Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qY4yCOWTnlPWkTWa1a07dG8fIgA.asa
File:                     qY4yCOWTnlPWkTWa1a07dG8fIgA.asa (raw, json)
Hash identifier:          vMaDRmq9yFz+m9oIbjqpXaC5rEWSYqU9EGUZqbMSeB8=
Subject key identifier:   A9:8E:32:08:E5:93:9E:53:D6:91:35:9A:D5:AD:3B:74:6F:1F:22:00
Certificate issuer:       /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial:       019F6A483BF7C5442E1F344CE58AB50D906F
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qY4yCOWTnlPWkTWa1a07dG8fIgA.asa
Signing time:             Thu 16 Jul 2026 09:35:46 +0000
ASPA not before:          Thu 16 Jul 2026 09:35:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201043
Providers:                AS: 174
                          AS: 15965
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:6a:48:3b:f7:c5:44:2e:1f:34:4c:e5:8a:b5:0d:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
        Validity
            Not Before: Jul 16 09:35:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a98e3208e5939e53d691359ad5ad3b746f1f2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:ea:c9:53:3d:99:e8:1e:42:a8:61:8d:f1:
                    df:42:c2:8d:f3:c7:a3:b3:d5:68:0b:26:a1:5b:fe:
                    eb:9f:da:a7:2d:39:bd:3d:55:b7:a8:be:9b:cc:fc:
                    c3:af:8c:9d:24:45:43:7e:52:8d:c3:03:80:af:3c:
                    32:67:33:a1:69:69:96:66:bd:2c:b8:45:c8:1a:d6:
                    25:3e:05:e9:17:a0:a5:62:58:3a:c0:bc:75:6c:22:
                    5b:4c:f4:a5:18:b2:4a:8d:de:db:31:71:84:d5:ed:
                    f8:1a:9c:76:d6:c5:e7:69:37:ba:45:e6:04:66:9b:
                    55:e5:5a:c7:f9:2d:9f:59:5e:f7:d4:79:5f:86:47:
                    8e:a8:2d:bd:2c:29:e0:fd:bf:3a:c5:c3:8a:02:c6:
                    8b:e9:5d:6e:63:7b:03:f2:dd:3b:18:a1:37:54:5c:
                    c2:04:f7:ce:3f:79:e9:16:d3:29:da:63:ba:9b:28:
                    30:2b:3f:14:0b:8a:1c:81:40:ee:cd:e8:37:ca:d6:
                    20:92:f9:b1:d3:bc:4a:f6:62:cc:a8:87:4e:3c:56:
                    ab:97:fe:78:32:4c:a7:f9:30:83:ea:cb:f8:65:d0:
                    e8:32:24:d5:9e:96:c3:24:32:a3:ff:a6:14:e3:d9:
                    8e:09:1c:be:9d:cf:3b:74:e1:8e:d5:24:77:8e:de:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:32:08:E5:93:9E:53:D6:91:35:9A:D5:AD:3B:74:6F:1F:22:00
            X509v3 Authority Key Identifier:
                keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/qY4yCOWTnlPWkTWa1a07dG8fIgA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201043

    Signature Algorithm: sha256WithRSAEncryption
         2e:56:ae:51:5c:d8:e9:8a:f8:98:84:07:5a:17:83:24:8d:0d:
         56:82:ac:3f:5f:77:1b:51:67:20:53:4a:50:ed:3d:77:db:28:
         e5:a8:5c:eb:ce:46:60:f3:83:cc:bb:e3:b6:a6:39:ff:71:97:
         76:1f:32:aa:02:b7:d8:80:2c:73:a0:a5:73:f8:e1:5c:4d:ca:
         a0:68:05:15:f8:b4:72:73:0c:0c:f4:78:97:a2:c1:a9:76:7b:
         b1:86:dc:99:39:af:2e:91:06:d2:96:e3:c8:b4:3f:f5:f9:c4:
         b0:37:f1:9a:78:a4:0a:28:2b:19:14:a3:fe:05:73:a0:77:29:
         02:41:5e:8a:1f:af:4e:0a:57:d7:6b:02:b6:ad:60:2b:f7:94:
         76:b6:0b:1f:42:c5:ad:b7:51:ff:64:1c:be:fc:87:1d:ec:b2:
         6c:d3:b0:a9:54:d2:43:85:a2:03:4b:ad:5a:06:e1:f0:36:4c:
         36:51:9f:09:85:d4:b7:84:8f:f7:eb:73:e6:f2:a6:a3:9c:f0:
         3e:4f:38:99:17:a1:ad:4f:0d:a6:48:e0:7e:59:6b:a4:7b:db:
         61:03:7b:36:df:52:7a:ec:1f:27:a0:98:f0:4e:3c:7e:4d:47:
         23:b3:45:03:a3:0c:52:22:82:49:f0:64:73:06:8d:27:f3:49:
         85:5e:8e:81
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ9qSDv3xUQuHzRM5Yq1DZBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2IwN2ViZDM3NDdlNjAwZjhjMjY0ZDk3OTJkZTM0NGY4
YWE3YWQwHhcNMjYwNzE2MDkzNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThlMzIwOGU1OTM5ZTUzZDY5MTM1OWFkNWFkM2I3NDZmMWYyMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3qyVM9megeQqhhjfHfQsKN88ej
s9VoCyahW/7rn9qnLTm9PVW3qL6bzPzDr4ydJEVDflKNwwOArzwyZzOhaWmWZr0s
uEXIGtYlPgXpF6ClYlg6wLx1bCJbTPSlGLJKjd7bMXGE1e34Gpx21sXnaTe6ReYE
ZptV5VrH+S2fWV731HlfhkeOqC29LCng/b86xcOKAsaL6V1uY3sD8t07GKE3VFzC
BPfOP3npFtMp2mO6mygwKz8UC4ocgUDuzeg3ytYgkvmx07xK9mLMqIdOPFarl/54
Mkyn+TCD6sv4ZdDoMiTVnpbDJDKj/6YU49mOCRy+nc87dOGO1SR3jt7fhQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKmOMgjlk55T1pE1mtWtO3RvHyIAMB8GA1UdIwQY
MBaAFKY7B+vTdH5gD4wmTZeS3jRPiqetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpzSDY5TjBmbUFQakNaTmw1TGVORS1LcDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NDE1MWEtZmQ5Ny00OTFhLWFmM2It
NDBmNDgyMjZlY2VmLzEvcVk0eUNPV1RubFBXa1RXYTFhMDdkRzhmSWdBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81NDE1MWEtZmQ5Ny00OTFhLWFmM2ItNDBmNDgyMjZlY2Vm
LzEvcGpzSDY5TjBmbUFQakNaTmw1TGVORS1LcDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRUzANBgkqhkiG
9w0BAQsFAAOCAQEALlauUVzY6Yr4mIQHWheDJI0NVoKsP193G1FnIFNKUO09d9so
5ahc685GYPODzLvjtqY5/3GXdh8yqgK32IAsc6Clc/jhXE3KoGgFFfi0cnMMDPR4
l6LBqXZ7sYbcmTmvLpEG0pbjyLQ/9fnEsDfxmnikCigrGRSj/gVzoHcpAkFeih+v
TgpX12sCtq1gK/eUdrYLH0LFrbdR/2QcvvyHHeyybNOwqVTSQ4WiA0utWgbh8DZM
NlGfCYXUt4SP9+tz5vKmo5zwPk84mRehrU8NpkjgfllrpHvbYQN7Nt9SeuwfJ6CY
8E48fk1HI7NFA6MMUiKCSfBkcwaNJ/NJhV6OgQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:10 2026 by rpki-client