Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa
File:                     KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (raw, json)
Hash identifier:          8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=
Subject key identifier:   28:CF:A2:B1:EB:5F:15:0E:3C:8D:3E:54:94:A6:36:32:6E:C0:C7:46
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019C3D5037733FAB855685D49DE342BA6169
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa
Signing time:             Sun 08 Feb 2026 12:53:13 +0000
ASPA not before:          Sun 08 Feb 2026 12:53:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50419
Providers:                AS: 47227
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3d:50:37:73:3f:ab:85:56:85:d4:9d:e3:42:ba:61:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Feb  8 12:53:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28cfa2b1eb5f150e3c8d3e5494a636326ec0c746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:09:fd:f2:40:27:e0:41:a3:25:99:d0:0c:
                    e7:dd:6f:e9:20:e9:a6:2d:b1:86:d1:9a:d5:97:31:
                    47:7c:54:27:1e:b8:11:6e:ca:a7:02:9a:6c:0b:87:
                    cf:d2:5f:35:01:59:72:0d:64:d4:73:59:7c:46:53:
                    b9:3c:82:08:c0:15:76:90:5e:72:bf:d9:e3:5b:93:
                    e2:2b:fd:ce:86:5b:f9:99:4c:18:98:b7:58:68:d9:
                    a6:f3:1d:ff:86:8c:2b:3b:31:09:33:56:4f:78:6a:
                    ec:cd:4a:75:40:0c:d2:9f:63:fd:43:74:b0:a6:d8:
                    85:f5:f7:b1:b6:d9:42:f8:b8:2c:da:5a:23:ac:4c:
                    3d:45:f3:3c:21:19:17:d3:49:63:62:1d:b7:a9:2e:
                    38:79:d7:58:44:77:fe:22:33:39:43:73:36:f1:df:
                    7f:86:94:56:ef:c0:a4:f2:2e:06:34:fe:9f:73:8a:
                    46:22:2d:57:15:3a:e6:ea:a3:80:61:8d:e0:c0:ef:
                    6d:f3:53:a1:9c:c6:e7:20:31:6e:9f:0b:b5:2d:9c:
                    b5:b8:a8:fc:8a:f3:88:71:0c:c6:96:14:54:cb:1f:
                    35:a0:37:ac:62:82:5d:d3:ff:4c:75:61:d6:d2:99:
                    f0:b3:68:5f:8f:da:a6:58:04:76:e8:6f:c9:cd:fc:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:A2:B1:EB:5F:15:0E:3C:8D:3E:54:94:A6:36:32:6E:C0:C7:46
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50419

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:40:43:33:b6:1c:8d:8c:6e:3e:47:d7:ca:3b:65:d9:3a:
         3e:d4:27:87:08:30:22:38:ec:28:c0:82:57:49:41:6a:3b:ee:
         e0:73:9a:08:96:a8:a1:a5:7e:a5:99:df:90:47:9c:65:b3:61:
         e6:13:30:e3:fe:0d:3c:f3:d9:6c:e1:23:79:8d:40:8d:66:86:
         75:f8:fc:53:c0:91:84:c7:c9:de:09:e8:0d:a8:80:ff:c9:a9:
         25:15:35:d3:0e:b6:07:7b:b0:c4:c4:07:11:87:9a:9d:91:3c:
         fa:d7:60:56:a2:1c:b2:0b:d8:44:3c:73:d1:66:ea:4a:f2:9f:
         f9:ba:4c:4b:24:ce:0b:fc:3b:72:65:46:9c:e1:5f:f7:52:81:
         97:9a:5f:87:e1:09:ea:ba:52:84:5b:19:b0:31:e6:1a:8a:ef:
         24:06:bc:43:b8:55:fe:2d:88:f1:e9:c9:ff:60:3b:c2:5d:b6:
         d1:01:70:95:15:94:a6:b3:73:0f:6c:06:13:bb:44:e9:6a:0d:
         54:39:e7:b5:35:ca:21:18:6d:06:ac:65:81:dd:9f:cb:3e:28:
         6e:1b:95:4c:3b:c5:f5:09:06:73:ea:7b:6f:d6:1e:a2:1a:66:
         15:52:1f:47:6a:7c:2e:75:fd:0c:49:55:e2:d9:03:71:d1:ba:
         8d:0b:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:43 2026 by rpki-client