Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/E36OwHqQ6w57Cin5wvtmgpKJp1M.asa
File:                     E36OwHqQ6w57Cin5wvtmgpKJp1M.asa (raw, json)
Hash identifier:          VOikmM+ev8Ka01X1o17ZmNFWB0YN01vxXHPntHlQFIM=
Subject key identifier:   13:7E:8E:C0:7A:90:EB:0E:7B:0A:29:F9:C2:FB:66:82:92:89:A7:53
Certificate issuer:       /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial:       019F19012A531503A7367D55FB0B5F8F3FDE
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/E36OwHqQ6w57Cin5wvtmgpKJp1M.asa
Signing time:             Tue 30 Jun 2026 14:48:54 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44980
Providers:                AS: 8607
                          AS: 15830
                          AS: 21371
                          AS: 29611
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:2a:53:15:03:a7:36:7d:55:fb:0b:5f:8f:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
        Validity
            Not Before: Jun 30 14:48:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=137e8ec07a90eb0e7b0a29f9c2fb66829289a753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:86:d3:60:da:21:3e:fe:12:1a:cc:28:8b:
                    d6:5a:e9:e6:bc:c5:3e:53:8c:18:4c:9e:7b:bf:d6:
                    2c:dd:ba:39:a7:5e:fc:03:d4:d4:7c:7f:1b:54:6f:
                    fd:23:3a:e1:60:05:a5:0a:55:e5:56:c7:f1:b5:75:
                    c4:b9:1d:d3:51:7a:cc:39:3d:f6:80:12:05:a6:33:
                    c2:76:dd:22:7a:dd:28:05:83:58:4d:db:f9:04:e5:
                    ff:92:cb:58:49:0b:ae:f0:1b:0a:8d:86:00:28:a6:
                    79:1f:57:1d:d8:54:82:ba:8b:ba:2c:81:6f:e9:85:
                    92:54:d6:93:38:23:e9:d6:d8:3c:3e:ba:09:11:24:
                    a3:45:3e:0b:6d:ed:27:c1:65:ee:ad:9f:59:88:33:
                    e9:d7:0c:f8:52:ca:b4:76:3f:db:ad:67:70:d8:f3:
                    7a:f6:8f:fd:e9:84:be:7a:c6:65:54:51:e1:ff:07:
                    83:53:37:a3:5f:7e:f3:74:d0:03:20:da:62:31:e1:
                    bc:e9:c8:3e:fe:e3:23:f5:96:b9:c3:da:99:d4:62:
                    34:cf:10:fc:a3:41:fd:11:00:3e:34:cd:4e:ae:d3:
                    8a:7a:ca:01:ce:57:da:12:1d:b0:0d:66:6e:4a:b5:
                    ca:02:0b:8c:f3:cc:72:e1:7c:19:10:84:5f:cc:22:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:8E:C0:7A:90:EB:0E:7B:0A:29:F9:C2:FB:66:82:92:89:A7:53
            X509v3 Authority Key Identifier:
                keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/E36OwHqQ6w57Cin5wvtmgpKJp1M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44980

    Signature Algorithm: sha256WithRSAEncryption
         5c:99:15:36:01:14:92:b5:92:1b:ca:e2:cf:4a:63:dc:42:50:
         85:83:55:ec:60:76:ec:0f:4d:4c:31:e7:c7:7c:90:2b:8b:e3:
         cd:1b:64:c4:8e:99:24:cb:5e:51:47:8a:b2:b5:e3:13:ba:8b:
         9b:95:37:16:9d:5d:0f:69:c8:e1:3d:5f:12:7a:40:ac:88:1f:
         59:1a:e3:a5:6c:38:a6:d9:73:55:05:04:be:36:97:3f:42:a5:
         3a:ee:29:4e:1f:c5:c7:ec:36:03:0b:e8:92:c0:16:a2:a5:dd:
         1d:c4:23:6e:26:21:70:d5:c1:1e:8e:fb:8e:7e:77:10:3c:f1:
         09:fe:1f:be:38:eb:db:7e:0e:bb:ad:c5:06:3a:f2:ad:b5:19:
         5b:b1:2e:20:5d:73:ed:2c:50:21:1c:70:1f:0f:e8:7b:8b:d9:
         f1:93:24:f2:07:ad:49:b1:3e:52:01:ac:96:07:48:bc:b3:fe:
         fc:95:1d:ec:2f:18:1b:ec:21:71:56:45:44:c0:2b:6e:9b:0d:
         99:38:60:d7:e8:9a:93:ed:fb:01:00:0c:0b:23:9a:54:c3:95:
         93:4e:50:de:35:ad:2b:ed:d7:e6:85:ad:d8:62:fc:cf:cf:5e:
         21:8f:90:b7:cf:78:ed:c8:06:54:47:e5:01:fa:44:df:f3:4f:
         db:c7:9e:68
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZASpTFQOnNn1V+wtfjz/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjYwNjMwMTQ0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzdlOGVjMDdhOTBlYjBlN2IwYTI5ZjljMmZiNjY4MjkyODlhNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPeG02DaIT7+EhrMKIvWWunmvMU+
U4wYTJ57v9Ys3bo5p178A9TUfH8bVG/9IzrhYAWlClXlVsfxtXXEuR3TUXrMOT32
gBIFpjPCdt0iet0oBYNYTdv5BOX/kstYSQuu8BsKjYYAKKZ5H1cd2FSCuou6LIFv
6YWSVNaTOCPp1tg8ProJESSjRT4Lbe0nwWXurZ9ZiDPp1wz4Usq0dj/brWdw2PN6
9o/96YS+esZlVFHh/weDUzejX37zdNADINpiMeG86cg+/uMj9Za5w9qZ1GI0zxD8
o0H9EQA+NM1OrtOKesoBzlfaEh2wDWZuSrXKAguM88xy4XwZEIRfzCIQ/QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBN+jsB6kOsOewop+cL7ZoKSiadTMB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvRTM2T3dIcVE2dzU3Q2luNXd2dG1ncEtKcDFNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvtDANBgkqhkiG
9w0BAQsFAAOCAQEAXJkVNgEUkrWSG8riz0pj3EJQhYNV7GB27A9NTDHnx3yQK4vj
zRtkxI6ZJMteUUeKsrXjE7qLm5U3Fp1dD2nI4T1fEnpArIgfWRrjpWw4ptlzVQUE
vjaXP0KlOu4pTh/Fx+w2AwvoksAWoqXdHcQjbiYhcNXBHo77jn53EDzxCf4fvjjr
234Ou63FBjryrbUZW7EuIF1z7SxQIRxwHw/oe4vZ8ZMk8getSbE+UgGslgdIvLP+
/JUd7C8YG+whcVZFRMArbpsNmThg1+iak+37AQAMCyOaVMOVk05Q3jWtK+3X5oWt
2GL8z89eIY+Qt8947cgGVEflAfpE3/NP28eeaA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:19 2026 by rpki-client