Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/0UJ55DUEjeibc7wTso1_f6VUnhc.asa
File:                     0UJ55DUEjeibc7wTso1_f6VUnhc.asa (raw, json)
Hash identifier:          FH/6k5/NmJrDnuK/OxObcfgW++VOBxemcPQj9UKf598=
Subject key identifier:   D1:42:79:E4:35:04:8D:E8:9B:73:BC:13:B2:8D:7F:7F:A5:54:9E:17
Certificate issuer:       /CN=22444ad50b4e7db6d63c989017d0e5927495e76b
Certificate serial:       019D0A28F5EA80D9D781DBEC19B532E5066D
Authority key identifier: 22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/0UJ55DUEjeibc7wTso1_f6VUnhc.asa
Signing time:             Fri 20 Mar 2026 07:32:29 +0000
ASPA not before:          Fri 20 Mar 2026 07:32:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198161
Providers:                AS: 2819
                          AS: 16019
                          AS: 39791
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0a:28:f5:ea:80:d9:d7:81:db:ec:19:b5:32:e5:06:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22444ad50b4e7db6d63c989017d0e5927495e76b
        Validity
            Not Before: Mar 20 07:32:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d14279e435048de89b73bc13b28d7f7fa5549e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:8e:2d:99:74:31:00:e2:a5:f7:35:ff:79:
                    7b:70:14:23:74:80:a1:c4:24:02:14:df:69:16:1e:
                    37:df:61:d3:ce:95:97:b5:f5:45:18:74:b8:94:40:
                    d7:fc:24:b4:5c:37:49:58:55:38:19:11:20:f0:99:
                    bc:be:33:de:d6:5b:b8:d6:16:a6:c4:2b:d9:52:ba:
                    1e:12:28:2d:41:f3:99:60:7a:3d:14:bd:2c:e5:11:
                    03:86:7a:34:9c:a5:9a:55:b3:df:67:64:ba:e8:98:
                    c2:fd:0e:6c:ff:ac:f9:3e:27:6e:43:f3:89:76:a1:
                    86:84:42:8a:fb:d3:7a:7f:44:d2:ef:07:86:88:9d:
                    57:04:9d:3c:b0:1c:73:4d:a0:3d:ba:6c:e7:0b:f6:
                    7b:4e:b2:f3:d3:74:b4:c7:9a:89:50:99:46:cd:53:
                    18:6c:9e:54:e1:30:63:6e:ea:ac:0e:98:5b:19:8b:
                    12:c6:9f:9e:00:48:29:eb:54:52:bb:ab:20:ac:c4:
                    e5:c4:09:a8:51:d7:c0:61:2e:c3:08:c8:d5:6e:02:
                    f8:24:2d:ca:a8:62:c7:cf:54:87:76:fb:1f:db:8d:
                    47:a2:b1:f5:e6:0f:b7:b1:01:0e:49:07:0e:a7:3f:
                    04:3b:f3:3b:b4:1b:7b:f4:81:69:8e:c5:9b:67:f9:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:79:E4:35:04:8D:E8:9B:73:BC:13:B2:8D:7F:7F:A5:54:9E:17
            X509v3 Authority Key Identifier:
                keyid:22:44:4A:D5:0B:4E:7D:B6:D6:3C:98:90:17:D0:E5:92:74:95:E7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkRK1QtOfbbWPJiQF9DlknSV52s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/0UJ55DUEjeibc7wTso1_f6VUnhc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b56463-59ea-494b-8816-e02023f122e8/1/IkRK1QtOfbbWPJiQF9DlknSV52s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198161

