Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wQvwuyTtVhloyL12ClFe1Tmx_YM.asa
File:                     wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (raw, json)
Hash identifier:          7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=
Subject key identifier:   C1:0B:F0:BB:24:ED:56:19:68:C8:BD:76:0A:51:5E:D5:39:B1:FD:83
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       019D3452D78CCDD9837A4511AD7B120CB5C5
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wQvwuyTtVhloyL12ClFe1Tmx_YM.asa
Signing time:             Sat 28 Mar 2026 12:02:17 +0000
ASPA not before:          Sat 28 Mar 2026 12:02:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44208
Providers:                AS: 34872
                          AS: 42337
                          AS: 49100
                          AS: 58224
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:52:d7:8c:cd:d9:83:7a:45:11:ad:7b:12:0c:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Mar 28 12:02:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c10bf0bb24ed561968c8bd760a515ed539b1fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:32:6c:7d:b3:1f:ae:95:b5:2e:5f:c4:55:
                    2a:75:f4:91:66:70:71:12:da:aa:9b:a1:51:ab:7a:
                    ea:c9:ce:46:c9:77:84:07:d8:8e:80:e1:54:04:04:
                    f9:c0:d9:8b:32:0b:9c:ca:25:fa:7b:91:39:af:4b:
                    b5:b5:9a:75:a4:c1:00:5b:c1:72:d9:7b:55:9f:66:
                    16:f4:ea:10:b2:b8:76:66:5c:65:48:84:87:f5:89:
                    fd:c3:62:91:c6:b6:85:f5:dd:48:bc:9b:c7:5c:e1:
                    f6:ea:03:34:f4:26:0b:9d:1d:da:42:e5:02:06:4e:
                    b4:6c:75:ff:41:b6:53:ae:b2:1c:c4:0d:05:fe:2f:
                    fa:05:88:2c:1d:aa:d4:0b:46:03:20:c7:37:be:31:
                    77:25:b4:92:9f:2b:fa:04:67:9c:4f:86:20:0a:82:
                    86:af:bf:c1:56:9a:1b:92:d0:03:b0:a5:6c:4d:47:
                    1a:0a:70:74:27:28:e2:ba:57:70:fb:85:1f:36:72:
                    b9:db:3f:f6:51:8f:a0:f6:ab:d2:56:dc:e9:9b:fb:
                    7a:0f:e1:26:43:e4:59:f1:91:89:1f:69:90:6b:88:
                    6b:72:96:5f:e4:4a:77:ce:ee:27:be:fa:d1:ae:6a:
                    bc:c0:96:28:40:bc:12:91:c3:eb:03:33:83:f6:a3:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0B:F0:BB:24:ED:56:19:68:C8:BD:76:0A:51:5E:D5:39:B1:FD:83
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wQvwuyTtVhloyL12ClFe1Tmx_YM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44208

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:ba:9a:5f:f4:a3:31:b2:ee:a7:71:08:12:eb:26:83:be:
         a3:68:da:55:4a:06:cb:04:f4:4e:8e:7f:7f:09:78:01:c5:c4:
         7c:6e:08:f3:2a:09:34:86:af:16:b9:e9:5a:9e:df:04:b2:91:
         b9:fa:20:3e:03:27:53:2a:ad:7c:0b:8a:5e:50:04:5c:0a:49:
         7b:b7:25:29:74:37:b9:10:3c:a3:f7:6a:db:b1:80:b7:b3:1e:
         43:69:d6:f3:79:3b:59:3a:b5:c2:2e:4d:69:64:db:9c:65:7e:
         6d:4f:1c:e0:9a:76:4b:5c:40:f7:a7:a8:75:3f:d3:d2:b7:64:
         19:6c:6d:57:a2:15:cd:9a:d0:51:b2:67:11:18:70:a7:74:68:
         0c:61:c7:67:79:41:21:35:e5:61:bc:d9:7a:5b:ff:f8:ee:43:
         23:7f:b9:39:2f:8b:01:58:10:3c:ba:b7:64:86:cd:25:e0:1b:
         0b:56:de:77:9c:a7:ba:ae:a0:b0:b2:89:e1:1e:ec:ab:e3:20:
         d8:09:3b:59:06:76:84:9b:cc:26:ae:51:90:89:27:a4:11:a7:
         e7:e3:a8:2a:4a:3c:2c:cd:7d:39:81:56:87:47:bb:88:54:e9:
         f1:9a:40:43:61:d6:4f:b2:68:01:31:d7:14:66:39:93:ab:9c:
         5f:e9:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:19 2026 by rpki-client