Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/zQ__yCcwrvF4SpWJekyRseIBHM0.asa
File:                     zQ__yCcwrvF4SpWJekyRseIBHM0.asa (raw, json)
Hash identifier:          5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=
Subject key identifier:   CD:0F:FF:C8:27:30:AE:F1:78:4A:95:89:7A:4C:91:B1:E2:01:1C:CD
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019CAFB0D2939342F5999AF56702590927E1
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/zQ__yCcwrvF4SpWJekyRseIBHM0.asa
Signing time:             Mon 02 Mar 2026 17:55:26 +0000
ASPA not before:          Mon 02 Mar 2026 17:55:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50533
Providers:                AS: 1299
                          AS: 2914
                          AS: 3320
                          AS: 3356
                          AS: 48918
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b0:d2:93:93:42:f5:99:9a:f5:67:02:59:09:27:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Mar  2 17:55:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd0fffc82730aef1784a95897a4c91b1e2011ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:dd:18:a9:1e:a2:61:f8:81:35:20:60:ba:
                    24:38:da:84:56:83:2f:c7:c7:54:ee:09:5c:8c:6b:
                    a2:a1:d2:c1:62:6c:cd:8e:77:76:f7:46:24:c8:76:
                    f6:7d:46:e2:19:37:3b:91:cd:b9:8d:8f:4c:fa:aa:
                    e7:87:9e:44:78:77:9c:f8:7f:a3:99:86:fe:a6:67:
                    0e:ab:d1:59:d1:45:d3:40:74:8c:c2:23:c8:4b:28:
                    8e:63:f0:a5:27:0b:67:a1:43:de:35:97:4c:cd:5d:
                    29:ff:a1:67:13:a3:9f:ff:3e:e3:19:ba:57:98:9c:
                    7c:c7:49:bb:c1:0c:4b:b8:6d:4c:02:eb:1c:8d:f7:
                    30:9d:d6:9a:a1:4e:32:68:df:75:04:b5:fe:2e:b4:
                    0c:39:62:ca:e4:a1:53:36:d5:ac:0c:7a:27:fc:45:
                    84:0f:be:a9:f6:3f:47:65:49:cf:e3:a7:4e:1e:92:
                    4d:51:85:11:63:4a:1f:a9:20:88:6d:f3:74:e3:75:
                    cc:98:c4:b6:aa:a3:e6:8a:da:ff:80:26:a6:22:39:
                    59:2b:1a:ac:4c:0d:b7:40:75:bd:a2:fc:10:86:60:
                    a6:49:ea:4e:80:a7:24:62:c6:3c:37:dc:df:d9:48:
                    51:7d:5d:a3:1a:87:44:0a:04:2e:7d:bc:8a:5b:4e:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:FF:C8:27:30:AE:F1:78:4A:95:89:7A:4C:91:B1:E2:01:1C:CD
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/zQ__yCcwrvF4SpWJekyRseIBHM0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50533

    Signature Algorithm: sha256WithRSAEncryption
         09:15:10:0b:b2:d0:36:a6:55:0f:8b:30:b5:77:21:b8:fd:0c:
         cb:e4:ab:00:53:cc:60:1b:48:f8:37:f7:df:cf:19:7c:28:2f:
         29:ea:ee:24:e6:d9:38:b5:74:13:f8:92:fa:d3:fc:5a:74:d2:
         fc:1e:79:6b:ce:a1:2a:6a:4b:f3:58:75:39:00:f0:4c:47:6a:
         28:95:95:af:d2:df:fa:1c:60:aa:c6:42:2f:d4:af:28:3d:b8:
         65:c9:56:08:dc:f6:c8:77:f9:65:05:76:5a:cf:00:90:57:19:
         f7:09:7d:d3:8e:11:f1:c9:39:48:74:ce:1e:59:30:b4:14:e7:
         e4:2d:60:58:dc:05:69:7c:d7:5f:db:62:5a:4d:fc:a3:c4:4c:
         4c:db:0e:0a:37:f3:1e:b7:db:80:af:98:c5:f1:d4:d8:a3:7a:
         f8:44:3f:17:2d:ff:f1:36:5e:20:2e:8c:ab:86:59:4f:b9:b5:
         99:d1:ae:18:d5:49:c8:11:19:0c:e8:31:31:32:c5:13:ab:6d:
         20:8b:15:f4:d9:f5:7a:3b:1a:ac:70:ff:79:29:fb:18:c3:ae:
         6f:64:7f:40:20:46:76:47:0e:9e:e0:7b:1d:ef:68:86:23:fa:
         0a:01:45:b6:01:c6:b4:af:a9:8e:11:73:94:d2:6b:93:a6:80:
         00:78:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:32:30 2026 by rpki-client