Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa
File:                     hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (raw, json)
Hash identifier:          zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=
Subject key identifier:   84:C7:16:99:F3:AB:0E:B0:0C:7F:B7:45:A5:DF:5D:CE:F3:4F:34:07
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       019F847BCF46A007E9CAA9703C7AB566F4B4
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa
Signing time:             Tue 21 Jul 2026 11:42:14 +0000
ASPA not before:          Tue 21 Jul 2026 11:42:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12608
Providers:                AS: 21430
                          AS: 62160
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:7b:cf:46:a0:07:e9:ca:a9:70:3c:7a:b5:66:f4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Jul 21 11:42:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=84c71699f3ab0eb00c7fb745a5df5dcef34f3407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:fe:16:fd:f5:ab:6f:69:f9:1c:ee:fd:fd:
                    b5:ac:8d:26:f2:85:cd:0b:68:4d:d7:10:44:fe:c1:
                    a9:51:4a:29:2f:aa:7d:91:97:b4:46:7b:73:5d:72:
                    78:7c:1f:37:83:5d:1c:71:6a:82:07:cc:94:3e:ce:
                    7e:2b:06:3f:c1:04:bc:f3:9c:37:96:82:b1:36:9d:
                    5a:ff:2f:51:b1:a3:f5:da:4b:d4:e0:b4:7a:90:93:
                    8e:ca:eb:34:56:84:40:45:41:b9:c8:e9:7d:a1:fa:
                    51:55:a7:c5:48:7e:b5:94:11:57:8f:39:db:2f:52:
                    ca:08:48:7e:86:98:07:d3:75:ff:bb:51:5b:23:3d:
                    70:d6:3b:76:f3:94:c7:46:d0:61:99:fc:5a:0f:c1:
                    a8:41:9e:20:16:98:cb:7b:e6:68:68:fb:ca:55:37:
                    23:6d:1d:3f:b3:7e:4a:18:20:45:5e:e6:8e:b2:70:
                    d7:a6:05:a5:b9:f8:ed:d8:b2:ca:3a:e8:d2:56:5e:
                    25:98:ff:a7:10:9b:53:e6:21:9d:2b:8e:f7:9b:72:
                    50:80:23:4b:2d:55:6e:b4:17:33:2f:8a:9f:3c:11:
                    5f:43:d6:4f:a5:7d:f3:40:e3:3a:f8:08:b5:17:f6:
                    2e:2c:84:e6:43:d1:cb:da:9a:b4:e7:f9:df:29:9d:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C7:16:99:F3:AB:0E:B0:0C:7F:B7:45:A5:DF:5D:CE:F3:4F:34:07
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12608

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:26:19:83:dd:b4:4d:ff:b7:11:7d:d4:64:50:5d:2d:ed:
         2c:56:78:69:ee:29:da:11:b9:d1:af:b8:70:94:1d:5b:62:cc:
         65:32:44:8b:df:6d:d9:23:ae:b7:43:72:ea:0a:47:2b:1d:f1:
         30:7e:c4:99:cc:63:78:78:57:44:b8:2a:41:8c:80:31:be:da:
         11:33:d7:6f:bd:71:cf:b9:9c:ad:cc:49:99:9d:3f:b2:aa:9c:
         d1:67:45:9b:fb:1d:a5:2d:6e:33:a1:80:64:e6:4b:dd:8b:42:
         1f:a8:5e:8d:fc:e6:cc:1f:37:f7:9d:bd:14:8e:fe:9c:b6:8f:
         3a:67:17:8e:69:c7:35:8a:fe:51:74:b6:58:7e:e6:c9:09:47:
         38:75:98:2c:06:9a:2c:38:d9:8f:d1:21:4d:75:04:0d:11:90:
         cf:4c:ae:de:18:62:35:ee:ca:6c:32:97:e7:be:fc:7c:4b:04:
         19:c1:81:b1:8c:34:5e:0c:71:2c:9e:98:5c:0d:98:c6:56:76:
         38:09:fd:9e:1c:1f:fa:81:19:0a:95:27:46:f0:a4:18:fa:34:
         f8:fd:67:5e:9f:e2:79:87:ca:92:1d:6f:87:06:07:27:07:4c:
         e3:94:d7:52:f6:44:09:67:7a:ba:e6:98:22:52:bb:66:b5:13:
         51:f0:45:dd
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ+Ee89GoAfpyqlwPHq1ZvS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2Q4MmJmYTZjYmY5ODNiOTcwMzQ5NDAxYmRlZjc4ZWQ2
NjgyYjgwHhcNMjYwNzIxMTE0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGM3MTY5OWYzYWIwZWIwMGM3ZmI3NDVhNWRmNWRjZWYzNGYzNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjb+Fv31q29p+Rzu/f21rI0m8oXN
C2hN1xBE/sGpUUopL6p9kZe0RntzXXJ4fB83g10ccWqCB8yUPs5+KwY/wQS885w3
loKxNp1a/y9RsaP12kvU4LR6kJOOyus0VoRARUG5yOl9ofpRVafFSH61lBFXjznb
L1LKCEh+hpgH03X/u1FbIz1w1jt285THRtBhmfxaD8GoQZ4gFpjLe+ZoaPvKVTcj
bR0/s35KGCBFXuaOsnDXpgWlufjt2LLKOujSVl4lmP+nEJtT5iGdK473m3JQgCNL
LVVutBczL4qfPBFfQ9ZPpX3zQOM6+Ai1F/YuLITmQ9HL2pq05/nfKZ3HYwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFITHFpnzqw6wDH+3RaXfXc7zTzQHMB8GA1UdIwQY
MBaAFIp9gr+my/mDuXA0lAG973jtZoK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW4yQ3Y2YkwtWU81Y0RTVUFiM3ZlTzFtZ3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82NjYwOTktZGI1OS00ZDMzLTk4ODct
OTFmMzEwMDhhMmViLzEvaE1jV21mT3JEckFNZjdkRnBkOWR6dk5QTkFjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82NjYwOTktZGI1OS00ZDMzLTk4ODctOTFmMzEwMDhhMmVi
LzEvaW4yQ3Y2YkwtWU81Y0RTVUFiM3ZlTzFtZ3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjFAMA0GCSqGSIb3
DQEBCwUAA4IBAQCHoCYZg920Tf+3EX3UZFBdLe0sVnhp7inaEbnRr7hwlB1bYsxl
MkSL323ZI663Q3LqCkcrHfEwfsSZzGN4eFdEuCpBjIAxvtoRM9dvvXHPuZytzEmZ
nT+yqpzRZ0Wb+x2lLW4zoYBk5kvdi0IfqF6N/ObMHzf3nb0Ujv6cto86ZxeOacc1
iv5RdLZYfubJCUc4dZgsBposONmP0SFNdQQNEZDPTK7eGGI17spsMpfnvvx8SwQZ
wYGxjDReDHEsnphcDZjGVnY4Cf2eHB/6gRkKlSdG8KQY+jT4/Wden+J5h8qSHW+H
BgcnB0zjlNdS9kQJZ3q65pgiUrtmtRNR8EXd
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:15 2026 by rpki-client