Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/_6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa
File:                     _6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa (raw, json)
Hash identifier:          t9M76dXMiyceR0U0QUt2/ZTaClfSexTzeZfzv7VPHnc=
Subject key identifier:   FF:A0:BB:64:92:28:3B:C8:6B:96:09:03:39:60:4B:B4:FF:11:9A:46
Certificate issuer:       /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial:       019F190116DD239AAC6249039FB1761779D7
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/_6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa
Signing time:             Tue 30 Jun 2026 14:48:49 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42541
Providers:                AS: 1299
                          AS: 3356
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:16:dd:23:9a:ac:62:49:03:9f:b1:76:17:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
        Validity
            Not Before: Jun 30 14:48:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ffa0bb6492283bc86b96090339604bb4ff119a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:19:59:71:9b:1e:2e:0c:65:c2:2a:fd:04:
                    62:0a:20:18:24:2e:36:00:09:38:71:bb:26:6b:64:
                    1e:34:71:6a:ee:ee:2e:63:39:28:fc:01:70:1f:a9:
                    58:28:0f:de:86:48:bc:b0:80:34:91:7c:04:d1:09:
                    ca:5f:67:73:39:3c:37:74:f9:42:9a:51:6a:2d:60:
                    5d:57:25:be:02:9c:0b:53:9a:90:df:3a:22:50:2a:
                    15:23:f0:19:bf:1e:7b:63:7a:ac:52:ca:27:2e:44:
                    c6:0e:24:be:58:e1:77:88:46:7a:3d:aa:44:69:09:
                    b9:55:14:4a:d4:b9:1d:4f:b6:6e:52:59:48:78:4d:
                    e6:d8:5a:7c:06:cd:3f:84:38:64:3a:2b:9c:8a:33:
                    ae:d4:90:a5:a8:ee:0f:9a:10:34:e5:c6:9a:a9:91:
                    66:d8:65:e0:fa:13:94:d6:83:1e:b5:38:74:9c:6a:
                    35:46:1d:2e:cd:6f:46:0f:d6:81:b6:c6:29:98:59:
                    c8:b5:aa:af:06:b3:66:7f:ae:fe:a9:0d:e7:35:da:
                    7c:40:5c:2d:9e:e4:84:9b:68:91:59:52:e7:d6:74:
                    97:b1:31:4b:2a:a2:78:ae:4d:17:08:86:55:f6:cd:
                    58:4e:1c:36:ee:55:3c:20:c1:a0:67:7d:69:77:75:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:BB:64:92:28:3B:C8:6B:96:09:03:39:60:4B:B4:FF:11:9A:46
            X509v3 Authority Key Identifier:
                keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/_6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42541

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:d0:0e:5e:8c:04:cb:e8:15:bb:d9:b9:b5:48:60:59:cb:
         22:dc:76:26:e4:57:71:6e:f8:40:af:e6:dd:d0:e4:5a:07:29:
         f6:91:3c:42:86:ce:d8:e7:53:9f:04:16:fa:78:79:d2:19:2f:
         6c:dc:54:c2:fe:bb:cb:cc:49:0b:96:9e:a6:41:7b:1c:85:64:
         09:79:4b:a5:6d:dd:bf:1c:fd:58:98:b9:65:19:ef:7c:dc:c9:
         fc:45:27:fa:e1:e8:68:b8:8f:20:d9:da:23:eb:00:21:d2:eb:
         65:92:60:3b:46:07:c8:08:e4:45:f1:c3:f3:2c:46:ac:02:dc:
         ae:23:9f:c2:19:12:f8:7f:a2:45:a0:4a:0f:17:82:99:b6:9b:
         42:34:d8:79:4b:b0:4f:64:fd:f3:36:8b:53:92:a8:0e:c0:14:
         e4:4f:c3:32:4c:eb:bf:be:15:3d:78:09:84:4d:31:dd:09:e1:
         d4:54:74:fc:b1:82:d6:d5:41:a2:90:00:8e:91:b9:78:a0:c8:
         35:3c:cd:5a:01:ee:b3:e5:43:ef:a1:39:3d:2b:eb:4f:ef:d8:
         11:b2:dd:8d:82:9c:43:bc:48:62:3c:61:42:24:e7:b9:b8:22:
         46:71:0f:9c:9c:1f:eb:60:8d:66:13:ec:2c:85:59:ec:06:b3:
         62:69:ab:72
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZARbdI5qsYkkDn7F2F3nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2
MzVkODgwHhcNMjYwNjMwMTQ0ODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmEwYmI2NDkyMjgzYmM4NmI5NjA5MDMzOTYwNGJiNGZmMTE5YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzUZWXGbHi4MZcIq/QRiCiAYJC42
AAk4cbsma2QeNHFq7u4uYzko/AFwH6lYKA/ehki8sIA0kXwE0QnKX2dzOTw3dPlC
mlFqLWBdVyW+ApwLU5qQ3zoiUCoVI/AZvx57Y3qsUsonLkTGDiS+WOF3iEZ6PapE
aQm5VRRK1LkdT7ZuUllIeE3m2Fp8Bs0/hDhkOiucijOu1JClqO4PmhA05caaqZFm
2GXg+hOU1oMetTh0nGo1Rh0uzW9GD9aBtsYpmFnItaqvBrNmf67+qQ3nNdp8QFwt
nuSEm2iRWVLn1nSXsTFLKqJ4rk0XCIZV9s1YThw27lU8IMGgZ31pd3VMIQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFP+gu2SSKDvIa5YJAzlgS7T/EZpGMB8GA1UdIwQY
MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt
MDk0NGJlZDBlZDI2LzEvXzZDN1pKSW9POGhybGdrRE9XQkx0UDhSbWtZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2
LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmLTANBgkqhkiG
9w0BAQsFAAOCAQEAANXQDl6MBMvoFbvZubVIYFnLItx2JuRXcW74QK/m3dDkWgcp
9pE8QobO2OdTnwQW+nh50hkvbNxUwv67y8xJC5aepkF7HIVkCXlLpW3dvxz9WJi5
ZRnvfNzJ/EUn+uHoaLiPINnaI+sAIdLrZZJgO0YHyAjkRfHD8yxGrALcriOfwhkS
+H+iRaBKDxeCmbabQjTYeUuwT2T98zaLU5KoDsAU5E/DMkzrv74VPXgJhE0x3Qnh
1FR0/LGC1tVBopAAjpG5eKDINTzNWgHus+VD76E5PSvrT+/YEbLdjYKcQ7xIYjxh
QiTnubgiRnEPnJwf62CNZhPsLIVZ7AazYmmrcg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:55 2026 by rpki-client