Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa
File:                     cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (raw, json)
Hash identifier:          vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=
Subject key identifier:   70:20:34:C2:38:14:50:ED:EC:01:D3:D3:25:75:0E:24:2A:4E:19:A5
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019E096CAA19372D2FC74D0297F2255C4119
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa
Signing time:             Fri 08 May 2026 21:09:36 +0000
ASPA not before:          Fri 08 May 2026 21:09:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197670
Providers:                AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:09:6c:aa:19:37:2d:2f:c7:4d:02:97:f2:25:5c:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: May  8 21:09:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=702034c2381450edec01d3d325750e242a4e19a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:d0:5c:85:87:69:7b:73:d1:38:ae:b0:99:
                    f4:86:d8:33:dc:fc:d0:d6:55:3f:08:e8:d5:61:bc:
                    f9:a6:3d:c4:cf:6d:f1:6e:63:3c:4a:73:2b:34:51:
                    f4:90:dc:52:0a:14:d3:fa:7c:6e:be:3d:2b:2a:d7:
                    83:b5:27:18:ce:e9:85:57:a7:50:6e:9c:27:d1:48:
                    15:c0:ae:9f:c6:48:83:58:c6:4f:b8:24:29:9e:6c:
                    c2:b9:93:d1:62:89:e7:d0:2a:52:43:bf:06:5e:d7:
                    73:35:07:0f:12:65:77:da:10:2f:6d:ef:88:ff:57:
                    76:f4:26:98:2c:80:9b:4c:55:84:fc:52:1f:4b:41:
                    00:11:e3:e6:ef:3c:2b:50:9f:65:13:75:25:8d:6b:
                    87:cf:69:ce:18:e1:67:e0:a0:87:52:c9:cb:96:fd:
                    e1:43:73:8c:d2:53:b8:e5:51:c5:91:4f:7c:0a:83:
                    dd:28:41:e4:53:6b:c3:eb:66:cc:80:60:a4:e4:99:
                    e4:33:50:2d:e1:78:5b:4c:a3:da:d2:ec:c8:39:73:
                    e2:a6:80:7d:7d:bb:a1:b4:fc:11:f5:35:b2:1c:ef:
                    79:c7:b0:14:20:b4:89:9c:08:3a:f6:d3:3b:5a:a2:
                    3e:c1:25:2e:ac:6c:c5:fe:90:3d:94:95:b4:11:51:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:20:34:C2:38:14:50:ED:EC:01:D3:D3:25:75:0E:24:2A:4E:19:A5
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197670

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:90:50:99:91:f6:9a:9f:50:ba:35:58:86:22:70:61:f8:
         9c:32:d2:b3:fc:20:8d:a8:d3:a0:42:a7:55:8c:54:03:89:17:
         32:9e:5f:f8:c3:01:b8:c1:e8:18:80:7d:34:c6:19:37:a5:c0:
         f2:fc:df:d9:7e:8d:33:44:61:92:ff:ed:1d:8b:cb:ef:7d:b0:
         ca:c9:8f:6b:c1:90:09:14:3d:78:4a:4b:9d:24:3e:68:e3:9a:
         23:45:32:e7:04:05:4c:9f:99:e3:72:ef:e8:ee:cb:77:76:cf:
         c3:5d:0e:71:0c:cb:76:66:aa:46:43:e2:6e:67:74:a1:24:28:
         03:aa:b4:29:81:76:63:39:9c:35:9b:0d:53:4b:3b:c3:7c:76:
         20:8a:85:42:e0:da:f1:9a:e1:46:ff:ae:cb:31:45:24:e6:74:
         25:31:43:68:8e:6a:5f:a4:ef:74:c3:38:88:46:e7:ea:cc:86:
         cd:5a:de:b9:72:24:79:b7:b9:73:8f:f1:5a:1d:e9:0a:65:1b:
         12:f7:a9:3e:e0:fe:7c:e5:d8:66:a5:64:df:36:1d:b2:38:db:
         d5:6e:76:d4:2a:da:ba:79:52:44:95:7c:87:64:b2:26:36:f6:
         22:e0:ab:36:9e:91:f9:5f:8c:8c:0b:02:23:ec:e6:45:61:46:
         77:e5:11:cc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4JbKoZNy0vx00Cl/IlXEEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy
M2IyZTcwHhcNMjYwNTA4MjEwOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDIwMzRjMjM4MTQ1MGVkZWMwMWQzZDMyNTc1MGUyNDJhNGUxOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0HQXIWHaXtz0TiusJn0htgz3PzQ
1lU/COjVYbz5pj3Ez23xbmM8SnMrNFH0kNxSChTT+nxuvj0rKteDtScYzumFV6dQ
bpwn0UgVwK6fxkiDWMZPuCQpnmzCuZPRYonn0CpSQ78GXtdzNQcPEmV32hAvbe+I
/1d29CaYLICbTFWE/FIfS0EAEePm7zwrUJ9lE3UljWuHz2nOGOFn4KCHUsnLlv3h
Q3OM0lO45VHFkU98CoPdKEHkU2vD62bMgGCk5JnkM1At4XhbTKPa0uzIOXPipoB9
fbuhtPwR9TWyHO95x7AUILSJnAg69tM7WqI+wSUurGzF/pA9lJW0EVFRPQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHAgNMI4FFDt7AHT0yV1DiQqThmlMB8GA1UdIwQY
MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt
ZTkwZDk4MzBlOGM1LzEvY0NBMHdqZ1VVTzNzQWRQVEpYVU9KQ3BPR2FVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1
LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMEJjANBgkqhkiG
9w0BAQsFAAOCAQEAXHKQUJmR9pqfULo1WIYicGH4nDLSs/wgjajToEKnVYxUA4kX
Mp5f+MMBuMHoGIB9NMYZN6XA8vzf2X6NM0Rhkv/tHYvL732wysmPa8GQCRQ9eEpL
nSQ+aOOaI0Uy5wQFTJ+Z43Lv6O7Ld3bPw10OcQzLdmaqRkPibmd0oSQoA6q0KYF2
YzmcNZsNU0s7w3x2IIqFQuDa8ZrhRv+uyzFFJOZ0JTFDaI5qX6TvdMM4iEbn6syG
zVreuXIkebe5c4/xWh3pCmUbEvepPuD+fOXYZqVk3zYdsjjb1W521CraunlSRJV8
h2SyJjb2IuCrNp6R+V+MjAsCI+zmRWFGd+URzA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:13:14 2026 by rpki-client