Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/Nys4AmjGjCspn4rSIYQBvF5qdGM.asa
File:                     Nys4AmjGjCspn4rSIYQBvF5qdGM.asa (raw, json)
Hash identifier:          Ydnw5mhsyob6sw2bUgdnUe43iCJHLYRtgtea0xX5vgg=
Subject key identifier:   37:2B:38:02:68:C6:8C:2B:29:9F:8A:D2:21:84:01:BC:5E:6A:74:63
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019D01489EEA91B9BCB8F9BA90D791BB0F68
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/Nys4AmjGjCspn4rSIYQBvF5qdGM.asa
Signing time:             Wed 18 Mar 2026 14:10:29 +0000
ASPA not before:          Wed 18 Mar 2026 14:10:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204464
Providers:                AS: 11967
                          AS: 24381
                          AS: 34800
                          AS: 34927
                          AS: 41051
                          AS: 44393
                          AS: 49581
                          AS: 56755
                          AS: 58057
                          AS: 62403
                          AS: 205305
                          AS: 209874
                          AS: 212232
                          AS: 212895
                          AS: 213409
                          AS: 213413
                          AS: 213449
                          AS: 214243
                          AS: 214420
                          AS: 215569
                          AS: 215828
                          AS: 393577
                          AS: 400212
                          AS: 401753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:01:48:9e:ea:91:b9:bc:b8:f9:ba:90:d7:91:bb:0f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Mar 18 14:10:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=372b380268c68c2b299f8ad2218401bc5e6a7463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:23:66:48:d1:d5:97:c3:d9:ea:30:e5:87:
                    05:24:f1:dd:23:2e:de:60:ba:8f:1e:6d:06:d8:63:
                    cb:4f:51:e4:f0:4e:b7:1d:28:a6:8e:9c:67:9d:20:
                    e4:57:d8:bb:6c:92:1d:b5:6c:73:97:f9:58:21:7f:
                    9a:cc:5e:d0:ab:0f:8e:9e:48:b2:f7:05:ea:e7:90:
                    09:54:46:d2:f9:90:48:86:96:a9:8b:1d:5a:4d:e7:
                    6a:54:87:60:07:b7:d6:07:8b:2e:42:a5:bf:f8:39:
                    48:a8:44:62:9a:0f:23:57:4a:1f:bc:d8:8b:be:7a:
                    f8:dc:c9:db:22:ac:d7:c4:45:66:a0:82:73:27:8b:
                    1c:0c:6a:be:52:3d:c0:a9:11:26:55:9b:92:15:97:
                    b4:75:b5:b2:ad:8f:d3:12:fd:5c:0d:94:0f:ef:b1:
                    bc:1a:c7:95:37:c4:4d:8e:e8:b8:10:fb:5d:f0:fa:
                    5f:e4:2c:5e:4b:1a:47:e6:d8:e1:40:e3:90:ef:d2:
                    d8:af:60:90:a0:2c:ad:90:b2:03:cd:8d:12:73:1d:
                    b0:17:4b:95:a5:8a:fa:36:ac:6d:80:ab:6a:35:46:
                    d9:f8:40:a4:30:00:51:3f:4f:3e:5e:02:70:65:10:
                    3e:3d:2e:57:71:be:8c:12:9c:aa:c3:5e:1b:62:b1:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2B:38:02:68:C6:8C:2B:29:9F:8A:D2:21:84:01:BC:5E:6A:74:63
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/Nys4AmjGjCspn4rSIYQBvF5qdGM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         63:33:a6:a8:d4:17:86:e5:05:3d:c2:a4:d2:d3:c3:2c:23:b4:
         3d:8c:c0:27:e5:3a:1a:87:9f:e7:ba:84:67:a9:09:9e:c7:c5:
         0c:b8:62:5e:22:95:9c:84:db:d3:39:5b:3f:9d:90:59:1a:fd:
         86:26:56:cc:7e:94:f0:ad:33:22:4f:51:64:6c:cb:1c:1e:9d:
         d3:b9:0d:01:ee:12:82:10:78:b4:1d:f6:f5:0b:c3:26:38:7a:
         ae:97:54:a5:e3:d1:26:c1:f4:20:bd:af:ed:41:d7:73:5e:d5:
         f9:43:c1:49:e9:b0:e1:aa:be:d9:13:62:71:e4:aa:ae:4d:8c:
         23:36:f7:75:fa:5b:0c:91:c3:7a:c8:5b:a8:af:aa:35:c3:e7:
         21:01:60:15:5b:37:99:86:81:f7:ae:38:05:ad:b6:11:58:82:
         ea:b4:97:0a:1a:fc:fb:a9:45:a1:22:c9:8e:e4:7b:5c:bd:2e:
         56:49:52:82:b4:02:18:9b:b3:e1:ca:93:36:be:f6:c8:bc:21:
         d2:00:2e:c1:21:e7:b8:ac:60:95:09:6e:ce:f5:4c:4c:dc:11:
         b3:c9:d4:17:0e:31:38:be:be:dd:72:26:4d:38:77:56:d4:93:
         f6:08:e1:36:31:28:2c:b7:6f:05:c4:03:58:9a:6f:a0:a9:45:
         23:fb:4c:05
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0BSJ7qkbm8uPm6kNeRuw9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzE4MTQxMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzJiMzgwMjY4YzY4YzJiMjk5ZjhhZDIyMTg0MDFiYzVlNmE3NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMjZkjR1ZfD2eow5YcFJPHdIy7e
YLqPHm0G2GPLT1Hk8E63HSimjpxnnSDkV9i7bJIdtWxzl/lYIX+azF7Qqw+Onkiy
9wXq55AJVEbS+ZBIhpapix1aTedqVIdgB7fWB4suQqW/+DlIqERimg8jV0ofvNiL
vnr43MnbIqzXxEVmoIJzJ4scDGq+Uj3AqREmVZuSFZe0dbWyrY/TEv1cDZQP77G8
GseVN8RNjui4EPtd8Ppf5CxeSxpH5tjhQOOQ79LYr2CQoCytkLIDzY0Scx2wF0uV
pYr6NqxtgKtqNUbZ+ECkMABRP08+XgJwZRA+PS5Xcb6MEpyqw14bYrGZowIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDcrOAJoxowrKZ+K0iGEAbxeanRjMB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvTnlzNEFtakdqQ3NwbjRyU0lZUUJ2RjVxZEdNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMesDANBgkqhkiG
9w0BAQsFAAOCAQEAYzOmqNQXhuUFPcKk0tPDLCO0PYzAJ+U6Goef57qEZ6kJnsfF
DLhiXiKVnITb0zlbP52QWRr9hiZWzH6U8K0zIk9RZGzLHB6d07kNAe4SghB4tB32
9QvDJjh6rpdUpePRJsH0IL2v7UHXc17V+UPBSemw4aq+2RNiceSqrk2MIzb3dfpb
DJHDeshbqK+qNcPnIQFgFVs3mYaB9644Ba22EViC6rSXChr8+6lFoSLJjuR7XL0u
VklSgrQCGJuz4cqTNr72yLwh0gAuwSHnuKxglQluzvVMTNwRs8nUFw4xOL6+3XIm
TTh3VtST9gjhNjEoLLdvBcQDWJpvoKlFI/tMBQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:25 2026 by rpki-client