Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/9DQIO3_SvtAj7V3dKSffAqRV124.asa
File:                     9DQIO3_SvtAj7V3dKSffAqRV124.asa (raw, json)
Hash identifier:          yff8Abht3G/Itj3FTsqoRHtvhGJvy4iwlCTSWmrXTz0=
Subject key identifier:   F4:34:08:3B:7F:D2:BE:D0:23:ED:5D:DD:29:27:DF:02:A4:55:D7:6E
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       01A0C06125D17BCE12533C6BEC8BA3F94394
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/9DQIO3_SvtAj7V3dKSffAqRV124.asa
Signing time:             Sun 20 Sep 2026 19:53:07 +0000
ASPA not before:          Sun 20 Sep 2026 19:53:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202585
Providers:                AS: 6939
                          AS: 37739
                          AS: 41051
                          AS: 42093
                          AS: 57866
                          AS: 200132
                          AS: 203291
                          AS: 212895
                          AS: 215085
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:61:25:d1:7b:ce:12:53:3c:6b:ec:8b:a3:f9:43:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Sep 20 19:53:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f434083b7fd2bed023ed5ddd2927df02a455d76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:04:32:45:ee:a3:26:9c:06:5f:0b:c3:84:
                    93:67:d3:65:9f:4b:ec:27:0e:5f:42:eb:a6:b9:b7:
                    e7:59:da:c5:30:61:97:2f:c6:b0:c8:af:e3:39:98:
                    98:46:09:05:64:cf:83:80:bd:ff:15:74:85:eb:66:
                    e1:ce:8e:b5:ea:a5:f3:51:97:08:5d:96:66:b5:c2:
                    7a:0f:63:6c:92:1e:a0:f8:1d:95:31:96:f8:7c:49:
                    f2:ba:f9:b6:d0:83:7f:68:b3:62:64:95:f1:f5:8c:
                    4d:74:60:6d:e5:fc:f2:9c:76:ac:ed:71:2b:fd:0c:
                    99:0f:e6:0c:f7:23:fe:88:f9:44:37:92:35:a4:46:
                    c0:e9:54:8b:d2:99:01:b5:45:eb:52:25:33:4e:24:
                    2a:5a:34:05:3d:7b:25:a9:ea:c1:9a:a4:f3:58:5a:
                    5e:67:ba:0b:dd:c1:d6:1c:e2:bf:7a:08:84:6d:bb:
                    78:29:d6:81:86:cd:9d:d3:5d:fa:6c:e8:74:ae:56:
                    4c:93:7c:48:78:d0:26:68:56:7a:ba:00:bc:7f:00:
                    87:d8:88:f7:ea:57:7a:df:05:8d:31:0c:af:00:4c:
                    f1:49:10:44:a4:4c:67:ce:c6:75:24:f0:8c:c6:95:
                    6f:72:86:d6:83:3e:b2:33:be:75:28:ca:f4:f1:c6:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:08:3B:7F:D2:BE:D0:23:ED:5D:DD:29:27:DF:02:A4:55:D7:6E
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/9DQIO3_SvtAj7V3dKSffAqRV124.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202585

    Signature Algorithm: sha256WithRSAEncryption
         14:88:f1:9a:1e:46:33:13:d6:3d:87:e3:3c:75:15:01:bc:01:
         0e:d1:50:f4:19:6a:a4:a1:06:23:5a:af:be:fe:7c:d0:02:b8:
         67:24:27:fc:61:6c:8c:d3:51:17:04:ee:3b:ed:e3:f6:bf:5b:
         b2:5f:af:be:c8:31:f3:34:d3:55:1f:bf:d6:87:91:f3:9e:59:
         f5:7f:e2:ee:e9:54:81:d1:68:55:dc:81:d6:d6:43:11:70:ca:
         e3:79:1e:20:de:1b:a0:f6:17:af:28:be:91:86:95:96:03:68:
         38:f1:86:b0:8e:43:34:80:f4:85:5f:49:e7:8e:29:b5:e7:29:
         f2:ae:16:56:66:d4:79:a8:b5:ae:f0:c2:3f:a5:e3:93:1a:43:
         b0:4e:9e:78:d2:af:21:e6:a8:5c:e3:2d:95:13:ee:3c:65:67:
         65:2f:e3:2a:b4:f3:69:07:66:b5:4a:dd:15:0b:80:42:d7:cc:
         df:2a:9a:e8:1e:bd:6d:10:95:ac:67:e5:6a:fe:9f:fb:b6:91:
         87:84:12:a4:55:86:28:4c:4e:2f:ec:15:7a:b5:13:7c:96:b3:
         88:a5:b4:9b:e0:93:da:16:f5:ca:ff:d2:ef:c3:01:f2:62:28:
         10:04:41:af:30:31:57:cd:4b:e1:25:e0:38:ad:98:5d:22:a8:
         cd:c2:5d:1e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDAYSXRe84SUzxr7Iuj+UOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNWIzNDc5NjdjZWE2N2JiNjJiNjlkMjU5YWNkZTRiOGY5
ZTk0MTcwHhcNMjYwOTIwMTk1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDM0MDgzYjdmZDJiZWQwMjNlZDVkZGQyOTI3ZGYwMmE0NTVkNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hoEMkXuoyacBl8Lw4STZ9Nln0vs
Jw5fQuumubfnWdrFMGGXL8awyK/jOZiYRgkFZM+DgL3/FXSF62bhzo616qXzUZcI
XZZmtcJ6D2Nskh6g+B2VMZb4fEnyuvm20IN/aLNiZJXx9YxNdGBt5fzynHas7XEr
/QyZD+YM9yP+iPlEN5I1pEbA6VSL0pkBtUXrUiUzTiQqWjQFPXslqerBmqTzWFpe
Z7oL3cHWHOK/egiEbbt4KdaBhs2d0136bOh0rlZMk3xIeNAmaFZ6ugC8fwCH2Ij3
6ld63wWNMQyvAEzxSRBEpExnzsZ1JPCMxpVvcobWgz6yM751KMr08cZXKwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPQ0CDt/0r7QI+1d3Skn3wKkVdduMB8GA1UdIwQY
MBaAFD5bNHlnzqZ7titp0lms3kuPnpQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2Ut
OTRlN2QwN2ZiMzFkLzEvOURRSU8zX1N2dEFqN1YzZEtTZmZBcVJWMTI0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2UtOTRlN2QwN2ZiMzFk
LzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXWTANBgkqhkiG
9w0BAQsFAAOCAQEAFIjxmh5GMxPWPYfjPHUVAbwBDtFQ9BlqpKEGI1qvvv580AK4
ZyQn/GFsjNNRFwTuO+3j9r9bsl+vvsgx8zTTVR+/1oeR855Z9X/i7ulUgdFoVdyB
1tZDEXDK43keIN4boPYXryi+kYaVlgNoOPGGsI5DNID0hV9J544ptecp8q4WVmbU
eai1rvDCP6XjkxpDsE6eeNKvIeaoXOMtlRPuPGVnZS/jKrTzaQdmtUrdFQuAQtfM
3yqa6B69bRCVrGflav6f+7aRh4QSpFWGKExOL+wVerUTfJaziKW0m+CT2hb1yv/S
78MB8mIoEARBrzAxV81L4SXgOK2YXSKozcJdHg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:47:21 2026 by rpki-client