Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa
File:                     X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (raw, json)
Hash identifier:          aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=
Subject key identifier:   5F:4D:48:7D:29:02:D3:FE:E7:B5:96:EB:50:89:19:FC:BF:83:E2:F1
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019F190146590CA168201F08FD91A27A7B14
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa
Signing time:             Tue 30 Jun 2026 14:49:01 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212223
Providers:                AS: 9150
                          AS: 39686
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:46:59:0c:a1:68:20:1f:08:fd:91:a2:7a:7b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Jun 30 14:49:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f4d487d2902d3fee7b596eb508919fcbf83e2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:e9:92:7f:4d:86:78:ed:da:c7:e0:7f:16:
                    c6:83:72:a0:a1:cf:ed:ec:77:d8:b7:0e:09:a1:b3:
                    be:72:bc:02:65:55:ab:9d:e1:1f:c1:0c:95:38:27:
                    46:41:a3:da:08:3c:de:b1:df:da:0f:e6:7f:8d:2e:
                    22:d9:94:2e:12:2f:08:84:bc:9f:7f:63:8f:6d:57:
                    a0:6e:c6:c2:88:01:92:2f:34:14:7f:36:03:63:45:
                    9c:09:08:7d:ee:77:45:b0:71:3b:1e:56:1b:44:d2:
                    e4:00:b8:8a:62:77:7d:82:de:c7:22:fc:d1:d6:a6:
                    20:15:64:28:ec:25:28:c8:96:8f:43:ea:c7:4b:8a:
                    53:0f:9f:1e:d5:db:83:b1:2c:28:ba:e5:1b:cb:18:
                    f6:4f:7e:a0:ec:61:3e:c4:1d:a0:65:d4:2e:ce:58:
                    65:d0:eb:4c:37:18:30:60:f7:47:af:76:a4:6d:b4:
                    3d:34:ca:f4:67:fc:bd:39:11:8a:17:c4:b1:f2:72:
                    e6:c5:8c:9f:9f:27:97:4b:e8:6c:d9:ac:4a:c5:29:
                    d1:c3:0e:5b:cb:ee:0a:90:3a:9d:49:2b:bd:af:5f:
                    3e:0f:43:01:fe:3f:3e:d8:cc:44:84:c3:ab:ee:06:
                    9a:b6:e3:45:df:ba:ea:11:52:09:7b:40:ea:a4:a9:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:48:7D:29:02:D3:FE:E7:B5:96:EB:50:89:19:FC:BF:83:E2:F1
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212223

    Signature Algorithm: sha256WithRSAEncryption
         33:53:ec:90:a6:d7:bf:82:b9:ca:67:5b:9f:6a:b9:da:27:a5:
         5e:94:c3:38:fe:0b:f4:04:a4:24:9f:3b:14:c3:93:ea:39:20:
         0a:71:d6:ff:b0:c8:83:17:74:93:8e:03:2f:4a:a0:8c:34:a7:
         07:45:9b:13:42:e5:92:25:9c:2f:97:9d:86:0d:b1:b5:1e:ae:
         a8:dc:ca:eb:fb:fc:a1:b8:9a:65:d3:71:ee:da:28:45:89:29:
         49:10:b3:ef:2f:a7:d2:e4:3b:e8:3a:4e:92:ef:37:f4:d4:26:
         d9:f3:b2:3b:44:f5:95:08:86:b2:a6:c4:f8:47:dd:0e:cc:8d:
         d2:5c:bc:bc:78:d2:97:79:7f:8f:9f:01:21:67:55:a1:1b:6f:
         fe:ce:55:ad:01:fc:a2:fb:e7:67:4e:3c:6b:af:14:fa:da:97:
         c2:fd:6b:3e:9b:91:2e:12:2a:3f:45:d1:f8:4c:62:ec:7a:22:
         4d:65:54:d2:8d:a5:99:63:56:a9:c7:8d:6f:16:02:52:dd:98:
         8e:3d:4d:23:86:6a:a4:80:2f:e4:59:b0:87:a0:9a:4e:b7:a6:
         1c:eb:a2:f1:2c:f1:d1:aa:3e:b1:81:3d:f9:ac:b9:8c:b4:6a:
         fc:20:d6:fd:2d:d3:92:84:3d:88:50:0b:30:53:70:45:87:c8:
         c5:d0:42:de
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAUZZDKFoIB8I/ZGiensUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0
OWJhY2UwHhcNMjYwNjMwMTQ0OTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRkNDg3ZDI5MDJkM2ZlZTdiNTk2ZWI1MDg5MTlmY2JmODNlMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbpkn9Nhnjt2sfgfxbGg3Kgoc/t
7HfYtw4JobO+crwCZVWrneEfwQyVOCdGQaPaCDzesd/aD+Z/jS4i2ZQuEi8IhLyf
f2OPbVegbsbCiAGSLzQUfzYDY0WcCQh97ndFsHE7HlYbRNLkALiKYnd9gt7HIvzR
1qYgFWQo7CUoyJaPQ+rHS4pTD58e1duDsSwouuUbyxj2T36g7GE+xB2gZdQuzlhl
0OtMNxgwYPdHr3akbbQ9NMr0Z/y9ORGKF8Sx8nLmxYyfnyeXS+hs2axKxSnRww5b
y+4KkDqdSSu9r18+D0MB/j8+2MxEhMOr7gaatuNF37rqEVIJe0DqpKlIPwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF9NSH0pAtP+57WW61CJGfy/g+LxMB8GA1UdIwQY
MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt
NzBiNGUwYjNmYzllLzEvWDAxSWZTa0MwXzdudFpiclVJa1pfTC1ENHZFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll
LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8/zANBgkqhkiG
9w0BAQsFAAOCAQEAM1PskKbXv4K5ymdbn2q52ielXpTDOP4L9ASkJJ87FMOT6jkg
CnHW/7DIgxd0k44DL0qgjDSnB0WbE0LlkiWcL5edhg2xtR6uqNzK6/v8obiaZdNx
7tooRYkpSRCz7y+n0uQ76DpOku839NQm2fOyO0T1lQiGsqbE+EfdDsyN0ly8vHjS
l3l/j58BIWdVoRtv/s5VrQH8ovvnZ048a68U+tqXwv1rPpuRLhIqP0XR+Exi7Hoi
TWVU0o2lmWNWqceNbxYCUt2Yjj1NI4ZqpIAv5Fmwh6CaTremHOui8Szx0ao+sYE9
+ay5jLRq/CDW/S3TkoQ9iFALMFNwRYfIxdBC3g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:29 2026 by rpki-client