Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/rNoyEhNVvFDMhHnHdUEEHnR6hFg.asa
File:                     rNoyEhNVvFDMhHnHdUEEHnR6hFg.asa (raw, json)
Hash identifier:          sjciyK9wd3L99HAH1ZxxAgQrRsrGw4fb3B7PMnrpyIA=
Subject key identifier:   AC:DA:32:12:13:55:BC:50:CC:84:79:C7:75:41:04:1E:74:7A:84:58
Certificate issuer:       /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial:       019F3BEA8B4E685F33C939182B39B372C5AD
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/rNoyEhNVvFDMhHnHdUEEHnR6hFg.asa
Signing time:             Tue 07 Jul 2026 09:30:54 +0000
ASPA not before:          Tue 07 Jul 2026 09:30:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35360
Providers:                AS: 25091
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:ea:8b:4e:68:5f:33:c9:39:18:2b:39:b3:72:c5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
        Validity
            Not Before: Jul  7 09:30:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=acda32121355bc50cc8479c77541041e747a8458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:fb:13:15:a2:1f:22:ea:f6:e8:dc:e0:95:
                    65:5e:44:0e:e0:62:93:29:32:4a:4c:ea:20:fc:bd:
                    9b:8d:c6:e2:41:7d:5c:c2:ee:b4:ce:95:5b:c3:f3:
                    74:d3:54:21:d1:75:b9:90:86:7c:1f:d4:9a:77:c1:
                    92:ca:4c:64:f2:63:b2:76:1f:bf:9a:cf:d0:45:9d:
                    62:fa:8c:87:57:e2:ba:98:21:e9:cf:20:cf:ba:7d:
                    2c:3f:e6:06:13:f7:e9:c6:f5:11:e6:3c:28:d0:6a:
                    1b:66:2d:43:76:64:f1:a7:8f:2b:6b:86:63:d0:c0:
                    1c:cf:5f:d3:8a:09:c0:92:42:0f:99:a6:9a:d7:b4:
                    44:09:57:eb:0c:23:c5:89:59:cf:7f:b9:13:a9:8d:
                    15:1c:0f:e6:d6:1c:82:38:8b:35:94:44:66:1c:c1:
                    07:b1:00:6c:cb:37:14:5e:93:92:5e:60:2b:6a:35:
                    d6:e3:31:fb:ad:68:64:88:e9:13:11:82:b0:4b:32:
                    f1:e6:6e:b3:83:0a:18:1a:cd:47:e2:5c:5b:90:58:
                    63:8c:55:c0:b1:dc:7d:13:4c:5a:d2:98:35:8b:20:
                    a1:b9:86:a6:0b:04:04:c9:27:28:01:df:b2:0a:6f:
                    ef:23:fa:aa:0c:40:09:38:ee:23:a0:7b:2b:67:e6:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:32:12:13:55:BC:50:CC:84:79:C7:75:41:04:1E:74:7A:84:58
            X509v3 Authority Key Identifier:
                keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/rNoyEhNVvFDMhHnHdUEEHnR6hFg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35360

    Signature Algorithm: sha256WithRSAEncryption
         07:15:e0:0c:49:83:d6:bc:0e:1c:ff:d3:e4:43:a8:22:eb:59:
         2f:cd:d1:bf:96:9e:f6:78:f3:80:15:45:25:7c:65:05:a3:07:
         95:cd:31:82:c9:5f:29:66:58:a4:67:a3:ac:2c:d9:07:d6:7a:
         9a:52:7d:10:35:4b:57:a4:d8:e0:45:54:db:03:77:aa:28:aa:
         a0:b2:cb:fe:4e:fc:ce:32:df:42:fa:fe:7d:fc:09:38:48:ec:
         6e:46:74:ec:60:24:13:c8:d4:bf:79:1c:dc:a3:c1:a4:a3:b4:
         7c:0b:7c:44:e3:cf:76:c8:cc:5a:5c:a1:57:95:b3:81:10:a8:
         1b:0f:e1:f2:83:dc:92:ac:a2:3f:a7:f0:c6:05:cd:59:e2:e4:
         7f:2d:bf:09:a4:7e:ec:74:ea:2c:d5:c3:a9:d7:3d:72:1a:87:
         75:97:3d:2a:17:e4:0e:ab:2b:02:e5:5d:2c:e9:8c:22:84:69:
         00:f9:6b:cb:5e:78:13:73:c8:23:72:81:48:f9:3f:47:04:22:
         02:3f:55:10:76:1c:ac:6d:cc:66:fe:b7:3f:8c:86:f0:e4:2e:
         ae:e8:bf:25:39:25:b6:9d:63:d3:15:2f:8b:95:21:88:1c:60:
         60:9b:dc:f9:55:6b:b1:2f:de:1e:73:2c:72:5d:51:09:2c:69:
         ef:d4:b6:9a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ876otOaF8zyTkYKzmzcsWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx
ZDE5YjUwHhcNMjYwNzA3MDkzMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2RhMzIxMjEzNTViYzUwY2M4NDc5Yzc3NTQxMDQxZTc0N2E4NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKb7ExWiHyLq9ujc4JVlXkQO4GKT
KTJKTOog/L2bjcbiQX1cwu60zpVbw/N001Qh0XW5kIZ8H9Sad8GSykxk8mOydh+/
ms/QRZ1i+oyHV+K6mCHpzyDPun0sP+YGE/fpxvUR5jwo0GobZi1DdmTxp48ra4Zj
0MAcz1/TignAkkIPmaaa17RECVfrDCPFiVnPf7kTqY0VHA/m1hyCOIs1lERmHMEH
sQBsyzcUXpOSXmArajXW4zH7rWhkiOkTEYKwSzLx5m6zgwoYGs1H4lxbkFhjjFXA
sdx9E0xa0pg1iyChuYamCwQEyScoAd+yCm/vI/qqDEAJOO4joHsrZ+aidwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKzaMhITVbxQzIR5x3VBBB50eoRYMB8GA1UdIwQY
MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt
Yjk0ZWI5ZTZiOWViLzEvck5veUVoTlZ2RkRNaEhuSGRVRUVIblI2aEZnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi
LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKIDANBgkqhkiG
9w0BAQsFAAOCAQEABxXgDEmD1rwOHP/T5EOoIutZL83Rv5ae9njzgBVFJXxlBaMH
lc0xgslfKWZYpGejrCzZB9Z6mlJ9EDVLV6TY4EVU2wN3qiiqoLLL/k78zjLfQvr+
ffwJOEjsbkZ07GAkE8jUv3kc3KPBpKO0fAt8ROPPdsjMWlyhV5WzgRCoGw/h8oPc
kqyiP6fwxgXNWeLkfy2/CaR+7HTqLNXDqdc9chqHdZc9KhfkDqsrAuVdLOmMIoRp
APlry154E3PII3KBSPk/RwQiAj9VEHYcrG3MZv63P4yG8OQurui/JTkltp1j0xUv
i5UhiBxgYJvc+VVrsS/eHnMscl1RCSxp79S2mg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:34 2026 by rpki-client