Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa
File:                     Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (raw, json)
Hash identifier:          GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=
Subject key identifier:   59:FD:6F:6E:0D:4D:88:3E:73:0F:AC:2F:B0:2B:46:A0:65:69:F2:93
Certificate issuer:       /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial:       019D1A61CAF0F5EF268A122FB6100F7FB2DD
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa
Signing time:             Mon 23 Mar 2026 11:08:29 +0000
ASPA not before:          Mon 23 Mar 2026 11:08:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197019
Providers:                AS: 1299
                          AS: 6939
                          AS: 25512
                          AS: 42000
                          AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:61:ca:f0:f5:ef:26:8a:12:2f:b6:10:0f:7f:b2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
        Validity
            Not Before: Mar 23 11:08:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59fd6f6e0d4d883e730fac2fb02b46a06569f293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0f:e9:13:5b:4a:74:04:4d:7e:6b:25:f8:4b:
                    60:6a:8c:71:80:1e:1b:9e:d9:3d:9b:e1:95:9e:2c:
                    1b:4a:e4:18:9a:8d:8c:17:cf:18:7d:7e:05:e3:ae:
                    a4:e0:eb:5f:cb:1b:81:bc:28:41:ca:40:fc:3d:ac:
                    8b:fb:47:23:d6:71:d0:f4:50:98:18:90:1e:ad:7a:
                    c0:2a:d1:4c:75:be:b0:a2:3d:fb:08:0f:ca:2d:5f:
                    83:10:22:d9:c1:48:75:e0:18:9a:ec:ff:2a:c4:bc:
                    48:78:d5:82:59:75:41:35:c3:4d:13:65:f3:b2:ee:
                    e8:2a:6f:bd:93:73:11:7b:f0:13:8d:07:c2:fe:70:
                    00:39:d0:35:37:d2:44:d1:c6:1d:c2:02:4d:7f:a4:
                    6b:c9:9e:6b:6c:13:18:e4:76:9e:3a:a6:02:35:0a:
                    6e:6e:c5:74:2d:a2:99:85:a0:ea:cf:53:ab:6b:19:
                    7a:d3:fd:bb:82:01:62:c2:dd:5a:ad:15:b2:1e:18:
                    53:7a:3e:f5:d2:f1:82:c0:fa:90:0f:4c:80:d8:8f:
                    67:2c:97:ed:77:66:22:70:bc:ea:7d:73:43:5c:cc:
                    80:70:3f:5d:6c:b6:4a:5f:e8:e3:1e:88:72:7d:27:
                    e3:02:94:1e:09:12:30:9f:09:b9:64:fc:e4:6e:0a:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:6F:6E:0D:4D:88:3E:73:0F:AC:2F:B0:2B:46:A0:65:69:F2:93
            X509v3 Authority Key Identifier:
                keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197019

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:f1:85:9b:73:68:74:98:af:c7:2a:5b:5e:2f:a8:17:6a:
         6f:4e:cb:24:d8:94:28:55:12:89:0b:8e:c7:90:ab:02:39:6f:
         9f:57:40:dc:14:26:19:68:8a:1a:9c:3e:8e:4f:d2:7c:d4:16:
         c5:6f:01:f3:5b:e8:2a:c9:fc:9c:41:4f:16:72:b6:18:9e:bd:
         14:74:e2:2e:60:33:50:77:9b:69:b7:b0:30:6b:81:19:7b:03:
         aa:b1:3a:02:2a:e3:bc:cb:f1:45:59:fe:ad:34:5f:01:78:de:
         bd:bc:e5:6b:96:61:fd:54:60:9f:fe:ed:48:27:e1:ff:fc:62:
         0b:4c:a7:0d:52:d2:a7:20:95:66:f8:fe:fb:32:22:22:9a:76:
         70:85:d1:1f:33:63:67:af:54:01:c3:1e:28:65:e7:3f:60:4b:
         05:01:2f:96:fd:5e:7c:b6:6c:9b:10:8c:c7:21:37:c1:35:65:
         e3:5f:4c:95:68:c8:39:cf:59:16:97:58:f4:b1:19:f7:7f:8e:
         4e:d4:c4:a6:66:74:6f:e4:ed:5e:49:58:8f:40:c4:b2:23:95:
         58:2b:0c:80:da:9d:93:84:54:60:26:12:54:65:c9:52:d6:47:
         3c:8a:4a:4a:a1:ed:76:af:8b:f2:01:3a:33:72:b6:0e:50:82:
         e3:d7:57:db
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0aYcrw9e8mihIvthAPf7LdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4
MjgwMjEwHhcNMjYwMzIzMTEwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWZkNmY2ZTBkNGQ4ODNlNzMwZmFjMmZiMDJiNDZhMDY1NjlmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g/pE1tKdARNfmsl+EtgaoxxgB4b
ntk9m+GVniwbSuQYmo2MF88YfX4F466k4OtfyxuBvChBykD8PayL+0cj1nHQ9FCY
GJAerXrAKtFMdb6woj37CA/KLV+DECLZwUh14Bia7P8qxLxIeNWCWXVBNcNNE2Xz
su7oKm+9k3MRe/ATjQfC/nAAOdA1N9JE0cYdwgJNf6RryZ5rbBMY5HaeOqYCNQpu
bsV0LaKZhaDqz1Oraxl60/27ggFiwt1arRWyHhhTej710vGCwPqQD0yA2I9nLJft
d2YicLzqfXNDXMyAcD9dbLZKX+jjHohyfSfjApQeCRIwnwm5ZPzkbgr2NQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFn9b24NTYg+cw+sL7ArRqBlafKTMB8GA1UdIwQY
MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt
MGFjN2I3ZWRlNDJiLzEvV2YxdmJnMU5pRDV6RDZ3dnNDdEdvR1ZwOHBNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi
LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMBmzANBgkqhkiG
9w0BAQsFAAOCAQEAfWnxhZtzaHSYr8cqW14vqBdqb07LJNiUKFUSiQuOx5CrAjlv
n1dA3BQmGWiKGpw+jk/SfNQWxW8B81voKsn8nEFPFnK2GJ69FHTiLmAzUHebabew
MGuBGXsDqrE6AirjvMvxRVn+rTRfAXjevbzla5Zh/VRgn/7tSCfh//xiC0ynDVLS
pyCVZvj++zIiIpp2cIXRHzNjZ69UAcMeKGXnP2BLBQEvlv1efLZsmxCMxyE3wTVl
419MlWjIOc9ZFpdY9LEZ93+OTtTEpmZ0b+TtXklYj0DEsiOVWCsMgNqdk4RUYCYS
VGXJUtZHPIpKSqHtdq+L8gE6M3K2DlCC49dX2w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:11:17 2026 by rpki-client