Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/HUhw9cLx8_fWSY-eLVPdIS95ScI.asa
File:                     HUhw9cLx8_fWSY-eLVPdIS95ScI.asa (raw, json)
Hash identifier:          tay+QqVKxzFNXYmywf6FycLZJgzN0dQqtFAyPOYkOPM=
Subject key identifier:   1D:48:70:F5:C2:F1:F3:F7:D6:49:8F:9E:2D:53:DD:21:2F:79:49:C2
Certificate issuer:       /CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Certificate serial:       01A01BE85B1834B5D5E5EC4927A5B63D5B46
Authority key identifier: 5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/HUhw9cLx8_fWSY-eLVPdIS95ScI.asa
Signing time:             Wed 19 Aug 2026 21:23:27 +0000
ASPA not before:          Wed 19 Aug 2026 21:23:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49964
Providers:                AS: 1299
                          AS: 6696
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1b:e8:5b:18:34:b5:d5:e5:ec:49:27:a5:b6:3d:5b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7bd7e5d533de526d498dcd8a63046739208d21
        Validity
            Not Before: Aug 19 21:23:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d4870f5c2f1f3f7d6498f9e2d53dd212f7949c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:7d:6a:bb:1c:c8:02:83:e0:55:86:cc:b9:
                    30:ad:43:3e:09:69:b2:33:a0:9b:57:5e:3c:44:83:
                    d1:b3:bb:03:c8:6d:8e:78:df:6f:9e:6a:bb:7e:73:
                    4d:81:c7:0d:07:00:ed:07:f4:94:a6:70:e7:70:33:
                    bf:11:29:29:0b:7d:50:c1:25:1e:23:55:20:bf:ae:
                    e5:1a:76:e8:d3:34:a1:8f:9e:0f:90:11:8b:c9:42:
                    a8:15:06:1c:aa:2e:fc:7e:03:65:a2:45:e2:45:9d:
                    6a:76:5d:a6:51:42:7d:88:47:ea:aa:c0:67:cd:e7:
                    85:ab:c7:22:95:b9:2f:04:48:84:5d:60:64:77:ca:
                    b6:87:4a:61:4b:ed:7d:13:5a:40:db:25:a7:eb:da:
                    f7:f7:28:a3:6a:6d:f3:13:cc:aa:ad:50:ba:05:85:
                    8a:1c:32:21:13:ae:4c:38:6f:72:45:f2:2c:14:e2:
                    e6:db:4b:cb:8f:86:84:02:d8:de:9e:cd:36:aa:5c:
                    18:77:16:32:af:ed:25:e4:62:c5:0f:85:e3:7f:98:
                    76:fa:83:7c:a1:09:f3:bf:2a:71:2c:30:de:e9:0c:
                    1d:6e:83:56:ad:cc:a8:0d:03:cd:c8:dc:4d:ac:a1:
                    cf:da:1c:f8:6e:cf:55:80:32:e2:0c:95:a9:5b:6f:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:70:F5:C2:F1:F3:F7:D6:49:8F:9E:2D:53:DD:21:2F:79:49:C2
            X509v3 Authority Key Identifier:
                keyid:5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/HUhw9cLx8_fWSY-eLVPdIS95ScI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49964

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:dd:ec:d8:7b:07:76:8c:9e:e6:a1:f6:d2:04:c7:d9:a3:
         c7:72:e1:1f:3b:e3:5c:86:e9:53:ee:69:a7:26:ab:73:ac:4c:
         93:28:98:4c:22:f5:22:dd:6a:49:d9:8b:2f:cb:dd:ce:a4:58:
         27:aa:ca:cc:4d:04:22:70:ee:0a:8a:eb:be:4c:ff:d1:6f:60:
         ce:5e:20:11:36:31:3d:ad:b1:20:02:e7:49:41:9f:9e:ad:9a:
         68:08:54:1c:32:e9:2f:48:c2:a5:24:fb:cd:70:bb:8f:67:66:
         10:34:34:6f:1a:5e:31:a5:e5:87:e2:b5:87:65:46:c4:bf:9d:
         08:49:8a:30:11:33:64:bc:d1:b7:e2:c9:17:42:29:1d:ab:0c:
         54:05:e7:7f:62:5a:56:e8:d1:92:cd:11:1d:0a:b3:74:0f:60:
         06:9f:a8:00:34:00:e5:a7:b4:ce:a3:e3:fa:98:b5:62:c2:62:
         73:7c:0e:78:43:21:0d:6f:e9:a8:1f:f8:d0:38:01:3d:a8:41:
         10:2e:44:f1:3d:5e:e5:d1:fc:f7:e1:52:d1:a2:31:54:7d:e8:
         60:06:54:d8:f8:dd:a9:a4:bb:9f:cb:77:39:ac:44:b7:a4:a9:
         9a:47:ef:0a:e2:a0:d8:15:90:2c:79:73:09:8b:32:1d:d5:c2:
         c9:19:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:22 2026 by rpki-client