d:cc:de:17:51:
                    30:be:f0:83:b1:91:31:2d:d0:91:2f:55:15:37:15:
                    ad:82:b0:6c:48:c6:13:0c:8e:6e:4d:b8:90:c2:19:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:FA:93:9E:C5:D8:A2:9F:7C:69:33:C2:D9:B0:D3:4C:7D:39:88
            X509v3 Authority Key Identifier:
                keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/TJP6k57F2KKffGkzwtmw00x9OYg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204904

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:d3:de:da:be:b2:bc:74:e2:df:1f:3b:ed:7f:5d:2c:71:
         88:5d:22:95:7e:7d:65:94:1d:70:2b:c3:8c:25:95:f6:ea:f7:
         b4:42:b8:9a:db:96:f5:1a:f4:ee:d4:d2:87:7c:c8:65:35:39:
         af:31:a6:44:26:37:be:41:89:65:1e:13:6d:22:54:cc:89:62:
         81:df:9a:17:4a:4e:40:db:7d:bf:5f:4e:cc:7b:38:ee:6e:29:
         f3:7b:46:44:f5:c2:41:08:f7:16:24:9f:36:14:c4:32:bc:23:
         c5:ed:bc:07:fd:97:2a:0f:06:62:29:45:de:d0:df:c1:b0:05:
         9f:02:4a:d7:3f:30:0a:0d:f0:aa:c6:63:29:9e:38:52:c5:ec:
         2d:5f:f9:3e:f5:b9:a1:0b:53:ed:0d:51:74:a0:f6:61:89:3e:
         17:ea:c7:9e:72:7f:a0:f7:0a:2d:d3:46:2b:f0:75:58:29:84:
         87:e2:48:91:f0:9e:9e:e2:89:e0:a4:8f:0c:0e:18:d5:a4:50:
         76:97:25:19:48:bc:a4:93:14:25:b9:eb:73:20:76:1c:e5:b4:
         8b:bc:82:05:d8:e2:6a:1c:fb:d0:60:6e:5a:37:da:42:68:9e:
         43:f8:0d:4e:ad:96:cd:fe:e2:92:e8:a0:62:7a:6e:e0:58:03:
         c2:23:e0:d9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDnHByKQbtobv8WsXLh1cPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWVlNWE1OTJiM2E3ZWM3M2I1NDk0NDI0OTk2ZjdlYmVj
NjhmYmMwHhcNMjYwOTI4MDgyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkzZmE5MzllYzVkOGEyOWY3YzY5MzNjMmQ5YjBkMzRjN2QzOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTYtAKl++jSaJ3CGr3IJKvM+Ug4+
9duAjPzndi4OgvK5UHRngs89e+mwstI9wh3VkNuU9akQ8ySp0DoKTBlrJtU7iGOx
5HsuwY8w59ML9f++ptDwiy/I6e2TbPNp9KI6iGgrH2kF0XkDPrY/Mx+aKDX1mFDI
sQffa8dLpNP1dcaL1qRps2tVXRcV8iyPeEx8y1hZjqq675TbISTiLOI9sd1cdRWE
avxpZcvJAqC7blLbJbsYJIDHOHqpcJKqbmC3UmFoW2LhMWhpu/WpJqtTb1hBL6s/
mvfDKYiKHczeF1EwvvCDsZExLdCRL1UVNxWtgrBsSMYTDI5uTbiQwhkrzwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEyT+pOexdiin3xpM8LZsNNMfTmIMB8GA1UdIwQY
MBaAFOKu5aWSs6fsc7VJRCSZb36+xo+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE3bHBaS3pwLXh6dFVsRUpKbHZmcjdHajd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xN2U5MzYtMTYzMC00YTg1LWE5M2It
Mzk1NWUwNzg2MDkyLzEvVEpQNms1N0YyS0tmZkdrend0bXcwMHg5T1lnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xN2U5MzYtMTYzMC00YTg1LWE5M2ItMzk1NWUwNzg2MDky
LzEvNHE3bHBaS3pwLXh6dFVsRUpKbHZmcjdHajd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMgaDANBgkqhkiG
9w0BAQsFAAOCAQEArLPT3tq+srx04t8fO+1/XSxxiF0ilX59ZZQdcCvDjCWV9ur3
tEK4mtuW9Rr07tTSh3zIZTU5rzGmRCY3vkGJZR4TbSJUzIligd+aF0pOQNt9v19O
zHs47m4p83tGRPXCQQj3FiSfNhTEMrwjxe28B/2XKg8GYilF3tDfwbAFnwJK1z8w
Cg3wqsZjKZ44UsXsLV/5PvW5oQtT7Q1RdKD2YYk+F+rHnnJ/oPcKLdNGK/B1WCmE
h+JIkfCenuKJ4KSPDA4Y1aRQdpclGUi8pJMUJbnrcyB2HOW0i7yCBdjiahz70GBu
WjfaQmieQ/gNTq2Wzf7ikuigYnpu4FgDwiPg2Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:50:49 2026 by rpki-client