Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/V-c9Jwigm0FXZPcPKp3gnGgZ4bw.asa
File:                     V-c9Jwigm0FXZPcPKp3gnGgZ4bw.asa (raw, json)
Hash identifier:          gwxZgOsJlIUK1uNl8+Cu1SE+A0G8IvUXMkvyoE0dBjk=
Subject key identifier:   57:E7:3D:27:08:A0:9B:41:57:64:F7:0F:2A:9D:E0:9C:68:19:E1:BC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       019DE43036091BC8DCA12B752E50A520C65D
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/V-c9Jwigm0FXZPcPKp3gnGgZ4bw.asa
Signing time:             Fri 01 May 2026 15:37:37 +0000
ASPA not before:          Fri 01 May 2026 15:37:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208824
Providers:                AS: 6939
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e4:30:36:09:1b:c8:dc:a1:2b:75:2e:50:a5:20:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: May  1 15:37:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57e73d2708a09b415764f70f2a9de09c6819e1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:eb:03:53:ce:06:6c:b9:2f:15:3d:7f:80:
                    f4:61:bc:f6:24:ba:c0:9a:8b:8c:43:10:65:13:d6:
                    0f:b8:dd:7a:cb:0e:b6:67:39:49:c2:93:70:98:57:
                    41:9a:1c:2d:d1:c7:2c:2a:66:32:aa:2e:ad:78:42:
                    71:62:2b:94:fc:4e:f8:15:97:df:9e:fa:ce:f9:72:
                    22:80:e6:7c:01:ae:32:4d:a4:87:4b:b1:0d:bb:85:
                    1d:c1:93:f9:27:21:e0:e2:d5:b3:97:b9:a3:00:18:
                    f8:8c:d7:20:4b:16:00:7c:59:b6:ef:ad:52:d7:97:
                    3c:98:7f:45:7a:5c:2e:ca:70:7b:e0:e6:5d:5e:56:
                    a9:89:94:f4:fa:2f:3d:06:13:ce:8d:fe:47:06:76:
                    03:8b:fe:ba:c9:2a:35:f4:19:11:2c:5c:7c:1d:c6:
                    20:3d:87:ba:e0:ee:c4:dd:ef:cd:3a:81:f6:13:b1:
                    36:89:d6:79:a9:22:2b:44:e6:66:5a:36:74:66:3c:
                    35:f6:95:a6:b0:e0:00:5a:c3:8d:d2:b7:32:0c:0d:
                    36:f7:35:30:04:26:0b:8c:54:e6:65:a1:6a:20:13:
                    e0:e7:e6:ac:9f:92:38:c9:fa:30:88:13:1e:3f:ca:
                    9a:4c:0f:7d:cd:d6:b4:76:8d:7e:e4:24:3d:47:33:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:3D:27:08:A0:9B:41:57:64:F7:0F:2A:9D:E0:9C:68:19:E1:BC
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/V-c9Jwigm0FXZPcPKp3gnGgZ4bw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208824

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:ec:10:aa:b1:73:c3:d6:f5:db:7f:6e:46:a2:e8:67:58:
         93:b4:2b:18:24:76:e3:2e:8b:3d:69:59:43:51:39:66:fd:08:
         6f:11:e5:aa:f9:cf:62:35:3e:db:44:31:be:08:cc:b2:43:d8:
         70:b1:d3:6d:2a:87:a9:4a:df:e3:35:22:40:32:a4:ef:d7:71:
         b1:bf:4b:33:32:5c:09:f5:75:57:f8:0b:af:3d:0e:60:f0:5e:
         32:f2:ce:44:6a:d8:39:ab:77:58:27:7e:85:ab:5b:03:c5:1d:
         2e:6b:c1:64:b1:15:7c:44:c5:f6:3c:ca:66:74:79:2a:47:32:
         e8:18:75:89:50:1f:d1:1d:3f:37:46:78:6d:e2:9f:bb:92:c4:
         7d:1c:c1:b9:0d:b3:0c:9e:b1:f9:3b:84:26:e1:e8:2d:ab:2f:
         b0:4a:f6:a5:6d:6a:61:b8:ae:6a:6d:4e:0d:60:94:72:aa:41:
         53:dd:31:20:91:96:b5:0e:05:c7:c3:03:30:9e:ea:23:f9:a1:
         3f:fd:81:f0:40:c6:a7:d2:2e:8b:67:a9:f5:2a:40:94:5d:74:
         89:a0:fe:c5:ac:d5:02:5a:03:f1:48:05:64:a2:b5:f5:8e:d7:
         8c:07:48:b8:ef:fe:d5:14:35:0f:0f:7e:ff:6e:4c:ca:aa:30:
         10:88:f3:f5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3kMDYJG8jcoSt1LlClIMZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZGUxM2I5N2E3Yzc3OGFkODAxM2ZhZmZhMmIxYmI2NDg3
NjJjZmMwHhcNMjYwNTAxMTUzNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U3M2QyNzA4YTA5YjQxNTc2NGY3MGYyYTlkZTA5YzY4MTllMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jnrA1POBmy5LxU9f4D0Ybz2JLrA
mouMQxBlE9YPuN16yw62ZzlJwpNwmFdBmhwt0ccsKmYyqi6teEJxYiuU/E74FZff
nvrO+XIigOZ8Aa4yTaSHS7ENu4UdwZP5JyHg4tWzl7mjABj4jNcgSxYAfFm2761S
15c8mH9FelwuynB74OZdXlapiZT0+i89BhPOjf5HBnYDi/66ySo19BkRLFx8HcYg
PYe64O7E3e/NOoH2E7E2idZ5qSIrROZmWjZ0Zjw19pWmsOAAWsON0rcyDA029zUw
BCYLjFTmZaFqIBPg5+asn5I4yfowiBMeP8qaTA99zda0do1+5CQ9RzNOWQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFfnPScIoJtBV2T3Dyqd4JxoGeG8MB8GA1UdIwQY
MBaAFO7eE7l6fHeK2AE/r/orG7ZIdiz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMt
YTUyMGRlNzU5YTUwLzEvVi1jOUp3aWdtMEZYWlBjUEtwM2duR2daNGJ3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMtYTUyMGRlNzU5YTUw
LzEvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvuDANBgkqhkiG
9w0BAQsFAAOCAQEAO1PsEKqxc8PW9dt/bkai6GdYk7QrGCR24y6LPWlZQ1E5Zv0I
bxHlqvnPYjU+20QxvgjMskPYcLHTbSqHqUrf4zUiQDKk79dxsb9LMzJcCfV1V/gL
rz0OYPBeMvLORGrYOat3WCd+hatbA8UdLmvBZLEVfETF9jzKZnR5Kkcy6Bh1iVAf
0R0/N0Z4beKfu5LEfRzBuQ2zDJ6x+TuEJuHoLasvsEr2pW1qYbiuam1ODWCUcqpB
U90xIJGWtQ4Fx8MDMJ7qI/mhP/2B8EDGp9Iui2ep9SpAlF10iaD+xazVAloD8UgF
ZKK19Y7XjAdIuO/+1RQ1Dw9+/25MyqowEIjz9Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:18:17 2026 by rpki-client