Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/p16cU-7zatx3ndSU5oxcouZGGsA.asa
File:                     p16cU-7zatx3ndSU5oxcouZGGsA.asa (raw, json)
Hash identifier:          2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=
Subject key identifier:   A7:5E:9C:53:EE:F3:6A:DC:77:9D:D4:94:E6:8C:5C:A2:E6:46:1A:C0
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019CAF1F40D057386BD6B290221C17D96196
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/p16cU-7zatx3ndSU5oxcouZGGsA.asa
Signing time:             Mon 02 Mar 2026 15:16:26 +0000
ASPA not before:          Mon 02 Mar 2026 15:16:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33808
Providers:                AS: 3320
                          AS: 50533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:1f:40:d0:57:38:6b:d6:b2:90:22:1c:17:d9:61:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Mar  2 15:16:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a75e9c53eef36adc779dd494e68c5ca2e6461ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:6e:ed:30:dd:78:e6:fb:85:ee:a8:f8:c9:
                    e3:f7:90:df:9a:6f:cc:2d:80:06:48:53:2d:3e:d0:
                    b8:35:07:28:9e:31:38:e6:91:a1:4d:2f:66:49:3b:
                    1d:64:b1:e0:36:fb:69:0d:e4:18:eb:5e:ae:c8:6c:
                    a3:03:ee:4d:cb:f2:d5:6d:cd:12:f5:c2:3a:c3:38:
                    a3:c2:d3:dd:f2:b7:98:c2:fc:01:21:6c:09:be:ec:
                    a5:3b:ec:73:07:56:a3:95:d8:28:2c:4b:b7:27:aa:
                    06:6b:fe:6a:e2:73:4b:51:5c:9a:cd:42:76:1c:ef:
                    d2:22:95:47:2e:5b:27:85:18:92:ce:f9:9b:4f:e0:
                    f5:a9:62:50:04:fa:60:b7:aa:90:32:de:54:6b:27:
                    4b:f0:3d:13:d8:bf:f1:73:21:58:6d:73:d4:1c:c5:
                    72:a0:0a:db:16:44:d9:08:71:f8:aa:60:ce:9b:21:
                    45:65:24:a4:be:c8:ec:24:c2:31:cb:82:1d:b5:43:
                    b0:61:9c:4e:1c:aa:d5:78:a6:1d:2a:1f:a0:1b:9f:
                    4b:73:1f:77:62:0a:44:ea:4a:c9:c3:ce:29:63:6e:
                    d5:c4:d2:3e:88:5a:8b:48:d6:ff:16:54:da:fd:70:
                    63:ee:ad:c9:db:f0:45:75:4a:0b:02:a3:16:6f:6e:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:9C:53:EE:F3:6A:DC:77:9D:D4:94:E6:8C:5C:A2:E6:46:1A:C0
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/p16cU-7zatx3ndSU5oxcouZGGsA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33808

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:23:8c:87:90:f8:59:0d:63:ae:09:07:82:93:04:2e:f3:
         25:2d:c7:21:e2:49:e9:a9:bb:6b:8d:f6:07:a5:09:26:fc:06:
         6b:2b:4b:04:b1:c6:3f:74:a7:cd:16:26:f8:4b:ab:c3:33:2f:
         11:e0:3d:dd:a3:01:e4:4c:0b:04:34:91:86:8c:ff:57:9a:f2:
         74:fa:2a:b1:bf:2f:00:f3:99:97:78:84:74:21:e4:d4:6d:22:
         12:2e:5e:a4:16:48:82:9b:c7:3e:43:13:ec:66:58:1d:a9:78:
         01:be:7b:63:25:57:37:a0:34:76:4e:07:69:6f:a1:74:d2:4d:
         44:9a:3e:90:53:11:53:ba:39:07:e0:6c:08:f2:c7:dd:31:ec:
         5a:19:1b:fc:93:df:81:88:a6:f6:19:84:1c:3d:3b:89:ac:63:
         45:64:26:45:f4:26:10:48:8b:ec:c5:93:9e:63:cd:7c:9c:f7:
         84:34:f8:7b:28:e6:dc:bf:a1:e8:37:43:17:94:01:7a:9e:cd:
         2e:66:09:f1:30:f5:99:70:cb:85:b1:d1:14:37:e8:fb:89:47:
         34:7c:dd:a3:55:8d:45:3d:59:b3:5a:ed:e3:19:0a:b1:f6:72:
         b3:0e:df:9b:77:d8:7d:b2:a2:e5:7c:75:f1:80:9d:4a:d8:a1:
         66:62:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:08:29 2026 by rpki-client