Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/ef19nvdTGsqwpxhWrlA2QPoAkQE.asa
File:                     ef19nvdTGsqwpxhWrlA2QPoAkQE.asa (raw, json)
Hash identifier:          /b9WKn4+Ce0TfiX2ao4EvDhI4KCZFREiDp2QXziTSF8=
Subject key identifier:   79:FD:7D:9E:F7:53:1A:CA:B0:A7:18:56:AE:50:36:40:FA:00:91:01
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019CF66DFE8ACFB808557D1459ADD6D0D9D2
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/ef19nvdTGsqwpxhWrlA2QPoAkQE.asa
Signing time:             Mon 16 Mar 2026 11:35:29 +0000
ASPA not before:          Mon 16 Mar 2026 11:35:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198818
Providers:                AS: 1299
                          AS: 12502
                          AS: 33843
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:6d:fe:8a:cf:b8:08:55:7d:14:59:ad:d6:d0:d9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Mar 16 11:35:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79fd7d9ef7531acab0a71856ae503640fa009101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:aa:ae:af:98:3b:a4:44:12:e5:e8:82:dd:
                    ae:da:f4:a5:cf:d6:61:c6:f9:3f:ce:c8:9a:5c:ce:
                    16:29:61:4b:67:21:56:d4:23:bd:37:b3:98:ae:70:
                    8f:c8:cd:7d:aa:fa:2d:4e:3b:7e:bd:a5:4c:76:1e:
                    69:f8:d6:19:ce:69:f7:41:ab:80:84:df:64:fd:2c:
                    5a:4c:9f:6d:6c:83:0f:93:ea:6e:d6:3a:f4:ef:be:
                    83:70:3f:d8:07:74:44:11:2b:3b:d4:28:dc:c0:eb:
                    07:c8:e6:19:72:36:ed:ca:00:40:70:9b:89:60:3e:
                    a2:e2:c4:fa:80:f5:0c:1e:56:3a:ad:51:ab:72:9c:
                    a3:d4:bd:0c:60:db:47:1a:84:17:ec:6b:49:73:1b:
                    6a:24:78:f7:c7:77:a6:cc:c0:54:62:ab:e3:aa:b7:
                    48:66:3f:a8:16:42:3c:a7:4d:67:3e:05:36:ab:78:
                    c6:21:6f:39:68:28:9e:24:9f:67:f2:f3:59:bb:a0:
                    62:05:cd:e8:c6:a6:01:8c:aa:3b:02:b9:a1:d8:c9:
                    39:f4:68:b0:55:77:a2:07:77:c9:21:a6:7d:02:6d:
                    f7:4f:22:af:bf:ed:a8:42:14:e1:d4:d8:32:0a:e0:
                    59:57:dd:76:15:6a:a0:83:14:9c:25:75:c8:96:69:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FD:7D:9E:F7:53:1A:CA:B0:A7:18:56:AE:50:36:40:FA:00:91:01
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/ef19nvdTGsqwpxhWrlA2QPoAkQE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198818

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:8c:44:25:12:37:25:b1:71:2b:cd:93:e7:e6:d2:57:17:
         0c:6c:98:b2:0c:76:57:28:5a:3d:dd:a4:a6:c5:db:b1:24:80:
         49:d3:53:24:e8:af:13:2e:66:0b:b8:38:f9:40:a9:07:67:00:
         fe:f3:c5:06:ec:8a:80:d1:af:3d:c8:6e:7c:bf:da:6a:aa:13:
         ad:e3:3c:a7:3f:d1:0c:66:84:46:30:a9:1b:7c:ad:f4:98:3b:
         20:16:e2:fc:70:32:59:fb:49:ef:7e:29:81:9e:e5:c2:8b:8f:
         83:bf:c1:4a:d8:64:a0:2e:09:91:40:65:a1:90:65:20:d2:cc:
         6d:a8:ee:98:77:5b:af:2e:42:4c:19:2c:06:a6:e0:7f:f7:45:
         2c:91:b2:cb:07:69:73:6d:83:94:0a:61:5b:b0:ce:1c:68:c9:
         bf:c7:d0:9b:13:c2:58:bb:13:a9:96:c6:b9:8d:a8:27:9c:ef:
         1a:cf:0c:68:0c:73:a6:ef:e0:84:3e:6d:1f:96:6a:59:05:5e:
         43:06:e0:7d:41:d3:04:d0:03:6f:2b:ba:56:75:05:e2:d9:72:
         3c:77:ca:65:d0:cc:aa:9d:5c:89:72:b2:3f:43:64:fe:db:94:
         ea:e6:8d:a2:60:26:ec:43:92:a9:d8:41:17:c8:c9:ee:f6:aa:
         1f:13:ed:8f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZz2bf6Kz7gIVX0UWa3W0NnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz
NTc1MzUwHhcNMjYwMzE2MTEzNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWZkN2Q5ZWY3NTMxYWNhYjBhNzE4NTZhZTUwMzY0MGZhMDA5MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGmqrq+YO6REEuXogt2u2vSlz9Zh
xvk/zsiaXM4WKWFLZyFW1CO9N7OYrnCPyM19qvotTjt+vaVMdh5p+NYZzmn3QauA
hN9k/SxaTJ9tbIMPk+pu1jr0776DcD/YB3REESs71CjcwOsHyOYZcjbtygBAcJuJ
YD6i4sT6gPUMHlY6rVGrcpyj1L0MYNtHGoQX7GtJcxtqJHj3x3emzMBUYqvjqrdI
Zj+oFkI8p01nPgU2q3jGIW85aCieJJ9n8vNZu6BiBc3oxqYBjKo7Armh2Mk59Giw
VXeiB3fJIaZ9Am33TyKvv+2oQhTh1NgyCuBZV912FWqggxScJXXIlmmdSwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHn9fZ73UxrKsKcYVq5QNkD6AJEBMB8GA1UdIwQY
MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt
YjcyMzE5NDFmYzNhLzEvZWYxOW52ZFRHc3F3cHhoV3JsQTJRUG9Ba1FFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh
LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMIojANBgkqhkiG
9w0BAQsFAAOCAQEAHmiMRCUSNyWxcSvNk+fm0lcXDGyYsgx2VyhaPd2kpsXbsSSA
SdNTJOivEy5mC7g4+UCpB2cA/vPFBuyKgNGvPchufL/aaqoTreM8pz/RDGaERjCp
G3yt9Jg7IBbi/HAyWftJ734pgZ7lwouPg7/BSthkoC4JkUBloZBlINLMbajumHdb
ry5CTBksBqbgf/dFLJGyywdpc22DlAphW7DOHGjJv8fQmxPCWLsTqZbGuY2oJ5zv
Gs8MaAxzpu/ghD5tH5ZqWQVeQwbgfUHTBNADbyu6VnUF4tlyPHfKZdDMqp1ciXKy
P0Nk/tuU6uaNomAm7EOSqdhBF8jJ7vaqHxPtjw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:48 2026 by rpki-client