Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/o5Bt-A5F4sUEfdarAj82so2-9rk.asa
File:                     o5Bt-A5F4sUEfdarAj82so2-9rk.asa (raw, json)
Hash identifier:          9puN29QaYr3CoTjTv9qBsno8hmdQJUVSkIHnreuyEvo=
Subject key identifier:   A3:90:6D:F8:0E:45:E2:C5:04:7D:D6:AB:02:3F:36:B2:8D:BE:F6:B9
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       019D7724979D4DA552566FFD2FB2D40D2813
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/o5Bt-A5F4sUEfdarAj82so2-9rk.asa
Signing time:             Fri 10 Apr 2026 11:26:19 +0000
ASPA not before:          Fri 10 Apr 2026 11:26:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49010
Providers:                AS: 3292
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:77:24:97:9d:4d:a5:52:56:6f:fd:2f:b2:d4:0d:28:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Apr 10 11:26:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3906df80e45e2c5047dd6ab023f36b28dbef6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:1c:18:8e:09:ed:56:73:c3:7d:90:0b:ce:
                    64:fb:74:3b:e6:1a:4e:d9:1c:cd:b2:b9:9d:ae:38:
                    bf:ba:4d:fe:42:69:81:f4:67:1c:57:f4:45:86:58:
                    31:89:c7:ce:e8:65:99:32:95:8f:b7:84:23:c2:ac:
                    6c:61:4d:aa:a4:3e:96:7c:fd:b5:5a:bb:6e:b8:3f:
                    db:e5:8a:74:92:ca:04:16:42:0c:e3:d7:cd:c0:89:
                    4e:5b:29:3e:b1:32:53:14:99:42:63:8d:d2:ac:c0:
                    7a:b7:d8:4b:83:f7:9f:26:0e:69:4e:e9:9f:99:a0:
                    42:00:46:91:ad:5c:7d:98:f4:45:a7:3e:2d:0f:09:
                    db:02:21:a1:54:b8:46:c5:71:9e:cf:2e:dc:26:97:
                    96:dc:4d:0a:f2:0a:ae:b0:05:97:fa:19:d9:86:41:
                    ee:db:9b:6c:75:fb:37:32:c8:9d:39:ae:ef:5b:f1:
                    27:67:cf:61:f5:c4:ac:09:31:1f:cc:59:56:ce:54:
                    af:8c:04:7d:8e:c9:22:ad:c4:0e:d8:8b:ef:4a:bb:
                    15:43:65:d7:3b:c8:1e:67:ff:02:11:e0:ed:d3:27:
                    4a:7c:02:69:48:e4:1d:67:93:5b:8a:27:39:20:a4:
                    3e:6d:d3:ca:68:68:be:6f:e0:da:e8:d7:f1:5f:18:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:6D:F8:0E:45:E2:C5:04:7D:D6:AB:02:3F:36:B2:8D:BE:F6:B9
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/o5Bt-A5F4sUEfdarAj82so2-9rk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49010

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:86:e4:72:12:f5:06:40:2b:fc:ea:49:17:af:de:59:68:
         f2:23:be:53:df:17:cc:cb:42:f7:50:f2:f2:af:81:e3:3f:6b:
         85:00:24:f7:1d:b6:11:fb:9f:1f:ac:ed:9c:e9:12:46:7c:68:
         68:5b:46:f4:a3:99:56:82:ea:f9:e3:61:c3:7f:fd:20:7e:55:
         cb:4c:b5:7f:a5:5c:91:a1:e0:27:e3:33:9d:90:38:53:5b:14:
         69:c6:c7:c0:80:17:61:80:77:37:ba:2b:4a:06:1b:0a:11:cb:
         de:1a:08:25:a4:79:a6:44:6f:6f:96:14:51:b4:bf:a5:ee:d8:
         d4:48:eb:81:d5:0f:97:a8:d2:07:2a:d9:04:b4:29:70:03:12:
         ff:b3:5d:7f:bb:ea:cb:89:c3:ae:53:7c:c6:28:12:5d:8e:5d:
         a4:e2:f8:e4:17:59:3b:67:95:aa:76:ca:52:9a:9e:3a:08:81:
         8d:11:de:e2:a2:0e:81:95:87:d0:f2:d9:ea:29:e8:fe:f8:d2:
         b6:4a:87:d2:73:52:92:72:48:1f:4d:9b:4d:5d:57:64:5f:c5:
         e1:bc:c2:73:d0:9f:6e:b4:25:f7:05:bd:5f:9f:95:cd:62:b0:
         f9:40:c8:f0:74:69:d0:d6:0b:70:f6:fb:85:1c:a6:df:8f:58:
         60:4e:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:51 2026 by rpki-client