Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-zOd1kumaIlRrXPMfMdhndo9duk.asa
File:                     1-zOd1kumaIlRrXPMfMdhndo9duk.asa (raw, json)
Hash identifier:          J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=
Subject key identifier:   FB:33:9D:D6:4B:A6:68:89:51:AD:73:CC:7C:C7:61:9D:DA:3D:76:E9
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       019D432120103E57F9211EFF8AD855C0CE80
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-zOd1kumaIlRrXPMfMdhndo9duk.asa
Signing time:             Tue 31 Mar 2026 09:02:17 +0000
ASPA not before:          Tue 31 Mar 2026 09:02:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3320
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:21:20:10:3e:57:f9:21:1e:ff:8a:d8:55:c0:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Mar 31 09:02:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb339dd64ba6688951ad73cc7cc7619dda3d76e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:4c:07:dc:3a:35:af:86:34:30:5e:49:4d:
                    c6:a0:8b:87:b9:11:76:37:6c:91:b5:c5:af:16:5f:
                    45:b5:5c:8d:23:4c:b4:3f:7d:16:29:05:da:01:a0:
                    43:2d:33:62:32:a7:f6:2b:a5:b3:03:3d:9a:e5:f9:
                    d3:32:87:41:4c:00:63:ab:b0:4b:81:61:ec:ab:c5:
                    ac:fc:25:c5:9b:f1:43:09:01:5f:73:ea:7f:e9:bc:
                    a6:d2:d2:62:f3:55:60:f9:73:bf:ab:41:be:66:b5:
                    a6:fa:f1:42:71:f7:ef:e6:cf:3f:ac:78:35:90:39:
                    e7:ef:ac:9b:49:ca:7c:17:9b:d1:bb:c4:69:7f:03:
                    5f:51:7c:f7:7c:17:38:6f:a7:cd:ac:a1:94:51:d5:
                    ae:2f:39:7b:cf:3d:6c:b2:5e:a1:e1:d8:85:63:84:
                    b1:a3:d6:aa:81:81:25:6e:15:0f:5a:6f:d4:43:3d:
                    d5:f3:ba:f3:e7:5a:f9:d6:d1:94:94:b1:86:18:60:
                    32:46:64:59:fb:07:de:31:5e:23:ef:e0:48:a5:67:
                    81:2b:41:e6:ae:48:47:b6:51:8f:37:36:84:1b:18:
                    16:82:d5:89:18:6d:f9:02:59:4d:48:11:51:6d:ec:
                    06:28:4e:89:89:a2:4d:bf:13:8c:5a:4b:83:77:05:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:33:9D:D6:4B:A6:68:89:51:AD:73:CC:7C:C7:61:9D:DA:3D:76:E9
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-zOd1kumaIlRrXPMfMdhndo9duk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3320

    Signature Algorithm: sha256WithRSAEncryption
         31:67:e1:98:21:9a:bd:ce:10:c7:af:79:cc:9f:3c:c9:ab:86:
         e2:10:06:f4:f7:b2:32:10:38:59:7b:d2:76:97:ff:ee:dd:93:
         b9:d3:4e:20:f9:b5:cd:d1:c2:99:b3:7c:e2:43:fc:2e:23:3f:
         dd:3e:04:ec:53:33:c5:70:88:ee:3d:5c:05:f3:d2:f3:f3:f9:
         7f:4b:54:3d:19:31:8e:43:db:18:78:43:e8:94:67:5d:3c:a7:
         0d:c0:05:23:d9:4f:c2:5e:36:2c:e5:c7:8f:90:80:d9:32:4e:
         0a:8e:ed:b9:c5:22:42:e8:0a:13:c4:f6:c1:73:6b:25:c0:f7:
         e4:c7:25:21:37:98:21:f6:ec:79:9d:0f:d8:cc:5e:d2:93:12:
         35:3b:65:25:ba:d8:ff:82:2b:2e:41:86:a7:46:2b:12:22:6d:
         14:27:14:3b:3b:42:5e:00:11:dc:75:fb:6f:26:7d:b9:6b:4f:
         a4:1e:5f:94:2a:8f:58:14:63:24:bd:14:02:5c:69:0c:e1:02:
         22:b9:c7:92:91:77:6f:0c:34:72:0d:c5:2a:32:45:b6:c8:a6:
         e0:df:7c:f5:59:b2:ed:18:8e:fe:fe:50:d0:84:e2:61:26:51:
         98:c9:4f:6a:1c:a5:d4:53:cf:59:84:0a:1e:f3:21:86:f1:2d:
         18:e3:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:10 2026 by rpki-client