Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/4Y83xopR719SxF-9mkYVsuZPdvU.asa
File:                     4Y83xopR719SxF-9mkYVsuZPdvU.asa (raw, json)
Hash identifier:          /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=
Subject key identifier:   E1:8F:37:C6:8A:51:EF:5F:52:C4:5F:BD:9A:46:15:B2:E6:4F:76:F5
Certificate issuer:       /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial:       019D760F7EF9A8A6EAD80DF1AB1EBB29B492
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/4Y83xopR719SxF-9mkYVsuZPdvU.asa
Signing time:             Fri 10 Apr 2026 06:23:40 +0000
ASPA not before:          Fri 10 Apr 2026 06:23:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            45024
Providers:                AS: 3292
                          AS: 49974
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:0f:7e:f9:a8:a6:ea:d8:0d:f1:ab:1e:bb:29:b4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
        Validity
            Not Before: Apr 10 06:23:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e18f37c68a51ef5f52c45fbd9a4615b2e64f76f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:79:a7:a9:67:5f:d8:a5:95:48:33:94:ab:
                    c7:57:e3:bd:80:c4:b5:58:1e:a0:87:77:9c:cf:90:
                    89:53:9b:23:fa:79:e4:0d:45:d0:69:98:1b:78:e6:
                    98:3c:53:b8:dd:49:63:d6:c6:ec:1a:c7:18:be:77:
                    95:45:fc:df:8c:7d:77:de:f6:dd:a1:d3:a3:db:bc:
                    70:32:f4:96:58:74:bc:6c:9a:07:d3:17:e5:88:88:
                    ab:30:20:e1:ec:97:41:2b:6b:57:89:1a:a4:2d:ff:
                    20:fb:8e:4b:59:da:86:52:b9:f1:6c:a0:a3:54:37:
                    c4:88:e0:71:36:0e:25:b1:38:ba:4e:33:d1:2d:08:
                    1f:06:25:7f:23:83:d6:de:e0:95:c7:40:09:88:39:
                    88:ab:6c:3f:1d:50:75:a9:22:da:3a:76:81:60:10:
                    65:b7:40:d9:55:f9:90:73:3f:14:79:32:a9:ee:47:
                    39:9c:2f:86:c3:80:73:09:03:b6:e9:bc:61:0a:95:
                    12:80:cd:3a:a2:d5:8d:1b:42:c3:b7:73:32:8c:72:
                    69:1f:3e:37:ad:40:ce:ec:28:30:a9:ac:44:c2:10:
                    a9:8a:53:e5:83:47:a6:3a:97:38:d4:15:21:42:7a:
                    9f:65:18:b2:59:58:a2:dd:12:1c:13:d7:a4:d1:39:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:37:C6:8A:51:EF:5F:52:C4:5F:BD:9A:46:15:B2:E6:4F:76:F5
            X509v3 Authority Key Identifier:
                keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/4Y83xopR719SxF-9mkYVsuZPdvU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45024

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:3b:42:aa:5d:93:50:47:c4:8c:f1:90:78:3c:ef:ad:05:
         a8:40:55:1b:64:ec:b7:45:45:63:41:05:6d:56:9c:3e:19:22:
         32:de:a7:4b:38:ef:b7:8c:ce:ff:5a:bf:4b:dc:f0:c5:5d:10:
         8c:d1:11:f5:92:ac:f3:a4:60:a8:51:c5:7f:45:5c:7c:82:af:
         87:ea:f1:8d:5b:fc:4c:bc:ef:03:94:c2:34:e1:0c:f1:ad:8a:
         f1:2c:2e:65:41:eb:35:a8:cd:aa:c9:e2:9c:2b:16:97:d7:eb:
         3a:a7:80:3b:77:eb:0c:a1:89:ee:cd:c7:b4:fc:5a:f4:9f:93:
         8a:9b:d9:5f:7c:a8:9c:98:fc:5c:65:cc:fd:03:8b:3f:c5:76:
         8f:02:46:f2:d9:c1:c3:03:57:ec:24:29:0a:d7:05:ed:7a:d5:
         63:ba:c5:67:49:31:bd:28:82:21:d1:8a:6d:62:1c:81:6f:b0:
         91:51:40:ea:3c:09:80:06:5f:bb:ad:e6:18:14:ed:17:14:8d:
         80:a2:9d:e3:78:00:6e:f2:04:27:31:84:27:3e:45:87:87:44:
         e5:d2:d6:1b:26:d6:46:44:65:d2:0d:33:86:87:3d:8b:48:98:
         a2:86:20:6a:57:6d:de:6c:13:b7:49:70:43:ac:74:c0:8c:ef:
         c5:b2:0e:e6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ12D375qKbq2A3xqx67KbSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1
ZTIyZmUwHhcNMjYwNDEwMDYyMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMThmMzdjNjhhNTFlZjVmNTJjNDVmYmQ5YTQ2MTViMmU2NGY3NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TN5p6lnX9illUgzlKvHV+O9gMS1
WB6gh3ecz5CJU5sj+nnkDUXQaZgbeOaYPFO43Ulj1sbsGscYvneVRfzfjH133vbd
odOj27xwMvSWWHS8bJoH0xfliIirMCDh7JdBK2tXiRqkLf8g+45LWdqGUrnxbKCj
VDfEiOBxNg4lsTi6TjPRLQgfBiV/I4PW3uCVx0AJiDmIq2w/HVB1qSLaOnaBYBBl
t0DZVfmQcz8UeTKp7kc5nC+Gw4BzCQO26bxhCpUSgM06otWNG0LDt3MyjHJpHz43
rUDO7CgwqaxEwhCpilPlg0emOpc41BUhQnqfZRiyWVii3RIcE9ek0TmOwwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOGPN8aKUe9fUsRfvZpGFbLmT3b1MB8GA1UdIwQY
MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt
NDdkYzA4ZDdlM2JhLzEvNFk4M3hvcFI3MTlTeEYtOW1rWVZzdVpQZHZVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh
LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCv4DANBgkqhkiG
9w0BAQsFAAOCAQEARM87Qqpdk1BHxIzxkHg8760FqEBVG2Tst0VFY0EFbVacPhki
Mt6nSzjvt4zO/1q/S9zwxV0QjNER9ZKs86RgqFHFf0VcfIKvh+rxjVv8TLzvA5TC
NOEM8a2K8SwuZUHrNajNqsninCsWl9frOqeAO3frDKGJ7s3HtPxa9J+TipvZX3yo
nJj8XGXM/QOLP8V2jwJG8tnBwwNX7CQpCtcF7XrVY7rFZ0kxvSiCIdGKbWIcgW+w
kVFA6jwJgAZfu63mGBTtFxSNgKKd43gAbvIEJzGEJz5Fh4dE5dLWGybWRkRl0g0z
hoc9i0iYooYgaldt3mwTt0lwQ6x0wIzvxbIO5g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:22 2026 by rpki-client