Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/WryhvKq5rLqO2JKQAO-3gq870CU.asa
File:                     WryhvKq5rLqO2JKQAO-3gq870CU.asa (raw, json)
Hash identifier:          izgudbGBDY+4sfaQj2TUwzF5JwwjVq3NCndX7NK1FnM=
Subject key identifier:   5A:BC:A1:BC:AA:B9:AC:BA:8E:D8:92:90:00:EF:B7:82:AF:3B:D0:25
Certificate issuer:       /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial:       01A1BEDFED05DAD11F48C9D1FE7B24AAC12C
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/WryhvKq5rLqO2JKQAO-3gq870CU.asa
Signing time:             Mon 09 Nov 2026 05:55:08 +0000
ASPA not before:          Mon 09 Nov 2026 05:55:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202986
Providers:                AS: 20473
                          AS: 56655
                          AS: 152900
                          AS: 200461
                          AS: 215638
                          AS: 394177
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:be:df:ed:05:da:d1:1f:48:c9:d1:fe:7b:24:aa:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
        Validity
            Not Before: Nov  9 05:55:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5abca1bcaab9acba8ed8929000efb782af3bd025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:02:76:57:51:50:96:26:1c:90:4f:36:c8:
                    9b:25:ff:77:51:45:f0:ab:d1:0f:0b:7a:0e:ad:5a:
                    ee:f8:77:61:29:a8:92:44:ba:53:22:3e:e1:94:e0:
                    08:a5:4b:12:e3:a8:ef:c8:ed:8b:0f:bf:a5:2a:7d:
                    42:2d:88:7e:41:40:50:0a:db:7d:09:75:de:b8:c6:
                    f2:32:cd:dd:6d:0d:8d:bc:e7:a7:e9:f4:64:ae:ff:
                    a2:57:8a:3a:5c:c6:a0:09:68:b1:9f:6d:72:05:d1:
                    c9:25:8b:64:4b:7a:08:e8:de:c0:30:e5:72:21:0d:
                    c7:2d:ec:90:06:ea:71:40:51:18:e8:7a:ea:2b:be:
                    08:7b:48:b4:02:3f:54:7b:90:46:8f:c0:0d:e3:47:
                    d6:50:10:d9:0c:84:56:2c:52:ba:da:52:d0:3a:9d:
                    3a:a8:2b:03:7c:8b:05:4f:64:bf:f6:ea:16:56:b1:
                    85:61:18:f2:72:34:64:aa:19:05:0d:de:05:db:ac:
                    b0:41:c8:fb:77:8f:43:e8:ff:f5:e4:23:89:34:2f:
                    14:10:0f:65:0f:28:43:7e:c4:12:bc:90:40:0d:1f:
                    ec:1c:85:10:3d:9a:3b:c4:82:e1:af:5c:14:67:15:
                    1c:03:b7:37:0d:77:f3:44:2e:d5:0c:29:5d:bb:86:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:A1:BC:AA:B9:AC:BA:8E:D8:92:90:00:EF:B7:82:AF:3B:D0:25
            X509v3 Authority Key Identifier:
                keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/WryhvKq5rLqO2JKQAO-3gq870CU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202986

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:9b:19:64:58:f9:2e:6d:a4:c3:3e:51:98:b1:c1:62:5c:
         67:d4:ab:33:f5:e8:7b:e2:9c:cb:cc:f3:67:f3:fd:e5:dc:ca:
         0a:cb:22:33:bd:b2:ff:c5:34:83:86:27:46:5e:3e:dc:e1:53:
         cc:d7:9e:0c:2a:fa:af:22:5a:ab:06:8b:ca:7d:75:42:8b:02:
         de:c4:58:f5:0d:72:03:45:72:1b:c2:e6:b7:df:f1:e2:57:5f:
         31:55:49:a6:35:6a:f4:21:c5:62:0f:6e:26:77:28:1c:50:d3:
         c5:c1:5f:9c:cb:8a:fd:f2:91:9c:bb:97:3e:8b:6b:44:1d:bb:
         44:72:d7:9b:10:b9:18:65:7e:11:d6:3c:0a:a5:d5:d1:61:30:
         68:a9:47:b5:ec:a1:26:c2:ed:42:ed:9f:3b:f9:3a:92:7d:14:
         39:a4:c0:a8:61:a2:52:4c:7a:f1:74:2e:19:bf:d1:a8:3a:0e:
         eb:e7:63:f4:ee:75:92:26:d3:71:67:96:9d:ac:12:12:22:2b:
         e5:dd:dd:3d:ad:3b:27:32:0f:00:35:ca:ce:bd:51:c5:07:1d:
         84:04:68:15:a0:b0:56:3c:e0:ab:f7:c9:b9:9a:54:3d:7b:06:
         94:5d:37:75:ba:60:37:94:55:3d:3e:ef:59:d1:1c:72:1e:73:
         24:5d:52:ac
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaG+3+0F2tEfSMnR/nskqsEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4
OTczNjIwHhcNMjYxMTA5MDU1NTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWJjYTFiY2FhYjlhY2JhOGVkODkyOTAwMGVmYjc4MmFmM2JkMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsQCdldRUJYmHJBPNsibJf93UUXw
q9EPC3oOrVru+HdhKaiSRLpTIj7hlOAIpUsS46jvyO2LD7+lKn1CLYh+QUBQCtt9
CXXeuMbyMs3dbQ2NvOen6fRkrv+iV4o6XMagCWixn21yBdHJJYtkS3oI6N7AMOVy
IQ3HLeyQBupxQFEY6HrqK74Ie0i0Aj9Ue5BGj8AN40fWUBDZDIRWLFK62lLQOp06
qCsDfIsFT2S/9uoWVrGFYRjycjRkqhkFDd4F26ywQcj7d49D6P/15COJNC8UEA9l
DyhDfsQSvJBADR/sHIUQPZo7xILhr1wUZxUcA7c3DXfzRC7VDCldu4ZfLwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFq8obyquay6jtiSkADvt4KvO9AlMB8GA1UdIwQY
MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt
M2MyNzQyZjI4YTNjLzEvV3J5aHZLcTVyTHFPMkpLUUFPLTNncTg3MENVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj
LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMY6jANBgkqhkiG
9w0BAQsFAAOCAQEAd+abGWRY+S5tpMM+UZixwWJcZ9SrM/Xoe+Kcy8zzZ/P95dzK
CssiM72y/8U0g4YnRl4+3OFTzNeeDCr6ryJaqwaLyn11QosC3sRY9Q1yA0VyG8Lm
t9/x4ldfMVVJpjVq9CHFYg9uJncoHFDTxcFfnMuK/fKRnLuXPotrRB27RHLXmxC5
GGV+EdY8CqXV0WEwaKlHteyhJsLtQu2fO/k6kn0UOaTAqGGiUkx68XQuGb/RqDoO
6+dj9O51kibTcWeWnawSEiIr5d3dPa07JzIPADXKzr1RxQcdhARoFaCwVjzgq/fJ
uZpUPXsGlF03dbpgN5RVPT7vWdEcch5zJF1SrA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:49:01 2026 by rpki-client