Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa
File:                     Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (raw, json)
Hash identifier:          K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=
Subject key identifier:   29:FB:FC:A5:2C:EF:3F:AC:86:AA:93:4A:58:1D:2E:F4:C0:13:36:21
Certificate issuer:       /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial:       019D717D6381DCBB8223142AC583443EFC67
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa
Signing time:             Thu 09 Apr 2026 09:05:36 +0000
ASPA not before:          Thu 09 Apr 2026 09:05:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44975
Providers:                AS: 8641
                          AS: 50509
                          AS: 51685
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:71:7d:63:81:dc:bb:82:23:14:2a:c5:83:44:3e:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
        Validity
            Not Before: Apr  9 09:05:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=29fbfca52cef3fac86aa934a581d2ef4c0133621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:79:f9:28:ef:75:5a:87:cc:6c:1a:1e:60:
                    ed:89:cf:f4:9a:56:01:ac:c9:62:c2:88:50:c2:9d:
                    8b:27:22:91:37:11:24:de:6b:da:7d:db:4f:bb:ca:
                    28:7e:28:5d:3d:5b:33:50:bd:0f:c1:1a:ac:9c:a8:
                    dc:f1:bd:72:3a:4e:ae:f1:73:ef:df:ec:20:66:fa:
                    35:56:5c:ac:12:c2:09:80:19:e9:8a:72:e7:f9:c1:
                    0b:8a:96:f8:e5:a5:ae:a7:98:83:81:93:3d:a7:0c:
                    fb:b4:f0:82:9a:92:aa:86:03:fe:53:9d:9d:a4:82:
                    62:86:57:80:1a:af:8b:92:88:cf:34:2f:86:6a:e2:
                    64:e7:40:5f:c6:b5:04:20:50:de:56:31:96:ac:1b:
                    15:fc:5f:04:c2:bd:37:60:61:b7:bb:0e:e6:38:03:
                    b1:37:66:57:eb:10:37:78:da:ef:6d:9f:23:74:40:
                    b9:d2:92:e4:03:04:b8:f4:c1:a9:ec:04:e8:da:0d:
                    e1:a9:0a:86:94:b3:30:2f:6b:3b:f3:d3:72:74:f0:
                    45:4c:d9:81:f9:02:88:26:4b:c5:c5:f7:7a:b4:5e:
                    2a:2e:cd:a9:89:7e:1b:ea:61:ac:6d:b3:e4:d5:95:
                    3f:7c:1d:52:7f:44:56:fe:0e:58:e4:1d:3a:28:a0:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:FC:A5:2C:EF:3F:AC:86:AA:93:4A:58:1D:2E:F4:C0:13:36:21
            X509v3 Authority Key Identifier:
                keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44975

    Signature Algorithm: sha256WithRSAEncryption
         3d:ec:e7:7d:f3:27:ed:9e:a8:19:ad:df:99:2d:8f:51:4e:43:
         dd:0d:03:d9:2e:b9:75:0a:f0:58:20:44:f5:59:d7:83:f4:1b:
         ac:a3:6c:f5:a6:36:d4:b8:52:ff:19:29:84:27:81:6e:8e:f1:
         c4:f6:14:04:f1:42:19:cb:c3:c0:83:af:ad:34:fb:91:46:db:
         12:2e:63:2d:6f:29:f0:bf:f9:ed:8e:16:02:66:61:fb:cf:18:
         f2:85:93:bf:d5:f2:50:8e:c4:63:21:23:57:f5:0e:54:2b:0c:
         39:5c:b9:fb:7c:92:52:0e:7c:d6:e3:a5:3f:6a:92:6f:0b:aa:
         ff:92:39:ca:82:fd:d4:50:86:c3:43:0f:3c:b5:d5:c4:a2:bf:
         32:5d:c9:8f:de:6b:0d:36:4b:de:27:0d:4f:51:33:d9:df:ef:
         4a:0e:35:ae:cd:c9:7f:48:6b:09:f8:7a:be:00:af:23:92:91:
         8c:df:0e:79:33:68:43:00:81:eb:aa:58:2e:05:33:a8:ba:22:
         b7:4c:61:b8:b7:a2:2e:9f:71:8b:22:60:22:74:4f:1f:4d:38:
         44:16:7c:98:8e:a7:71:dd:ef:5a:6c:0e:0a:4a:e9:62:d6:78:
         e7:1d:e0:07:0b:43:a7:32:87:88:91:58:98:b9:93:c7:8e:12:
         ba:48:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:39:33 2026 by rpki-client