Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/LzytmBipoUeh75Q4k5RM_4cTxvI.asa
File:                     LzytmBipoUeh75Q4k5RM_4cTxvI.asa (raw, json)
Hash identifier:          c79lN03JC1WXFharL3B4h2BCr/rBcKCY884Q/IuCxJg=
Subject key identifier:   2F:3C:AD:98:18:A9:A1:47:A1:EF:94:38:93:94:4C:FF:87:13:C6:F2
Certificate issuer:       /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial:       019F19011F65CA6C6242C578EEAADA3C0099
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/LzytmBipoUeh75Q4k5RM_4cTxvI.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205071
Providers:                AS: 24940
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1f:65:ca:6c:62:42:c5:78:ee:aa:da:3c:00:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f3cad9818a9a147a1ef943893944cff8713c6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:e4:ed:32:bd:dd:3c:33:a9:0e:8c:07:6e:
                    e2:f9:67:0a:42:a0:fe:4a:fe:d7:94:05:e2:ca:53:
                    db:f4:dc:0f:e3:48:8e:4b:8d:5d:48:a5:f3:3b:e2:
                    33:15:ac:d4:0c:a8:5e:78:91:38:96:6f:95:77:6a:
                    47:9b:8a:80:83:89:d2:5d:f3:d6:45:79:f2:03:a5:
                    15:57:28:98:44:26:04:e1:fb:e5:89:8e:f9:a8:2d:
                    c9:99:15:41:e7:e8:77:75:f5:4a:d0:e8:b7:41:28:
                    b7:b8:8a:f5:57:37:43:7b:92:9d:de:54:1d:7f:86:
                    98:45:80:bd:63:56:67:30:e9:70:fd:fb:f1:3a:11:
                    5f:84:28:45:06:a5:98:03:48:84:cf:80:03:56:c7:
                    5d:e7:92:19:35:5e:c8:08:4f:29:36:6d:6f:bf:34:
                    aa:34:3a:62:cf:39:79:4a:dd:8a:6a:48:26:4f:ba:
                    ca:de:6b:eb:9e:cb:e2:17:7a:62:c6:fd:aa:a7:31:
                    6b:8f:4d:ae:ff:25:47:5e:3c:a8:3c:51:f7:e5:23:
                    a9:70:9b:e8:03:c0:41:f3:ae:81:12:40:0d:9c:b7:
                    bd:ed:69:40:fc:27:3d:c1:04:4e:50:3b:69:d4:4b:
                    b9:be:55:a8:6b:11:3f:ef:eb:c7:b0:ca:8f:14:cb:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:AD:98:18:A9:A1:47:A1:EF:94:38:93:94:4C:FF:87:13:C6:F2
            X509v3 Authority Key Identifier:
                keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/LzytmBipoUeh75Q4k5RM_4cTxvI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205071

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:9a:9f:d9:7e:da:cc:b1:57:7e:3a:91:e7:2d:3d:77:01:
         2a:8b:e1:ec:16:87:b1:60:d9:35:b8:62:20:e7:79:7f:e3:61:
         f7:fa:d5:88:ac:77:2f:95:88:cb:a5:b6:92:9f:13:01:1b:2f:
         19:80:12:88:62:1d:aa:62:29:dc:40:8f:0c:db:1d:36:b1:fe:
         b4:32:d2:60:27:43:1a:5e:c5:2e:b6:d1:2c:23:e1:5b:8e:c8:
         af:fb:f0:5b:04:06:58:fa:af:8b:a0:d4:cf:52:05:54:cb:4d:
         19:ed:f9:12:97:75:14:90:c9:03:c4:d3:f8:5b:c0:f0:d4:d2:
         e4:4b:16:89:4a:1b:10:37:63:67:c2:9c:fd:43:f6:1e:66:b1:
         30:21:a0:3d:3a:be:ea:10:12:6e:cb:de:4c:ec:6f:0e:d6:c6:
         7e:75:98:b6:5b:f6:c3:65:04:33:6b:18:58:30:1f:b2:fd:f2:
         62:53:cb:63:1f:e0:16:e3:25:70:a4:23:e2:fd:86:76:39:33:
         81:0d:ca:fe:7e:ce:61:97:ba:16:39:46:ec:b1:b4:24:6d:66:
         28:36:f1:ff:13:ed:8d:3c:b9:8a:40:d1:cf:53:24:c4:1f:5c:
         b1:dc:d8:e9:49:f8:97:dd:9c:f7:0c:94:74:93:93:8b:c3:60:
         8c:13:2c:13
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAR9lymxiQsV47qraPACZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx
NzQyZjUwHhcNMjYwNjMwMTQ0ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjNjYWQ5ODE4YTlhMTQ3YTFlZjk0Mzg5Mzk0NGNmZjg3MTNjNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHk7TK93TwzqQ6MB27i+WcKQqD+
Sv7XlAXiylPb9NwP40iOS41dSKXzO+IzFazUDKheeJE4lm+Vd2pHm4qAg4nSXfPW
RXnyA6UVVyiYRCYE4fvliY75qC3JmRVB5+h3dfVK0Oi3QSi3uIr1VzdDe5Kd3lQd
f4aYRYC9Y1ZnMOlw/fvxOhFfhChFBqWYA0iEz4ADVsdd55IZNV7ICE8pNm1vvzSq
NDpizzl5St2KakgmT7rK3mvrnsviF3pixv2qpzFrj02u/yVHXjyoPFH35SOpcJvo
A8BB866BEkANnLe97WlA/Cc9wQROUDtp1Eu5vlWoaxE/7+vHsMqPFMtSeQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFC88rZgYqaFHoe+UOJOUTP+HE8byMB8GA1UdIwQY
MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt
YWZkMjcyZGQwZmI1LzEvTHp5dG1CaXBvVWVoNzVRNGs1Uk1fNGNUeHZJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1
LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhDzANBgkqhkiG
9w0BAQsFAAOCAQEAk8man9l+2syxV346kectPXcBKovh7BaHsWDZNbhiIOd5f+Nh
9/rViKx3L5WIy6W2kp8TARsvGYASiGIdqmIp3ECPDNsdNrH+tDLSYCdDGl7FLrbR
LCPhW47Ir/vwWwQGWPqvi6DUz1IFVMtNGe35Epd1FJDJA8TT+FvA8NTS5EsWiUob
EDdjZ8Kc/UP2HmaxMCGgPTq+6hASbsveTOxvDtbGfnWYtlv2w2UEM2sYWDAfsv3y
YlPLYx/gFuMlcKQj4v2GdjkzgQ3K/n7OYZe6FjlG7LG0JG1mKDbx/xPtjTy5ikDR
z1MkxB9csdzY6Un4l92c9wyUdJOTi8NgjBMsEw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:17 2026 by rpki-client