Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/rYS7w8wnF_-j44c8j1WfgKjtKKE.asa
File:                     rYS7w8wnF_-j44c8j1WfgKjtKKE.asa (raw, json)
Hash identifier:          n450hohXx2pz0sqF43zAXBZOksnxUdKDcqwLQe9av18=
Subject key identifier:   AD:84:BB:C3:CC:27:17:FF:A3:E3:87:3C:8F:55:9F:80:A8:ED:28:A1
Certificate issuer:       /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial:       019F19011F508FAF733D407B3DAB43D7809F
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/rYS7w8wnF_-j44c8j1WfgKjtKKE.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51255
Providers:                AS: 9049
                          AS: 62142
                          AS: 211366
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1f:50:8f:af:73:3d:40:7b:3d:ab:43:d7:80:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad84bbc3cc2717ffa3e3873c8f559f80a8ed28a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:32:b6:13:dc:d2:ae:62:bf:a1:83:4a:77:
                    c0:ac:05:21:86:60:6d:9f:35:b6:43:78:23:63:5d:
                    b5:48:2e:11:44:a8:40:f2:30:42:ce:88:5d:02:ff:
                    2e:6f:2b:8d:77:7f:02:26:1e:94:5f:2d:bb:21:b5:
                    cd:d8:ba:36:60:83:fc:49:ec:2c:de:89:28:7b:e0:
                    58:4f:2b:dc:3a:74:fe:6d:42:d1:57:57:47:d6:ad:
                    f6:62:16:c9:fd:5f:8f:7f:cf:80:d9:e2:aa:7b:5b:
                    0e:c9:97:9f:fa:48:8c:20:39:01:9e:ad:5e:c3:46:
                    cc:fb:e4:32:5f:d0:76:61:d2:85:1d:19:8b:d8:05:
                    93:82:01:58:f7:78:4e:49:92:90:8a:f7:fb:cb:94:
                    db:ea:5b:64:de:00:35:fe:29:06:65:df:8f:80:3b:
                    af:bc:85:fe:5d:d1:a9:9f:ef:f3:1c:0c:4a:9d:ee:
                    6f:46:0b:50:f8:b3:49:3f:28:2a:5d:63:4e:52:6d:
                    b0:f5:ef:5f:ae:29:be:a2:b7:48:0b:a6:fa:07:5a:
                    fc:d3:5b:9b:4a:ed:9c:a7:8b:08:8f:d3:3e:1c:9b:
                    4f:df:7f:33:a7:b7:5d:b2:c4:03:23:f3:b2:08:36:
                    8a:33:25:0c:30:88:d6:80:46:43:1d:6c:14:f8:bc:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:BB:C3:CC:27:17:FF:A3:E3:87:3C:8F:55:9F:80:A8:ED:28:A1
            X509v3 Authority Key Identifier:
                keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/rYS7w8wnF_-j44c8j1WfgKjtKKE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51255

    Signature Algorithm: sha256WithRSAEncryption
         94:71:ec:0d:b1:bd:20:56:02:c1:b0:fd:5f:0f:f9:e4:08:ef:
         52:e1:34:d9:30:5c:16:e9:4e:13:c7:4a:c1:4d:6c:89:0c:c1:
         7d:11:d6:d6:e9:d3:75:c0:ee:10:08:ce:e5:1b:89:3c:40:13:
         7d:de:ae:0c:65:8e:20:24:66:a0:32:a8:e3:f7:54:f2:d9:9e:
         4c:7a:fd:44:4b:13:c2:34:28:f6:4e:77:a9:ea:40:ca:6e:05:
         46:63:94:46:42:8f:d7:c8:ff:9c:f4:1a:d2:5d:5c:76:ec:a7:
         76:0b:60:6f:0d:ae:29:4d:4f:08:26:e7:33:01:d7:9a:4e:50:
         d0:18:25:40:04:3e:ea:58:83:f1:fc:5e:d0:2c:59:02:c4:ed:
         c9:93:88:b0:37:70:85:6e:10:9e:77:ed:69:d4:89:24:d1:8b:
         da:7c:ef:5f:e3:b2:01:f7:7e:f0:e8:17:cc:fc:f9:72:50:08:
         35:8e:65:c1:42:67:de:b4:b7:ed:82:ec:2d:43:c7:2b:1b:74:
         88:fa:e9:2c:94:b5:ec:6c:eb:9a:f7:f0:fc:cc:6b:20:98:52:
         76:f3:63:5e:e8:f4:b5:e9:83:19:af:4a:9c:22:e9:73:63:2b:
         63:54:cb:b5:21:5f:1c:e0:e1:77:c7:6c:20:c8:74:b5:f6:dc:
         7f:0f:c4:64
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAR9Qj69zPUB7PatD14CfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjYwNjMwMTQ0ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDg0YmJjM2NjMjcxN2ZmYTNlMzg3M2M4ZjU1OWY4MGE4ZWQyOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVkythPc0q5iv6GDSnfArAUhhmBt
nzW2Q3gjY121SC4RRKhA8jBCzohdAv8ubyuNd38CJh6UXy27IbXN2Lo2YIP8Sews
3okoe+BYTyvcOnT+bULRV1dH1q32YhbJ/V+Pf8+A2eKqe1sOyZef+kiMIDkBnq1e
w0bM++QyX9B2YdKFHRmL2AWTggFY93hOSZKQivf7y5Tb6ltk3gA1/ikGZd+PgDuv
vIX+XdGpn+/zHAxKne5vRgtQ+LNJPygqXWNOUm2w9e9frim+ordIC6b6B1r801ub
Su2cp4sIj9M+HJtP338zp7ddssQDI/OyCDaKMyUMMIjWgEZDHWwU+Lxt2QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFK2Eu8PMJxf/o+OHPI9Vn4Co7SihMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvcllTN3c4d25GXy1qNDRjOGoxV2ZnS2p0S0tFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDINzANBgkqhkiG
9w0BAQsFAAOCAQEAlHHsDbG9IFYCwbD9Xw/55AjvUuE02TBcFulOE8dKwU1siQzB
fRHW1unTdcDuEAjO5RuJPEATfd6uDGWOICRmoDKo4/dU8tmeTHr9REsTwjQo9k53
qepAym4FRmOURkKP18j/nPQa0l1cduyndgtgbw2uKU1PCCbnMwHXmk5Q0BglQAQ+
6liD8fxe0CxZAsTtyZOIsDdwhW4QnnftadSJJNGL2nzvX+OyAfd+8OgXzPz5clAI
NY5lwUJn3rS37YLsLUPHKxt0iPrpLJS17Gzrmvfw/MxrIJhSdvNjXuj0temDGa9K
nCLpc2MrY1TLtSFfHODhd8dsIMh0tfbcfw/EZA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:29 2026 by rpki-client