Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/IFcPSJLrXOIb360qpvfjslM8AeU.asa
File:                     IFcPSJLrXOIb360qpvfjslM8AeU.asa (raw, json)
Hash identifier:          Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=
Subject key identifier:   20:57:0F:48:92:EB:5C:E2:1B:DF:AD:2A:A6:F7:E3:B2:53:3C:01:E5
Certificate issuer:       /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial:       019D439DF3CFF5B704AE8658762EBF6CB947
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/IFcPSJLrXOIb360qpvfjslM8AeU.asa
Signing time:             Tue 31 Mar 2026 11:18:38 +0000
ASPA not before:          Tue 31 Mar 2026 11:18:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50573
Providers:                AS: 15954
                          AS: 56958
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:9d:f3:cf:f5:b7:04:ae:86:58:76:2e:bf:6c:b9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
        Validity
            Not Before: Mar 31 11:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20570f4892eb5ce21bdfad2aa6f7e3b2533c01e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:82:8f:a2:88:56:6f:eb:dc:37:d3:47:c6:
                    8c:c2:ce:e2:52:74:02:54:32:81:2c:58:9b:ee:8b:
                    8b:b6:9e:15:49:af:42:ba:f1:c6:8b:46:88:1a:9b:
                    f4:c4:7d:11:23:93:b5:5a:fd:b1:5d:14:2e:d7:9c:
                    f5:f3:57:76:57:4d:08:49:83:82:ce:2c:66:b2:54:
                    ee:be:89:fa:7f:b0:a9:b4:fe:79:8f:af:02:ab:76:
                    a3:e6:d7:de:19:f7:fb:cd:8f:7b:b7:6f:02:ea:46:
                    c2:0b:0b:a2:6a:0d:2d:5a:58:63:84:ed:82:4e:ba:
                    7b:a4:80:db:79:75:df:cc:2d:db:f8:b0:73:70:54:
                    4f:bc:83:32:b9:a7:db:09:ec:07:9b:14:39:08:04:
                    16:c1:14:8c:2b:8d:06:fe:53:ec:ac:f3:73:19:77:
                    a5:50:25:8a:42:6c:44:cd:14:f2:3e:ba:2b:ae:a1:
                    14:9f:58:7c:bb:14:05:aa:a7:f6:7a:ce:80:6b:d0:
                    dd:e7:fb:e6:fc:db:18:a8:ba:5c:d2:49:5b:ac:0b:
                    15:2d:61:63:df:f8:ea:40:59:bf:8a:e6:9a:66:99:
                    8e:70:06:e6:17:d1:1e:fc:88:83:5a:40:d2:f7:5e:
                    cb:30:2d:a3:69:be:34:af:00:bc:6a:f5:97:16:96:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:0F:48:92:EB:5C:E2:1B:DF:AD:2A:A6:F7:E3:B2:53:3C:01:E5
            X509v3 Authority Key Identifier:
                keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/IFcPSJLrXOIb360qpvfjslM8AeU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50573

    Signature Algorithm: sha256WithRSAEncryption
         0c:ab:54:a5:67:ee:a7:4c:db:fa:7d:01:f3:97:4d:ce:c0:a0:
         e9:eb:25:e3:91:94:7d:50:aa:42:41:32:29:92:40:d1:35:73:
         1c:09:93:75:dc:d5:69:2c:2f:75:de:69:50:b9:d6:78:7e:91:
         42:e9:03:b5:cc:e7:8f:51:87:aa:2e:26:a0:20:6e:c4:85:1f:
         ae:56:c2:c0:09:94:d0:91:2e:f5:c1:5d:50:e3:32:72:88:12:
         dc:7a:5a:c3:29:28:8b:c6:34:ac:a6:59:de:87:44:9f:46:cf:
         6f:4c:fa:e1:b8:32:f3:a5:f4:a1:7f:d5:0f:d6:89:9b:6a:47:
         2b:b2:2f:79:09:68:4a:bd:50:03:55:83:28:3a:11:61:05:72:
         0c:9b:d8:e6:64:8e:b5:86:85:30:7c:12:b7:29:f7:37:6e:b6:
         3f:13:be:8f:9c:82:8a:10:27:af:86:81:b1:6e:6d:aa:79:2c:
         ca:31:53:9a:c0:ee:b2:29:6b:26:32:89:9a:9a:16:ee:63:8e:
         06:6e:df:fe:e3:1c:2b:e4:1b:b9:6c:8b:76:4f:8d:2c:5e:86:
         15:f1:94:ca:fc:4d:7c:2e:c2:fb:e5:88:b5:40:e4:8f:9c:86:
         1f:ac:6f:e1:3f:3e:a9:27:f0:39:86:3f:6c:58:8a:6e:af:11:
         6f:96:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:19:40 2026 by rpki-client