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:eb:4c:54:c8:a5:b7:a3:22:d8:06:c4:58:8e:0b:da:94:
         5e:d9:03:0e:64:c6:29:72:37:71:85:b2:a8:0d:64:3f:7e:ec:
         38:c3:a7:7b:f6:58:6a:87:be:7e:32:86:f9:68:c6:82:4a:1a:
         20:bc:58:26:e6:34:6e:60:d4:ed:33:7d:2f:23:5e:80:60:a1:
         22:30:8e:4d:74:f0:ed:be:46:13:b6:37:1a:bd:38:e7:6b:44:
         c5:3c:fd:f3:d5:12:ab:0a:77:0f:a4:21:9c:4e:d4:90:bb:32:
         a4:87:f9:e9:68:9c:4a:6c:5e:39:a2:4d:eb:22:db:ec:f1:22:
         e4:44:3f:ff:2a:d7:e5:84:81:b4:9b:2e:d9:76:6c:08:98:1f:
         5b:2a:58:69:3a:0f:8c:fd:86:69:91:1e:89:e3:a2:be:3e:63:
         a5:39:46:a0:e5:7e:d1:28:40:00:a4:46:d2:06:2a:7a:53:f6:
         72:d1:8d:28:78:c4:4b:5a:a7:21:b0:25:66:ab:4f:1a:ba:5a:
         e7:34:38:e1:77:ae:68:ae:84:a2:bd:8f:13:bd:46:0e:6f:55:
         e2:43:e5:9b:30:f0:3b:6c:bc:e7:d0:0e:1a:2d:c0:f7:3f:2c:
         8a:3e:75:8b:7f:c9:2d:bd:21:d3:ff:21:8a:5e:a6:b4:cc:27:
         cf:09:cd:ab
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0KKPXqgNnXgdvsGbUy5QZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDQ0YWQ1MGI0ZTdkYjZkNjNjOTg5MDE3ZDBlNTkyNzQ5
NWU3NmIwHhcNMjYwMzIwMDczMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQyNzllNDM1MDQ4ZGU4OWI3M2JjMTNiMjhkN2Y3ZmE1NTQ5ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18SOLZl0MQDipfc1/3l7cBQjdICh
xCQCFN9pFh4332HTzpWXtfVFGHS4lEDX/CS0XDdJWFU4GREg8Jm8vjPe1lu41ham
xCvZUroeEigtQfOZYHo9FL0s5REDhno0nKWaVbPfZ2S66JjC/Q5s/6z5PiduQ/OJ
dqGGhEKK+9N6f0TS7weGiJ1XBJ08sBxzTaA9umznC/Z7TrLz03S0x5qJUJlGzVMY
bJ5U4TBjbuqsDphbGYsSxp+eAEgp61RSu6sgrMTlxAmoUdfAYS7DCMjVbgL4JC3K
qGLHz1SHdvsf241HorH15g+3sQEOSQcOpz8EO/M7tBt79IFpjsWbZ/kaNwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNFCeeQ1BI3om3O8E7KNf3+lVJ4XMB8GA1UdIwQY
MBaAFCJEStULTn221jyYkBfQ5ZJ0ledrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYt
ZTAyMDIzZjEyMmU4LzEvMFVKNTVEVUVqZWliYzd3VHNvMV9mNlZVbmhjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iNTY0NjMtNTllYS00OTRiLTg4MTYtZTAyMDIzZjEyMmU4
LzEvSWtSSzFRdE9mYmJXUEppUUY5RGxrblNWNTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGETANBgkqhkiG
9w0BAQsFAAOCAQEAcOTrTFTIpbejItgGxFiOC9qUXtkDDmTGKXI3cYWyqA1kP37s
OMOne/ZYaoe+fjKG+WjGgkoaILxYJuY0bmDU7TN9LyNegGChIjCOTXTw7b5GE7Y3
Gr0452tExTz989USqwp3D6QhnE7UkLsypIf56WicSmxeOaJN6yLb7PEi5EQ//yrX
5YSBtJsu2XZsCJgfWypYaToPjP2GaZEeieOivj5jpTlGoOV+0ShAAKRG0gYqelP2
ctGNKHjES1qnIbAlZqtPGrpa5zQ44XeuaK6Eor2PE71GDm9V4kPlmzDwO2y859AO
Gi3A9z8sij51i3/JLb0h0/8hil6mtMwnzwnNqw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:04 2026 by rpki-client