Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/UtbWjP8TosULXxgOwSpGBsXAj1E.asa
File:                     UtbWjP8TosULXxgOwSpGBsXAj1E.asa (raw, json)
Hash identifier:          e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=
Subject key identifier:   52:D6:D6:8C:FF:13:A2:C5:0B:5F:18:0E:C1:2A:46:06:C5:C0:8F:51
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       019C9082569E0490436B296B612F5F52EC28
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/UtbWjP8TosULXxgOwSpGBsXAj1E.asa
Signing time:             Tue 24 Feb 2026 16:36:26 +0000
ASPA not before:          Tue 24 Feb 2026 16:36:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42335
Providers:                AS: 200303
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:90:82:56:9e:04:90:43:6b:29:6b:61:2f:5f:52:ec:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Feb 24 16:36:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52d6d68cff13a2c50b5f180ec12a4606c5c08f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:af:b1:5c:11:62:b5:b7:8c:09:7f:3d:28:
                    ad:df:6b:da:2e:b6:04:e0:c0:ab:07:0d:f7:de:15:
                    d9:5f:e6:9f:63:85:d0:f0:3a:27:e2:48:eb:f1:88:
                    0c:65:24:f6:d3:6d:8e:7d:93:c6:d6:03:b1:5f:48:
                    af:83:b4:32:0f:f9:6b:92:ae:c9:a9:77:4e:12:5c:
                    45:34:2b:6d:00:09:c5:5d:55:bb:7b:2b:10:89:df:
                    b2:02:8f:8f:c2:8a:42:66:aa:d0:88:10:8f:b9:a8:
                    cf:f7:b1:40:d1:c5:96:59:4d:11:44:6e:fc:39:cc:
                    11:0e:d0:5e:db:ca:99:91:dc:9a:09:40:1d:f1:9a:
                    fa:8f:63:00:76:8a:22:d0:dd:bc:1c:32:11:1f:5f:
                    e9:d4:98:4a:04:6e:85:86:dd:cc:43:d1:a0:85:bc:
                    c0:d0:a5:a9:2e:81:61:4c:0f:0b:dc:6d:ba:7a:c1:
                    ce:63:51:6d:e6:64:b5:f3:cc:a6:b5:40:63:b9:a5:
                    b1:e6:c9:36:07:fa:1b:7f:ce:a9:4e:31:55:fd:15:
                    89:b6:78:97:1c:aa:69:7d:8e:77:b5:10:3e:89:df:
                    3f:5e:32:8f:66:cf:2f:a2:b8:f9:aa:b0:8d:1e:76:
                    66:2b:04:ec:67:c4:82:b8:01:b8:6f:a7:3c:3b:88:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:D6:8C:FF:13:A2:C5:0B:5F:18:0E:C1:2A:46:06:C5:C0:8F:51
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/UtbWjP8TosULXxgOwSpGBsXAj1E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42335

    Signature Algorithm: sha256WithRSAEncryption
         c5:48:dd:a5:98:2a:fd:f4:f5:82:52:89:ae:dd:bd:eb:bb:7e:
         84:e3:8c:e5:f2:0e:fb:cf:cc:76:ca:74:b5:2a:09:16:4f:c1:
         a5:5f:22:d8:bf:df:83:b8:61:a2:9e:dd:e8:55:41:49:32:15:
         56:b1:cb:24:0c:b3:e3:34:3c:71:d9:2f:25:d4:ac:aa:92:e6:
         1c:c4:09:e0:1e:5e:a1:ed:2d:92:33:67:c9:b6:db:37:c6:59:
         8d:90:9b:34:6e:bc:96:7b:dd:32:b9:82:57:ed:84:18:23:77:
         e2:1f:0a:ea:61:dc:23:14:a8:b0:15:df:77:e4:8c:75:fa:ca:
         27:56:62:5f:57:44:41:3d:3b:eb:27:e8:68:5c:9f:5f:e6:88:
         a5:17:2a:56:9c:35:cc:1b:f3:2c:42:02:84:be:77:e7:c3:39:
         ad:db:a3:3b:d0:81:a1:ba:61:35:4c:b7:35:cb:ae:f1:9a:b7:
         3f:1f:4a:4f:25:db:61:0c:e7:77:88:56:89:ea:d2:25:09:00:
         49:67:3e:9d:6a:67:ac:a8:b7:3b:90:ab:83:f1:96:2c:a0:79:
         ce:0b:0b:b5:94:a6:60:89:f1:ef:21:97:ac:8d:d7:7a:e8:5c:
         c8:c6:5b:9b:c1:22:18:ab:70:17:ee:2b:6d:19:55:ac:8a:a7:
         1c:a9:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:37 2026 by rpki-client