Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6fKXSa7fnznp7NE8PH4sDiQyQyo.asa
File:                     6fKXSa7fnznp7NE8PH4sDiQyQyo.asa (raw, json)
Hash identifier:          rIayLgXGwK3y6K7mwVo9kHrQgOm3DGeSouSk4AwPqp8=
Subject key identifier:   E9:F2:97:49:AE:DF:9F:39:E9:EC:D1:3C:3C:7E:2C:0E:24:32:43:2A
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019F19010156DA97F07BF7482DEDAF4A8323
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6fKXSa7fnznp7NE8PH4sDiQyQyo.asa
Signing time:             Tue 30 Jun 2026 14:48:43 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197421
Providers:                AS: 208570
                          AS: 212330
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:01:56:da:97:f0:7b:f7:48:2d:ed:af:4a:83:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: Jun 30 14:48:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9f29749aedf9f39e9ecd13c3c7e2c0e2432432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:60:98:56:08:29:0d:ec:ab:af:a2:76:3d:
                    06:a0:0f:4b:2d:c2:d1:e8:4d:af:07:e5:91:fd:02:
                    17:c1:23:e7:b8:7f:f6:f6:ad:03:c7:15:a9:9e:9a:
                    a3:4a:2b:43:a2:85:06:c5:0c:9c:c1:2b:5a:74:68:
                    a4:ef:b6:a3:b4:6d:41:01:bb:45:c5:9b:e3:4d:50:
                    c0:47:d4:90:37:00:0c:c1:93:7d:99:97:13:4e:1d:
                    a6:b8:62:58:58:1a:db:5f:81:df:e6:6a:b8:c0:99:
                    ae:27:c1:32:1c:d5:ed:f2:81:1b:69:d0:ea:72:46:
                    a2:33:39:da:21:9d:1f:ac:3c:44:77:9b:6d:1e:b4:
                    87:42:db:9e:39:18:a5:df:15:c3:c5:3d:03:c7:bd:
                    55:6e:3a:3a:a3:92:02:c4:d4:4f:e4:38:ee:da:e6:
                    b7:ea:61:d7:02:c3:cb:40:b6:ef:04:7a:eb:e8:e9:
                    b0:ea:bd:1a:28:24:4d:ae:ec:a9:ca:09:56:eb:fb:
                    9b:46:57:de:82:97:b1:29:c5:f8:c3:68:83:88:c7:
                    2d:3c:e6:05:29:3a:09:e4:83:73:a4:a5:9b:19:d6:
                    3d:9c:91:27:9c:d3:16:e5:40:63:b0:36:1b:bc:b0:
                    ce:12:a5:dd:97:b9:be:13:64:c9:2e:01:3d:0e:24:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F2:97:49:AE:DF:9F:39:E9:EC:D1:3C:3C:7E:2C:0E:24:32:43:2A
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6fKXSa7fnznp7NE8PH4sDiQyQyo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197421

    Signature Algorithm: sha256WithRSAEncryption
         38:75:75:a0:57:22:96:d3:5a:2c:e6:e0:81:1c:15:d1:cb:44:
         c4:11:2e:b3:e4:21:76:c7:15:a4:3c:e8:1e:6f:a3:47:bb:b6:
         86:4e:9e:c9:a5:17:1b:a2:d9:d2:d8:33:ff:40:92:eb:0b:43:
         1f:ad:26:b3:52:7d:62:cc:c1:bb:c5:2f:8c:d5:eb:76:4e:6a:
         f4:73:ed:78:3b:d3:6f:ec:91:0c:55:c4:85:c5:37:de:c3:1f:
         ee:0d:3d:a9:e7:55:ff:43:3b:fc:95:72:57:48:39:0d:d3:c0:
         a8:b9:fe:59:b4:8b:89:ac:eb:02:9d:b8:82:6f:36:b2:18:38:
         97:36:3e:e0:c8:1b:e5:94:68:2b:3d:7d:b6:6b:ac:75:55:6d:
         fa:46:d5:21:d4:ce:2a:7d:df:15:4d:f3:49:e9:f4:e7:7a:56:
         78:95:88:c0:83:d6:41:5e:ad:8d:8d:87:7e:68:42:7f:2c:0f:
         4b:55:a5:2d:2b:7d:75:6d:59:94:65:2d:3e:49:30:4f:08:9b:
         18:d3:fb:2c:d4:91:7e:66:55:f1:d6:db:ca:23:f1:d7:fd:82:
         1d:9d:ed:ff:07:28:62:80:0d:f5:e0:69:34:23:2b:a7:95:e7:
         76:70:14:40:b6:2d:e8:7f:7f:4a:01:14:92:60:2e:a6:3d:eb:
         01:e6:ff:39
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAQFW2pfwe/dILe2vSoMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjYwNjMwMTQ0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWYyOTc0OWFlZGY5ZjM5ZTllY2QxM2MzYzdlMmMwZTI0MzI0MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMFgmFYIKQ3sq6+idj0GoA9LLcLR
6E2vB+WR/QIXwSPnuH/29q0DxxWpnpqjSitDooUGxQycwStadGik77ajtG1BAbtF
xZvjTVDAR9SQNwAMwZN9mZcTTh2muGJYWBrbX4Hf5mq4wJmuJ8EyHNXt8oEbadDq
ckaiMznaIZ0frDxEd5ttHrSHQtueORil3xXDxT0Dx71Vbjo6o5ICxNRP5Dju2ua3
6mHXAsPLQLbvBHrr6Omw6r0aKCRNruypyglW6/ubRlfegpexKcX4w2iDiMctPOYF
KToJ5INzpKWbGdY9nJEnnNMW5UBjsDYbvLDOEqXdl7m+E2TJLgE9DiT7RQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOnyl0mu35856ezRPDx+LA4kMkMqMB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvNmZLWFNhN2Zuem5wN05FOFBINHNEaVF5UXlvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDLTANBgkqhkiG
9w0BAQsFAAOCAQEAOHV1oFciltNaLObggRwV0ctExBEus+QhdscVpDzoHm+jR7u2
hk6eyaUXG6LZ0tgz/0CS6wtDH60ms1J9YszBu8UvjNXrdk5q9HPteDvTb+yRDFXE
hcU33sMf7g09qedV/0M7/JVyV0g5DdPAqLn+WbSLiazrAp24gm82shg4lzY+4Mgb
5ZRoKz19tmusdVVt+kbVIdTOKn3fFU3zSen053pWeJWIwIPWQV6tjY2HfmhCfywP
S1WlLSt9dW1ZlGUtPkkwTwibGNP7LNSRfmZV8dbbyiPx1/2CHZ3t/wcoYoAN9eBp
NCMrp5XndnAUQLYt6H9/SgEUkmAupj3rAeb/OQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:27 2026 by rpki-client