Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/W_aG2Y2dW-GITjfNATjKMf8zsks.asa
File:                     W_aG2Y2dW-GITjfNATjKMf8zsks.asa (raw, json)
Hash identifier:          ifDIM36/MROrO3cBLEr4Poh0WSs47IBQAw7+5bNLgws=
Subject key identifier:   5B:F6:86:D9:8D:9D:5B:E1:88:4E:37:CD:01:38:CA:31:FF:33:B2:4B
Certificate issuer:       /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial:       019D43295D32A7F8ACCCA2E5EEC55F93942B
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/W_aG2Y2dW-GITjfNATjKMf8zsks.asa
Signing time:             Tue 31 Mar 2026 09:11:17 +0000
ASPA not before:          Tue 31 Mar 2026 09:11:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49766
Providers:                AS: 6830
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:43:29:5d:32:a7:f8:ac:cc:a2:e5:ee:c5:5f:93:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
        Validity
            Not Before: Mar 31 09:11:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bf686d98d9d5be1884e37cd0138ca31ff33b24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:be:b9:30:94:d6:11:34:9a:20:a2:72:d3:
                    9e:94:df:0d:63:6b:21:e8:6f:ab:3a:ed:da:19:cb:
                    f4:c5:f1:79:d5:a6:64:ec:72:3b:a7:1d:ba:cb:31:
                    3f:c1:aa:ab:9c:52:9b:4f:38:fd:cb:e6:f8:90:6b:
                    91:7c:34:5e:2f:69:3d:3b:3e:10:9e:36:20:bc:ec:
                    5c:fa:88:c5:65:a7:11:7c:52:4a:90:ab:84:cc:af:
                    fd:bf:f8:51:7a:2c:83:46:cf:22:cf:bb:8d:fe:c0:
                    41:a9:e4:c4:c8:d0:26:a5:94:79:84:f3:82:b4:72:
                    0b:a9:2e:c9:56:52:1b:d9:5c:21:f9:55:7e:c4:44:
                    f2:cb:f8:20:39:e5:d3:7d:ef:b8:89:a2:7b:cd:64:
                    e2:84:f6:a0:5e:f1:66:cb:54:32:6e:2f:fb:6b:0c:
                    fd:31:36:a9:9a:a3:e3:be:e9:d2:22:a8:4b:ba:2d:
                    e6:85:4c:81:db:ac:a9:df:48:7e:07:e9:bf:5a:97:
                    b7:e3:e7:7e:7d:ac:4e:da:b3:0e:72:ff:dc:26:59:
                    31:e6:68:4f:ad:58:39:23:51:0f:0f:ca:89:0d:02:
                    a4:4e:17:8f:4a:15:20:5a:bb:52:f1:0e:d0:4f:48:
                    b2:93:92:fe:81:00:5f:1f:ea:c5:c4:0c:52:2f:41:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F6:86:D9:8D:9D:5B:E1:88:4E:37:CD:01:38:CA:31:FF:33:B2:4B
            X509v3 Authority Key Identifier:
                keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/W_aG2Y2dW-GITjfNATjKMf8zsks.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49766

    Signature Algorithm: sha256WithRSAEncryption
         37:73:46:d2:c9:68:63:f9:1a:6f:c3:72:db:57:84:2c:08:03:
         f6:6d:ca:05:3f:cc:76:e5:61:90:0e:fc:79:f2:81:67:0a:18:
         ff:98:ba:b2:51:ec:e1:48:13:b1:62:a5:b4:44:2c:bd:72:94:
         b8:88:4e:dc:d3:39:7e:49:9d:e5:15:c3:d8:25:0c:df:84:80:
         18:f0:9f:63:3a:c8:74:ac:52:1a:c4:e8:78:f3:2c:dd:78:d9:
         f6:d3:00:c0:d2:65:94:d5:b7:f7:33:ad:7e:7c:1f:5f:bd:31:
         a9:8f:7e:2d:e0:1b:ab:2a:59:e4:be:86:e3:f2:de:d1:e5:cd:
         4f:1a:34:12:0b:47:0d:70:75:67:86:05:64:7c:5d:cb:68:d2:
         28:02:1a:df:fd:2f:28:de:c4:c9:f6:0c:a9:e5:18:a3:96:94:
         e1:04:2e:e5:af:58:3f:e3:0e:bd:6f:e8:4a:41:40:f0:ec:21:
         a8:0f:3c:80:c5:fc:39:64:be:dc:1e:54:44:c3:b6:7c:0c:40:
         e4:a0:16:7d:32:41:8b:db:65:01:66:b8:03:98:c1:a5:1b:50:
         b8:af:00:7d:b2:7e:ba:63:36:24:63:d5:18:f8:b7:8e:62:8f:
         f3:64:7e:03:de:ca:31:1b:83:f1:3b:fe:04:39:13:4e:61:a6:
         e1:72:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:43 2026 by rpki-client