Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SfEPdB4zSzundHQL8u1ry-xE4Vc.asa
File:                     SfEPdB4zSzundHQL8u1ry-xE4Vc.asa (raw, json)
Hash identifier:          YBQfRgXIESZ5hCHeLjGYkAamoqJ89Tdiiao0w4ZWcjY=
Subject key identifier:   49:F1:0F:74:1E:33:4B:3B:A7:74:74:0B:F2:ED:6B:CB:EC:44:E1:57
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019D73CABE56134AB9961381C422F8FF9F78
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SfEPdB4zSzundHQL8u1ry-xE4Vc.asa
Signing time:             Thu 09 Apr 2026 19:49:20 +0000
ASPA not before:          Thu 09 Apr 2026 19:49:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204506
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:73:ca:be:56:13:4a:b9:96:13:81:c4:22:f8:ff:9f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Apr  9 19:49:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=49f10f741e334b3ba774740bf2ed6bcbec44e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:f4:c5:8f:3e:ab:ab:71:9e:7d:ff:f8:3d:
                    de:14:fe:10:74:7b:ea:9c:9a:04:6b:91:1c:b7:f0:
                    6d:1f:ff:ab:7a:32:88:ce:6f:bd:ba:d6:b6:3b:a8:
                    71:aa:e2:20:63:77:62:1c:04:bf:47:be:cd:b8:03:
                    c9:f0:b8:42:84:eb:38:c6:bf:64:c7:47:3a:2e:19:
                    60:69:77:ac:9f:37:b8:0b:a5:f4:a8:76:30:f4:a8:
                    49:fb:47:a1:da:30:ae:b2:04:a8:79:2f:c1:12:23:
                    2b:e7:22:94:94:26:18:1e:9a:b7:74:5c:c4:2a:67:
                    e8:28:37:b6:63:cb:37:42:d1:24:6a:c6:88:cc:8d:
                    47:e1:02:eb:82:41:81:61:d7:bd:38:4e:7a:d4:0f:
                    74:74:56:3f:1c:2d:19:f6:b6:25:57:a6:2c:1a:b7:
                    07:b4:42:e5:40:2b:4f:67:83:15:79:39:f2:4f:94:
                    e4:ed:b2:15:6c:d4:95:75:d3:7f:54:53:d4:33:1f:
                    58:d9:65:55:1a:bd:c5:b8:8c:e2:d2:e5:36:c5:34:
                    21:5c:08:2c:07:48:07:08:45:3b:d1:7a:9c:07:b1:
                    5c:08:17:07:f0:ec:07:45:4d:b9:46:42:cf:15:6f:
                    3e:bf:c0:10:c7:9a:ba:30:49:de:b7:45:9d:6d:b6:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:0F:74:1E:33:4B:3B:A7:74:74:0B:F2:ED:6B:CB:EC:44:E1:57
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/SfEPdB4zSzundHQL8u1ry-xE4Vc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204506

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:56:8f:25:3b:3f:59:43:4c:9a:5e:8a:5d:76:92:4f:d6:
         d0:cb:b0:14:c4:d8:32:a7:22:1b:17:c3:db:3c:a9:27:a0:ce:
         63:91:07:49:df:d1:04:9f:6b:6a:b2:56:5e:2f:51:6a:61:a0:
         de:6c:dd:4e:19:1f:41:9f:d3:a9:3b:a6:69:b4:ce:3a:df:e8:
         f0:38:55:00:26:7b:70:36:33:f1:8e:ad:68:d9:02:46:ed:04:
         eb:90:90:16:f9:16:9c:77:98:7c:a0:52:79:23:cf:68:92:f5:
         7b:47:50:ba:06:98:d4:6f:ed:b2:f2:b2:f2:8e:f0:2f:16:a6:
         e8:40:bd:b7:13:b5:41:60:c5:b4:c2:6f:77:c2:b2:96:50:5a:
         17:b0:ea:20:41:d7:6d:17:bd:dc:85:be:87:00:72:a7:c1:e6:
         3d:d9:d6:26:78:46:5d:79:3d:06:c5:e1:05:3b:51:62:7a:00:
         93:43:f0:8d:d3:d3:94:d3:e4:bc:4f:74:7f:57:e4:28:09:d1:
         8f:c8:2e:c3:d9:73:28:f8:76:5f:21:a5:99:00:c2:17:de:8c:
         8b:6e:0a:c7:0f:ac:19:14:fa:5e:0f:93:b0:b6:de:b3:5a:3f:
         c6:56:68:06:45:9c:3e:37:d3:1c:9a:20:8b:b9:c5:f3:ac:22:
         da:87:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:29 2026 by rpki-client