Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/yPmy2OvPneIoAhLD9gE1TBP3MwA.asa
File:                     yPmy2OvPneIoAhLD9gE1TBP3MwA.asa (raw, json)
Hash identifier:          A9PQOXlu+etQnQ8jd/8UOZro+MQjl0GkxZpOe3jQx6U=
Subject key identifier:   C8:F9:B2:D8:EB:CF:9D:E2:28:02:12:C3:F6:01:35:4C:13:F7:33:00
Certificate issuer:       /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial:       019F5B4DF5EE4EB741EB896DF8AE65F15752
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/yPmy2OvPneIoAhLD9gE1TBP3MwA.asa
Signing time:             Mon 13 Jul 2026 11:47:43 +0000
ASPA not before:          Mon 13 Jul 2026 11:47:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39880
Providers:                AS: 198473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5b:4d:f5:ee:4e:b7:41:eb:89:6d:f8:ae:65:f1:57:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
        Validity
            Not Before: Jul 13 11:47:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8f9b2d8ebcf9de2280212c3f601354c13f73300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:8a:24:66:cb:91:01:14:cb:f1:45:df:4d:
                    db:9d:6b:d4:b7:6b:db:3c:92:11:ea:fa:96:bd:18:
                    df:51:f7:f8:f9:3f:dc:21:87:8f:00:6f:e1:dd:13:
                    70:a7:3b:7a:1a:5f:b1:9e:36:25:af:1c:46:10:a2:
                    82:6d:ac:df:ce:02:66:64:bc:2b:63:a2:6b:f3:da:
                    81:25:a3:b3:cd:38:18:ad:e5:f1:46:18:f6:83:48:
                    19:3b:2d:67:21:0a:69:62:5f:73:03:50:4b:f9:d0:
                    61:84:2d:9b:2f:36:d3:7d:c1:d2:68:c6:16:14:c6:
                    d5:aa:24:f1:e2:32:1a:10:7d:a8:e8:f1:69:5d:af:
                    71:f2:f5:19:8f:d1:4f:ce:fc:de:bc:80:6e:b2:06:
                    68:fa:e8:16:69:c5:59:5e:42:78:91:9b:94:0b:81:
                    fc:e9:f5:f7:61:3f:32:81:aa:7a:c8:79:37:5c:3b:
                    24:65:95:87:a8:54:fc:83:c6:12:83:c6:12:83:e2:
                    44:e0:89:17:01:1e:b8:69:cc:6f:58:bd:3a:b7:c8:
                    50:bb:de:5e:b6:61:41:22:b1:a0:16:99:22:86:8e:
                    fc:87:ec:df:6a:dd:81:78:9b:e3:ce:bc:30:7f:1b:
                    72:53:23:79:dc:bd:d1:b4:ce:79:40:8c:35:b8:ac:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F9:B2:D8:EB:CF:9D:E2:28:02:12:C3:F6:01:35:4C:13:F7:33:00
            X509v3 Authority Key Identifier:
                keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/yPmy2OvPneIoAhLD9gE1TBP3MwA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39880

    Signature Algorithm: sha256WithRSAEncryption
         8f:b2:2f:91:a9:1f:76:7d:88:7f:eb:82:05:f1:cd:8f:67:12:
         08:2f:df:14:52:f4:75:dd:db:d1:d0:c8:5a:7b:b4:92:21:f7:
         95:61:36:6b:e9:62:8b:6f:f6:a5:0e:68:df:d2:7c:cf:f2:b8:
         b6:05:86:51:7e:d3:fe:68:44:9a:b0:07:04:af:27:70:07:8c:
         63:a8:31:f7:42:bc:fa:a3:8e:87:df:f6:48:bc:96:46:91:b0:
         24:bc:9b:1e:c5:cb:aa:ae:4a:5e:6e:41:df:b8:4d:44:c3:f8:
         f4:46:9b:b8:0f:8c:a1:44:cd:de:66:d8:d0:54:05:cb:f0:be:
         c9:69:1d:b4:9f:7b:bc:a7:9d:da:b2:bc:18:fe:95:8b:00:3a:
         ea:1c:95:d6:c8:b5:53:83:e0:63:79:d0:bf:60:9a:32:66:25:
         f6:ce:f3:d7:75:56:9a:26:a6:d7:06:1a:d5:42:71:4c:7f:18:
         1f:5c:0a:12:16:82:50:ea:f6:4b:c5:b0:6c:ca:00:e6:02:26:
         aa:a2:c7:d8:15:c1:57:d5:f3:e4:fc:7d:83:3a:73:7b:e9:9b:
         2a:ea:e9:6d:a5:7a:37:45:da:10:a0:2d:f3:72:96:9c:2d:39:
         b9:b5:8d:bf:71:ac:a7:4b:a9:d6:68:db:6b:fe:1c:b7:46:8a:
         52:c2:2b:3b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ9bTfXuTrdB64lt+K5l8VdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NWZhZDQxMDkyODNiMzNiNmYzYmE1M2ZhZTgzYTE0NWQx
OTM0ZTIwHhcNMjYwNzEzMTE0NzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGY5YjJkOGViY2Y5ZGUyMjgwMjEyYzNmNjAxMzU0YzEzZjczMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyceKJGbLkQEUy/FF303bnWvUt2vb
PJIR6vqWvRjfUff4+T/cIYePAG/h3RNwpzt6Gl+xnjYlrxxGEKKCbazfzgJmZLwr
Y6Jr89qBJaOzzTgYreXxRhj2g0gZOy1nIQppYl9zA1BL+dBhhC2bLzbTfcHSaMYW
FMbVqiTx4jIaEH2o6PFpXa9x8vUZj9FPzvzevIBusgZo+ugWacVZXkJ4kZuUC4H8
6fX3YT8ygap6yHk3XDskZZWHqFT8g8YSg8YSg+JE4IkXAR64acxvWL06t8hQu95e
tmFBIrGgFpkiho78h+zfat2BeJvjzrwwfxtyUyN53L3RtM55QIw1uKz/oQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMj5stjrz53iKAISw/YBNUwT9zMAMB8GA1UdIwQY
MBaAFBZfrUEJKDsztvO6U/roOhRdGTTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQt
MzFiNjAzMTFjMzE1LzEveVBteTJPdlBuZUlvQWhMRDlnRTFUQlAzTXdBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQtMzFiNjAzMTFjMzE1
LzEvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbyDANBgkqhkiG
9w0BAQsFAAOCAQEAj7Ivkakfdn2If+uCBfHNj2cSCC/fFFL0dd3b0dDIWnu0kiH3
lWE2a+lii2/2pQ5o39J8z/K4tgWGUX7T/mhEmrAHBK8ncAeMY6gx90K8+qOOh9/2
SLyWRpGwJLybHsXLqq5KXm5B37hNRMP49EabuA+MoUTN3mbY0FQFy/C+yWkdtJ97
vKed2rK8GP6ViwA66hyV1si1U4PgY3nQv2CaMmYl9s7z13VWmiam1wYa1UJxTH8Y
H1wKEhaCUOr2S8WwbMoA5gImqqLH2BXBV9Xz5Px9gzpze+mbKurpbaV6N0XaEKAt
83KWnC05ubWNv3Gsp0up1mjba/4ct0aKUsIrOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:09 2026 by rpki-client