Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/DjQMqg2kffWJVFlf9YdB26kT8mU.asa
File:                     DjQMqg2kffWJVFlf9YdB26kT8mU.asa (raw, json)
Hash identifier:          Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=
Subject key identifier:   0E:34:0C:AA:0D:A4:7D:F5:89:54:59:5F:F5:87:41:DB:A9:13:F2:65
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019E166C9BAF3D64828CB3C67213B1D409A1
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/DjQMqg2kffWJVFlf9YdB26kT8mU.asa
Signing time:             Mon 11 May 2026 09:44:36 +0000
ASPA not before:          Mon 11 May 2026 09:44:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199605
Providers:                AS: 203168
                          AS: 209565
                          AS: 215172
                          AS: 216211
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:16:6c:9b:af:3d:64:82:8c:b3:c6:72:13:b1:d4:09:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: May 11 09:44:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e340caa0da47df58954595ff58741dba913f265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:cd:3b:28:8c:cf:1e:39:36:ab:82:2e:c0:
                    43:b9:68:aa:f0:d3:fa:d2:89:fb:5b:a1:8b:fa:10:
                    2e:88:2d:6c:1d:5d:9f:75:a3:3a:8c:9b:47:e2:1e:
                    26:94:bb:ac:90:11:68:2f:5f:a8:a1:0c:5f:ea:cf:
                    27:af:b1:ee:78:b1:75:86:f8:df:db:42:44:d8:1a:
                    d4:13:40:2c:73:48:b0:df:d5:a5:7c:f4:03:e5:4c:
                    7a:04:61:81:77:e8:58:70:52:fd:47:c8:b5:8d:92:
                    94:76:a3:99:cb:a8:7e:54:bb:d5:a9:c7:9a:6a:9e:
                    94:7b:61:8c:6a:6c:3f:50:12:4f:9e:a8:64:6b:f5:
                    25:42:77:c7:1c:10:70:10:6b:f3:d8:2a:22:f1:7c:
                    bd:9b:2d:ef:04:33:23:9b:60:c1:cb:44:1a:49:d0:
                    dc:b3:30:54:2b:ee:7d:51:d9:85:7f:a0:82:6a:b6:
                    9c:47:3a:31:02:db:bf:05:25:ea:87:40:03:6b:8e:
                    0e:b7:1a:c4:83:5b:ef:54:89:03:bc:c7:12:90:bd:
                    dc:70:54:9a:8e:02:27:36:8d:9a:7d:f4:21:d8:85:
                    d3:63:d4:24:76:94:12:94:55:f7:5d:b9:69:2a:3c:
                    6f:20:8e:0d:28:0c:54:74:b9:66:fb:c7:fe:e7:58:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:0C:AA:0D:A4:7D:F5:89:54:59:5F:F5:87:41:DB:A9:13:F2:65
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/DjQMqg2kffWJVFlf9YdB26kT8mU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199605

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:c8:28:8b:4e:4c:59:49:d0:ca:aa:a6:dd:d3:bc:78:f6:
         c3:54:03:5e:2d:b9:82:fa:7e:02:79:33:22:ee:12:38:b5:ed:
         1d:72:a8:2a:89:5e:e2:23:a4:f5:7e:a7:dd:49:1c:3e:e5:23:
         5b:b7:2f:f0:c8:3d:cf:7f:65:1d:e6:13:a1:5b:b8:b3:e1:79:
         1d:0a:e9:5a:69:d3:c1:04:73:97:a1:6b:06:14:cb:79:fc:80:
         20:0f:04:ec:50:05:bf:a3:36:c8:42:de:69:85:21:74:74:e7:
         27:de:82:a3:0e:1d:8b:5b:22:84:e5:5c:fc:5a:bc:ae:79:97:
         e7:1b:c1:d2:f6:fa:41:85:1a:49:95:1d:70:88:9c:41:a4:09:
         3d:78:5e:c5:40:a0:eb:0e:6f:1f:8d:c3:31:50:92:9d:41:78:
         d0:63:14:b6:79:14:e7:93:d0:90:96:c4:56:ec:e1:b0:3b:81:
         5f:d1:ab:7c:a0:ca:d2:ee:f4:1a:19:9b:d2:86:e7:98:23:a9:
         9a:a3:fd:64:6c:d1:40:60:88:76:6b:48:12:f5:c8:2b:56:98:
         c4:2c:73:79:a8:d8:84:44:fc:80:10:a3:c6:1d:8d:da:4b:6b:
         5d:36:53:95:de:57:d9:e8:05:fc:7f:65:07:e6:9c:9e:c2:93:
         df:f0:22:0a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4WbJuvPWSCjLPGchOx1AmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODE1MTBmZjAzZTk1NDY0YWM3MjRhMmEwNTk0ZGE0MDdm
MDViMDcwHhcNMjYwNTExMDk0NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTM0MGNhYTBkYTQ3ZGY1ODk1NDU5NWZmNTg3NDFkYmE5MTNmMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHNOyiMzx45NquCLsBDuWiq8NP6
0on7W6GL+hAuiC1sHV2fdaM6jJtH4h4mlLuskBFoL1+ooQxf6s8nr7HueLF1hvjf
20JE2BrUE0Asc0iw39WlfPQD5Ux6BGGBd+hYcFL9R8i1jZKUdqOZy6h+VLvVqcea
ap6Ue2GMamw/UBJPnqhka/UlQnfHHBBwEGvz2Coi8Xy9my3vBDMjm2DBy0QaSdDc
szBUK+59UdmFf6CCaracRzoxAtu/BSXqh0ADa44OtxrEg1vvVIkDvMcSkL3ccFSa
jgInNo2affQh2IXTY9QkdpQSlFX3XblpKjxvII4NKAxUdLlm+8f+51jBdwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA40DKoNpH31iVRZX/WHQdupE/JlMB8GA1UdIwQY
MBaAFNaBUQ/wPpVGSsckoqBZTaQH8FsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9GUkRfQS1sVVpLeHlTaW9GbE5wQWZ3V3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81Y2FjMmUtNmVhYy00YjY1LTkwOWIt
NGMyMGYyYTk4MzE1LzEvRGpRTXFnMmtmZldKVkZsZjlZZEIyNmtUOG1VLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81Y2FjMmUtNmVhYy00YjY1LTkwOWItNGMyMGYyYTk4MzE1
LzEvMW9GUkRfQS1sVVpLeHlTaW9GbE5wQWZ3V3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLtTANBgkqhkiG
9w0BAQsFAAOCAQEAJtzIKItOTFlJ0Mqqpt3TvHj2w1QDXi25gvp+AnkzIu4SOLXt
HXKoKole4iOk9X6n3UkcPuUjW7cv8Mg9z39lHeYToVu4s+F5HQrpWmnTwQRzl6Fr
BhTLefyAIA8E7FAFv6M2yELeaYUhdHTnJ96Cow4di1sihOVc/Fq8rnmX5xvB0vb6
QYUaSZUdcIicQaQJPXhexUCg6w5vH43DMVCSnUF40GMUtnkU55PQkJbEVuzhsDuB
X9GrfKDK0u70Ghmb0obnmCOpmqP9ZGzRQGCIdmtIEvXIK1aYxCxzeajYhET8gBCj
xh2N2ktrXTZTld5X2egF/H9lB+acnsKT3/AiCg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:25 2026 by rpki-client