Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa
File:                     HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa (raw, json)
Hash identifier:          81awX6nGzaP5BhwCqw9DUWQmt4pEmO2yQ7dMfVdLs10=
Subject key identifier:   1D:08:46:26:62:38:4F:F0:D9:FF:14:20:FC:95:93:C7:F6:44:3B:06
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019F1901661CE44769501FE24F59FF1E532E
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa
Signing time:             Tue 30 Jun 2026 14:49:09 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211366
Providers:                AS: 9049
                          AS: 62142
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:66:1c:e4:47:69:50:1f:e2:4f:59:ff:1e:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Jun 30 14:49:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d08462662384ff0d9ff1420fc9593c7f6443b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:6c:76:82:43:88:b8:19:ed:71:f7:0e:7b:
                    e6:3f:61:9d:69:d8:aa:24:17:72:3e:64:15:cc:d7:
                    6f:40:08:81:96:4d:94:31:98:3f:bf:70:0d:85:2d:
                    c8:af:03:8e:68:9e:ad:6e:32:e6:c1:1a:26:93:35:
                    66:ea:30:60:52:16:7b:49:b6:88:b1:86:cb:1b:6c:
                    ed:23:72:84:3b:3a:a7:ef:1d:b6:aa:b6:77:7b:96:
                    66:5f:0f:79:23:8f:9e:a3:5e:43:f1:e9:53:ed:de:
                    bf:1f:51:10:6d:b0:c1:c0:d1:16:6f:78:9e:3f:91:
                    75:39:8a:10:df:aa:11:69:82:be:56:3b:e6:bc:e7:
                    a1:b0:54:c3:0e:0e:70:f0:36:c3:9e:0e:89:60:39:
                    12:f2:dd:4a:e3:38:d6:e2:c9:9b:3c:ef:e9:d4:b6:
                    da:b9:71:5c:fd:7e:da:60:28:69:af:cb:9f:23:e5:
                    83:0e:95:78:78:e2:54:ff:18:86:1c:2a:d9:c9:ff:
                    3d:db:2f:81:8a:67:85:6c:52:7d:06:df:f4:9b:f9:
                    a7:ca:16:43:76:fa:5d:b1:ce:53:7d:51:51:07:46:
                    1b:eb:a3:de:c0:fb:d9:a4:02:9a:04:75:9d:85:44:
                    de:69:20:aa:c3:53:8c:1d:86:d3:2b:17:f7:7e:37:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:46:26:62:38:4F:F0:D9:FF:14:20:FC:95:93:C7:F6:44:3B:06
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/HQhGJmI4T_DZ_xQg_JWTx_ZEOwY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211366

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:44:c8:69:99:7c:3e:9e:64:6a:61:08:b9:5a:a4:da:4f:
         73:2a:f7:10:4a:a2:5f:cb:a0:a6:c3:47:85:5d:ef:a0:14:d7:
         1c:51:af:d6:89:24:cd:da:d9:8a:a4:87:9b:55:2f:33:e1:a8:
         6a:72:3f:c3:9a:3c:70:d0:d7:b7:c2:e1:0e:7f:91:48:1e:f7:
         16:96:7a:f0:3a:d4:b3:c7:6a:49:87:8f:c3:56:0d:cc:df:ae:
         31:6f:2e:1c:bc:cf:47:b6:1a:40:de:da:16:6d:bc:a2:d0:33:
         a3:54:6f:c9:01:38:bd:2f:ab:03:e0:9d:fe:e3:69:a1:e9:5c:
         3d:bb:3b:17:2f:55:52:04:3b:6c:7d:97:36:8c:cf:14:13:55:
         0e:6c:7f:ca:58:96:86:df:a2:76:a7:b0:a5:e9:52:08:f4:a1:
         2f:26:75:82:26:b1:4d:ad:c0:5e:dc:fe:68:1e:30:82:0d:2b:
         3d:a9:a9:12:69:8f:9e:fb:34:4c:48:17:53:4f:c0:c1:cd:c8:
         82:e7:60:3a:d4:57:94:80:9b:c8:9a:04:7f:48:98:56:71:fa:
         46:1f:f8:06:a2:1f:9f:14:fb:aa:5d:db:b2:e5:d1:3e:b3:6d:
         c0:87:31:72:03:fe:dd:b2:4c:bc:72:69:9c:70:99:4d:43:c4:
         cf:ad:fd:89
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAWYc5EdpUB/iT1n/HlMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODJmMzIzMzU5MzgyZDgwMWVkMGI5M2VjMWJmYTAzMGRl
NjM2MjIwHhcNMjYwNjMwMTQ0OTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDA4NDYyNjYyMzg0ZmYwZDlmZjE0MjBmYzk1OTNjN2Y2NDQzYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+9sdoJDiLgZ7XH3DnvmP2Gdadiq
JBdyPmQVzNdvQAiBlk2UMZg/v3ANhS3IrwOOaJ6tbjLmwRomkzVm6jBgUhZ7SbaI
sYbLG2ztI3KEOzqn7x22qrZ3e5ZmXw95I4+eo15D8elT7d6/H1EQbbDBwNEWb3ie
P5F1OYoQ36oRaYK+VjvmvOehsFTDDg5w8DbDng6JYDkS8t1K4zjW4smbPO/p1Lba
uXFc/X7aYChpr8ufI+WDDpV4eOJU/xiGHCrZyf892y+BimeFbFJ9Bt/0m/mnyhZD
dvpdsc5TfVFRB0Yb66PewPvZpAKaBHWdhUTeaSCqw1OMHYbTKxf3fjcZIQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFB0IRiZiOE/w2f8UIPyVk8f2RDsGMB8GA1UdIwQY
MBaAFO2C8yM1k4LYAe0Lk+wb+gMN5jYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUt
MTY3ZGQxNWRjYjU5LzEvSFFoR0ptSTRUX0RaX3hRZ19KV1R4X1pFT3dZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUtMTY3ZGQxNWRjYjU5
LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5pjANBgkqhkiG
9w0BAQsFAAOCAQEAo9hEyGmZfD6eZGphCLlapNpPcyr3EEqiX8ugpsNHhV3voBTX
HFGv1okkzdrZiqSHm1UvM+GoanI/w5o8cNDXt8LhDn+RSB73FpZ68DrUs8dqSYeP
w1YNzN+uMW8uHLzPR7YaQN7aFm28otAzo1RvyQE4vS+rA+Cd/uNpoelcPbs7Fy9V
UgQ7bH2XNozPFBNVDmx/yliWht+idqewpelSCPShLyZ1giaxTa3AXtz+aB4wgg0r
PampEmmPnvs0TEgXU0/Awc3IgudgOtRXlICbyJoEf0iYVnH6Rh/4BqIfnxT7ql3b
suXRPrNtwIcxcgP+3bJMvHJpnHCZTUPEz639iQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:52 2026 by rpki-client