Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/txmqo2Bw-3oeca5oupMNgLyAN0Y.asa
File:                     txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (raw, json)
Hash identifier:          Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=
Subject key identifier:   B7:19:AA:A3:60:70:FB:7A:1E:71:AE:68:BA:93:0D:80:BC:80:37:46
Certificate issuer:       /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial:       019CF5D25AB7F6CF891A4AA41C7566323580
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/txmqo2Bw-3oeca5oupMNgLyAN0Y.asa
Signing time:             Mon 16 Mar 2026 08:45:29 +0000
ASPA not before:          Mon 16 Mar 2026 08:45:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44867
Providers:                AS: 5606
                          AS: 31313
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f5:d2:5a:b7:f6:cf:89:1a:4a:a4:1c:75:66:32:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
        Validity
            Not Before: Mar 16 08:45:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b719aaa36070fb7a1e71ae68ba930d80bc803746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:dc:b5:b9:2f:ed:f1:10:27:dc:6e:92:a9:
                    dc:4b:18:10:7f:2a:bf:55:1d:63:d4:1a:f7:94:9a:
                    d9:f0:d1:6a:9a:b0:67:af:b2:36:ed:aa:40:d1:54:
                    d5:43:32:73:08:e8:eb:a6:29:43:4f:75:6f:7b:c6:
                    15:85:cf:ba:01:ee:9e:83:30:a6:fd:2a:0f:5f:6d:
                    1e:fa:42:e6:17:e9:28:8d:f3:e6:66:c8:e3:5f:4e:
                    d9:84:3d:44:47:35:8f:35:d5:53:b7:52:32:34:0c:
                    86:cf:42:46:20:4d:68:6f:07:e0:06:3f:bb:e0:84:
                    b8:7a:4c:9d:e0:4a:c5:39:90:32:69:0f:18:a4:5e:
                    92:64:be:0f:ed:f6:2e:fa:d3:85:2a:16:56:1d:3a:
                    e4:77:f8:71:e8:1a:fc:f1:7c:1e:d1:91:c8:5c:75:
                    ee:ac:ef:4e:df:b3:2b:77:53:54:9f:a9:e0:ac:b2:
                    cb:1e:68:f8:09:76:37:c4:c9:94:7f:16:1b:42:1d:
                    4b:f4:25:e6:66:fc:85:02:f4:6b:b2:38:62:83:fe:
                    26:e0:2e:54:4b:cb:dd:fa:d2:dc:b7:df:47:d5:e0:
                    2f:45:25:69:06:f3:05:71:80:b4:9e:e8:03:4a:0f:
                    47:f9:ab:e1:aa:51:f6:c9:cb:43:6e:44:ed:6e:2b:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:19:AA:A3:60:70:FB:7A:1E:71:AE:68:BA:93:0D:80:BC:80:37:46
            X509v3 Authority Key Identifier:
                keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/txmqo2Bw-3oeca5oupMNgLyAN0Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44867

    Signature Algorithm: sha256WithRSAEncryption
         20:00:f3:5a:d1:e8:d8:26:ce:54:af:1b:64:b2:99:b8:39:e6:
         17:84:59:4c:bd:c8:28:c6:ed:1d:34:02:b9:64:e9:e2:dc:e5:
         11:ea:f3:09:15:e5:1b:1b:45:47:9e:9d:7d:ec:33:5f:b5:e9:
         69:1e:ed:4e:f6:d5:78:3f:6e:bf:95:7b:c9:ea:24:6f:b2:45:
         56:2e:68:d3:ec:3c:fe:0f:2f:f3:00:fc:00:39:54:50:da:f8:
         07:2a:d9:b3:93:e7:19:a7:1d:0a:11:ee:85:6e:67:f6:1b:b7:
         d1:41:6a:6b:68:12:28:47:c5:c6:31:27:d4:5e:5b:5a:0a:15:
         8c:53:f5:74:29:dd:53:b3:45:6d:f8:34:9e:81:22:69:2a:7f:
         96:7b:e1:17:0d:c8:5f:30:16:0c:7f:9e:c8:1f:37:67:42:48:
         22:d5:1f:0e:22:29:a1:3b:3f:17:0c:63:a2:b6:9f:35:c9:69:
         3f:57:35:07:f2:17:fa:91:82:e5:7e:59:70:7d:ee:01:d7:9b:
         71:b2:3f:5d:80:12:55:93:02:e3:d6:52:a5:07:f5:b3:d6:b6:
         4f:e9:cf:f3:d1:40:ea:4e:02:41:e9:35:72:98:2a:92:7b:72:
         b0:4f:2c:5c:1d:35:70:30:9f:e3:d0:cd:f6:3b:e2:6f:46:b7:
         b7:29:99:87
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZz10lq39s+JGkqkHHVmMjWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzc5YzdjMDdkNDM1ZmEwMGYyYzdjYTBiMWU1MDY2NGRh
MDRkNDgwHhcNMjYwMzE2MDg0NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzE5YWFhMzYwNzBmYjdhMWU3MWFlNjhiYTkzMGQ4MGJjODAzNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jctbkv7fEQJ9xukqncSxgQfyq/
VR1j1Br3lJrZ8NFqmrBnr7I27apA0VTVQzJzCOjrpilDT3Vve8YVhc+6Ae6egzCm
/SoPX20e+kLmF+kojfPmZsjjX07ZhD1ERzWPNdVTt1IyNAyGz0JGIE1obwfgBj+7
4IS4ekyd4ErFOZAyaQ8YpF6SZL4P7fYu+tOFKhZWHTrkd/hx6Br88Xwe0ZHIXHXu
rO9O37Mrd1NUn6ngrLLLHmj4CXY3xMmUfxYbQh1L9CXmZvyFAvRrsjhig/4m4C5U
S8vd+tLct99H1eAvRSVpBvMFcYC0nugDSg9H+avhqlH2yctDbkTtbivaNwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLcZqqNgcPt6HnGuaLqTDYC8gDdGMB8GA1UdIwQY
MBaAFD3HnHwH1DX6APLHygseUGZNoE1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNlY2ZBZlVOZm9BOHNmS0N4NVFaazJnVFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMDdkYTMtOGE5ZS00YzFjLTkzYzkt
OGViODU0YzlmYzhkLzEvdHhtcW8yQnctM29lY2E1b3VwTU5nTHlBTjBZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yMDdkYTMtOGE5ZS00YzFjLTkzYzktOGViODU0YzlmYzhk
LzEvUGNlY2ZBZlVOZm9BOHNmS0N4NVFaazJnVFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvQzANBgkqhkiG
9w0BAQsFAAOCAQEAIADzWtHo2CbOVK8bZLKZuDnmF4RZTL3IKMbtHTQCuWTp4tzl
EerzCRXlGxtFR56dfewzX7XpaR7tTvbVeD9uv5V7yeokb7JFVi5o0+w8/g8v8wD8
ADlUUNr4ByrZs5PnGacdChHuhW5n9hu30UFqa2gSKEfFxjEn1F5bWgoVjFP1dCnd
U7NFbfg0noEiaSp/lnvhFw3IXzAWDH+eyB83Z0JIItUfDiIpoTs/FwxjorafNclp
P1c1B/IX+pGC5X5ZcH3uAdebcbI/XYASVZMC49ZSpQf1s9a2T+nP89FA6k4CQek1
cpgqkntysE8sXB01cDCf49DN9jvib0a3tymZhw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:58 2026 by rpki-client