Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/sk3Ng7M09_merP38zbn6ZinhfyY.asa
File:                     sk3Ng7M09_merP38zbn6ZinhfyY.asa (raw, json)
Hash identifier:          Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=
Subject key identifier:   B2:4D:CD:83:B3:34:F7:F9:9E:AC:FD:FC:CD:B9:FA:66:29:E1:7F:26
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019C70F46D7754C18A3E8CA4711F591F2CD1
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/sk3Ng7M09_merP38zbn6ZinhfyY.asa
Signing time:             Wed 18 Feb 2026 13:33:12 +0000
ASPA not before:          Wed 18 Feb 2026 13:33:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49624
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:70:f4:6d:77:54:c1:8a:3e:8c:a4:71:1f:59:1f:2c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Feb 18 13:33:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b24dcd83b334f7f99eacfdfccdb9fa6629e17f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:84:51:53:4c:a5:db:40:d4:42:d6:27:a1:
                    a9:be:19:83:6f:98:96:f7:af:93:3f:3f:c4:ba:17:
                    9d:59:96:d9:d0:b8:26:d8:3d:c3:40:29:bd:99:85:
                    26:e2:f8:db:ad:e5:4c:6c:61:78:b9:59:42:49:4b:
                    30:cb:81:a5:d7:ef:59:8e:58:c1:f7:44:bf:42:5e:
                    00:4c:92:f9:51:7b:9d:ac:83:0d:a5:fb:e8:b0:04:
                    ce:08:bd:48:32:05:7b:b8:7e:32:10:a3:31:b7:bb:
                    77:93:88:30:6a:1e:6b:9a:32:31:a6:d4:d3:7d:a8:
                    4f:80:a5:e6:44:66:24:09:fe:e5:d2:79:0c:2d:a8:
                    37:08:c3:0a:18:4f:c6:0c:d7:e0:a0:7e:2e:d9:d0:
                    d4:b1:4a:93:be:31:f4:c2:e1:c9:6d:7f:90:14:d4:
                    e3:5f:aa:be:3f:28:22:5b:c2:63:84:c7:60:48:3d:
                    89:11:f2:1b:c9:ae:9c:0a:3c:27:31:8b:34:48:bb:
                    7e:f7:76:f7:96:a4:1b:05:1c:64:e0:1e:b2:35:0e:
                    fa:5f:0c:30:d6:f6:47:cd:25:ff:dc:75:17:b0:6e:
                    f3:3c:87:7c:eb:99:a9:20:f5:06:c4:7e:8c:f9:79:
                    8a:77:b6:87:fe:64:b9:5b:e9:06:47:f8:20:09:c4:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:CD:83:B3:34:F7:F9:9E:AC:FD:FC:CD:B9:FA:66:29:E1:7F:26
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/sk3Ng7M09_merP38zbn6ZinhfyY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49624

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:a8:51:e3:ac:9a:61:c7:98:bc:3c:37:1d:c7:5f:ed:8e:
         a2:88:aa:06:00:73:4a:40:6f:ad:41:0e:4c:24:c9:02:c0:97:
         50:07:ba:3a:75:b8:fb:79:d0:13:fc:df:4d:8f:18:4b:55:ef:
         ff:bd:ce:af:42:19:0c:33:75:d8:20:ff:91:b8:8f:4a:3d:6b:
         b1:5e:50:c0:3e:c7:d8:1e:c6:14:df:fe:50:77:cd:26:92:0e:
         85:d8:39:74:d6:e0:d5:c4:e6:61:e2:2b:5f:24:d0:01:06:d7:
         d7:f0:78:45:2b:c4:36:d3:a8:23:bb:73:6d:22:eb:c0:cc:39:
         05:ab:e3:42:40:89:9a:02:f0:bd:ec:e6:fe:65:5e:b0:81:7f:
         36:36:0b:73:27:5e:ee:16:6f:95:c7:32:b3:c6:6b:ce:d2:10:
         bf:a3:e6:84:92:01:95:3e:21:9a:af:db:05:52:b0:b4:9b:c9:
         d4:7b:c4:53:a6:78:28:47:7b:a4:5b:5f:04:06:aa:1f:27:8f:
         ad:de:2c:22:c7:d2:03:e6:5c:9a:1b:67:4f:5f:8f:28:ab:51:
         27:61:62:88:c8:45:77:8e:5c:41:95:b1:8d:fd:56:ff:6b:f3:
         93:f6:cc:32:f1:0e:da:ba:e4:05:8d:2e:f4:04:f0:39:54:72:
         76:18:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:42 2026 by rpki-client