Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/5tcCkCr9HL184Lf-stMsZLwXzY8.asa
File:                     5tcCkCr9HL184Lf-stMsZLwXzY8.asa (raw, json)
Hash identifier:          W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=
Subject key identifier:   E6:D7:02:90:2A:FD:1C:BD:7C:E0:B7:FE:B2:D3:2C:64:BC:17:CD:8F
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       019CF66795E1FCCFA59BBC5F42C52457A81B
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/5tcCkCr9HL184Lf-stMsZLwXzY8.asa
Signing time:             Mon 16 Mar 2026 11:28:29 +0000
ASPA not before:          Mon 16 Mar 2026 11:28:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12502
Providers:                AS: 1299
                          AS: 5405
                          AS: 33843
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:67:95:e1:fc:cf:a5:9b:bc:5f:42:c5:24:57:a8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Mar 16 11:28:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6d702902afd1cbd7ce0b7feb2d32c64bc17cd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:34:15:80:65:bc:e5:a5:3e:25:35:a3:3b:
                    4f:4c:a9:ca:04:02:c3:72:53:5d:c1:7a:95:89:98:
                    b5:ee:69:3c:ef:ee:3b:56:97:34:86:34:6d:d6:f8:
                    ed:03:37:ea:9c:5d:96:24:a8:d9:5c:bd:dd:ee:f8:
                    d6:7a:86:c4:ab:1f:da:21:8d:1b:23:28:3b:f0:56:
                    26:4a:41:4f:9c:38:e3:c4:57:62:f5:a7:d3:a3:ea:
                    b4:7a:72:44:1e:35:27:0a:03:ad:aa:fa:4e:2c:b2:
                    71:47:3e:8f:ab:2e:49:6c:93:e6:1e:43:cd:0d:0b:
                    f7:2d:0c:89:c5:e9:11:ff:87:50:d4:6c:18:7c:01:
                    9f:a0:55:f0:3b:d4:f2:c7:2e:42:94:3f:b0:83:3b:
                    58:f4:a9:62:31:ec:6e:90:54:84:83:bb:e6:96:b4:
                    af:87:64:9f:3d:a5:98:16:b6:60:ed:75:9e:2c:e3:
                    98:9c:47:b2:47:04:11:63:34:a0:45:d9:02:85:47:
                    96:0d:55:fb:74:5d:12:ab:ee:ee:40:30:53:02:34:
                    65:3b:1a:18:a6:85:b9:6e:d7:57:7f:6e:f5:5b:78:
                    5f:c7:7e:76:e9:b3:4a:7b:74:a3:47:47:ec:6b:d1:
                    d5:a1:f7:9c:b7:61:8e:a1:a7:34:fb:b7:b0:4f:e4:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:02:90:2A:FD:1C:BD:7C:E0:B7:FE:B2:D3:2C:64:BC:17:CD:8F
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/5tcCkCr9HL184Lf-stMsZLwXzY8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12502

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:5d:61:d8:dc:db:54:1b:2e:62:4a:a7:c0:95:ec:e0:30:
         44:de:d8:c6:9b:e9:bc:7e:cf:8f:80:de:bd:0f:2c:47:22:24:
         aa:cd:6a:d2:af:d4:82:25:37:39:75:fd:e3:56:7e:d7:13:4d:
         f7:fb:c0:a9:8d:19:63:87:7c:74:44:c5:6a:05:9a:cd:cd:41:
         63:b5:d4:34:b0:c3:2f:06:d2:3a:81:85:9c:2c:9b:bb:21:55:
         a9:3a:e7:40:8c:2b:34:99:7e:81:69:de:d2:51:ad:44:d4:ce:
         90:95:9e:33:7b:2e:ba:b1:c3:0f:93:72:68:64:de:e7:28:a3:
         f4:d7:d9:04:ae:8b:55:05:46:a8:4f:a4:5c:70:82:19:be:23:
         cc:1b:82:17:3a:2d:6b:f9:60:10:c4:3f:1a:de:0f:4e:6c:34:
         9e:f1:c4:35:1b:f1:d1:86:b2:6a:5f:2e:67:ed:a8:c6:f4:c0:
         ec:f8:a0:e7:95:d5:a2:17:ac:bf:12:21:3b:9c:71:b7:e5:c0:
         b3:e6:75:16:e9:06:77:5d:65:b0:b0:1b:8f:3b:13:aa:e6:c5:
         1c:77:fd:25:e9:ad:54:cc:48:fb:26:d8:f9:b5:aa:fe:8e:51:
         ee:d6:64:ef:2e:3a:cd:3a:f8:c0:f6:61:57:a5:82:d8:da:ec:
         c5:08:46:3c
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZz2Z5Xh/M+lm7xfQsUkV6gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl
OGM0ZGUwHhcNMjYwMzE2MTEyODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ3MDI5MDJhZmQxY2JkN2NlMGI3ZmViMmQzMmM2NGJjMTdjZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8c0FYBlvOWlPiU1oztPTKnKBALD
clNdwXqViZi17mk87+47Vpc0hjRt1vjtAzfqnF2WJKjZXL3d7vjWeobEqx/aIY0b
Iyg78FYmSkFPnDjjxFdi9afTo+q0enJEHjUnCgOtqvpOLLJxRz6Pqy5JbJPmHkPN
DQv3LQyJxekR/4dQ1GwYfAGfoFXwO9Tyxy5ClD+wgztY9KliMexukFSEg7vmlrSv
h2SfPaWYFrZg7XWeLOOYnEeyRwQRYzSgRdkChUeWDVX7dF0Sq+7uQDBTAjRlOxoY
poW5btdXf271W3hfx3526bNKe3SjR0fsa9HVofect2GOoac0+7ewT+QarQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFObXApAq/Ry9fOC3/rLTLGS8F82PMB8GA1UdIwQY
MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt
YWU0Yzk1Yzk0MDA1LzEvNXRjQ2tDcjlITDE4NExmLXN0TXNaTHdYelk4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1
LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjDWMA0GCSqGSIb3
DQEBCwUAA4IBAQAbbF1h2NzbVBsuYkqnwJXs4DBE3tjGm+m8fs+PgN69DyxHIiSq
zWrSr9SCJTc5df3jVn7XE033+8CpjRljh3x0RMVqBZrNzUFjtdQ0sMMvBtI6gYWc
LJu7IVWpOudAjCs0mX6Bad7SUa1E1M6QlZ4zey66scMPk3JoZN7nKKP019kErotV
BUaoT6RccIIZviPMG4IXOi1r+WAQxD8a3g9ObDSe8cQ1G/HRhrJqXy5n7ajG9MDs
+KDnldWiF6y/EiE7nHG35cCz5nUW6QZ3XWWwsBuPOxOq5sUcd/0l6a1UzEj7Jtj5
tar+jlHu1mTvLjrNOvjA9mFXpYLY2uzFCEY8
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:11:12 2026 by rpki-client