Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa
File:                     F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa (raw, json)
Hash identifier:          5EJJJJTtBq0BMEfKnD57LEly92Ux1IDLT80gLRVXa+s=
Subject key identifier:   17:A5:7D:E4:DB:CA:20:F9:CF:D2:D9:98:A0:01:2D:1D:CF:B1:E4:17
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       019F19014C84DEB26218A09B9C749DA0F954
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203729
Providers:                AS: 6939
                          AS: 55207
                          AS: 200365
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4c:84:de:b2:62:18:a0:9b:9c:74:9d:a0:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17a57de4dbca20f9cfd2d998a0012d1dcfb1e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:c7:c3:c0:74:b3:1b:5c:be:01:02:88:a8:
                    44:40:16:f2:3d:c1:58:0e:91:0a:ee:51:fe:97:ed:
                    b0:05:6b:48:ea:13:d1:64:cc:2a:4b:0d:37:b5:55:
                    85:9f:a7:fe:72:1a:e5:80:29:89:62:5d:31:f8:67:
                    c0:33:4e:db:9c:d4:fa:65:53:80:35:29:c4:1b:e6:
                    e1:44:9d:04:03:42:08:14:c7:e9:30:fd:b4:34:3f:
                    67:a1:57:42:5e:70:b0:e7:22:cb:54:93:01:27:10:
                    e7:02:c4:e2:8e:71:ee:b2:a2:ba:3c:cd:58:88:63:
                    3d:15:91:d1:d1:50:8c:38:b8:cc:7b:14:dc:2b:c7:
                    7e:e1:53:d9:a2:39:94:45:a2:7e:85:88:0d:99:9f:
                    97:a7:4a:20:30:a9:6a:08:84:aa:6e:33:ae:49:0e:
                    0b:32:68:b6:80:24:ed:1e:d5:2b:4f:af:a6:e8:a9:
                    8c:c9:a6:7e:74:51:b0:e1:1f:64:eb:9e:76:b3:e1:
                    93:c3:3f:16:c5:54:80:45:50:cb:5f:ca:97:04:d0:
                    3d:61:f2:10:83:c6:60:b4:13:1e:69:27:e9:78:7f:
                    ea:99:e5:b2:5e:d3:36:57:45:e8:78:4d:b0:9b:2c:
                    f7:e3:3f:12:f3:e6:2f:39:62:ab:12:4d:a2:83:2d:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:7D:E4:DB:CA:20:F9:CF:D2:D9:98:A0:01:2D:1D:CF:B1:E4:17
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203729

    Signature Algorithm: sha256WithRSAEncryption
         58:32:91:62:55:18:32:db:48:92:80:b1:29:e1:8f:50:8e:7a:
         b5:d5:cf:f5:60:43:28:b6:7d:78:d0:84:fa:72:ff:68:73:25:
         6c:b6:f8:a4:ed:37:a1:21:d7:b2:48:4e:92:c7:60:b7:d0:bc:
         38:2e:67:09:46:b4:84:90:d1:c0:9e:fa:a7:b4:e9:53:87:6e:
         52:f6:d0:74:da:be:8e:8a:4b:0d:ce:e1:0d:21:00:de:3a:97:
         f3:ba:bf:dd:ef:66:13:ce:c9:8c:1c:ef:11:ff:bf:2d:d2:c7:
         58:60:33:11:eb:1c:fd:27:55:69:ba:3b:1d:75:64:a8:b8:e3:
         c3:8b:5d:57:2f:31:c2:fa:4b:d2:62:57:00:04:54:37:66:4b:
         b1:de:99:6e:86:d8:7b:e6:37:af:6a:20:91:43:d5:46:e7:a1:
         07:1b:26:00:66:0b:63:c9:20:c7:ea:a0:14:b2:aa:15:02:44:
         0b:9a:21:97:50:c4:96:96:bf:73:32:59:a1:6d:7d:31:a7:5c:
         f2:00:c8:ed:78:1b:f3:5b:8f:55:1b:f5:52:2c:18:d5:67:c4:
         41:08:b9:91:e1:06:74:8b:44:b4:98:8a:cb:41:d1:89:0c:06:
         f4:16:c1:08:a1:c3:6b:62:44:e0:8e:cb:d7:3e:d2:b7:e5:3d:
         30:07:ad:56
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAUyE3rJiGKCbnHSdoPlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjYwNjMwMTQ0OTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2E1N2RlNGRiY2EyMGY5Y2ZkMmQ5OThhMDAxMmQxZGNmYjFlNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjHw8B0sxtcvgECiKhEQBbyPcFY
DpEK7lH+l+2wBWtI6hPRZMwqSw03tVWFn6f+chrlgCmJYl0x+GfAM07bnNT6ZVOA
NSnEG+bhRJ0EA0IIFMfpMP20ND9noVdCXnCw5yLLVJMBJxDnAsTijnHusqK6PM1Y
iGM9FZHR0VCMOLjMexTcK8d+4VPZojmURaJ+hYgNmZ+Xp0ogMKlqCISqbjOuSQ4L
Mmi2gCTtHtUrT6+m6KmMyaZ+dFGw4R9k6552s+GTwz8WxVSARVDLX8qXBNA9YfIQ
g8ZgtBMeaSfpeH/qmeWyXtM2V0XoeE2wmyz34z8S8+YvOWKrEk2igy2jywIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBelfeTbyiD5z9LZmKABLR3PseQXMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvRjZWOTVOdktJUG5QMHRtWW9BRXRIYy14NUJjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMb0TANBgkqhkiG
9w0BAQsFAAOCAQEAWDKRYlUYMttIkoCxKeGPUI56tdXP9WBDKLZ9eNCE+nL/aHMl
bLb4pO03oSHXskhOksdgt9C8OC5nCUa0hJDRwJ76p7TpU4duUvbQdNq+jopLDc7h
DSEA3jqX87q/3e9mE87JjBzvEf+/LdLHWGAzEesc/SdVabo7HXVkqLjjw4tdVy8x
wvpL0mJXAARUN2ZLsd6ZbobYe+Y3r2ogkUPVRuehBxsmAGYLY8kgx+qgFLKqFQJE
C5ohl1DElpa/czJZoW19Madc8gDI7Xgb81uPVRv1UiwY1WfEQQi5keEGdItEtJiK
y0HRiQwG9BbBCKHDa2JE4I7L1z7St+U9MAetVg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:13 2026 by rpki-client