Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/By7I8jjbSqMahxdD4BS2SnbDr7c.asa
File:                     By7I8jjbSqMahxdD4BS2SnbDr7c.asa (raw, json)
Hash identifier:          QbgmQZT5PQ6E0YbuSg3smNh7SLEoa1rVnzwDnpMWc80=
Subject key identifier:   07:2E:C8:F2:38:DB:4A:A3:1A:87:17:43:E0:14:B6:4A:76:C3:AF:B7
Certificate issuer:       /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial:       01A046F13A9008F59968230ECB1908DA368A
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/By7I8jjbSqMahxdD4BS2SnbDr7c.asa
Signing time:             Fri 28 Aug 2026 05:56:49 +0000
ASPA not before:          Fri 28 Aug 2026 05:56:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59970
Providers:                AS: 6830
                          AS: 6939
                          AS: 39392
                          AS: 47232
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:46:f1:3a:90:08:f5:99:68:23:0e:cb:19:08:da:36:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
        Validity
            Not Before: Aug 28 05:56:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=072ec8f238db4aa31a871743e014b64a76c3afb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:87:33:8f:f0:d2:72:9e:dc:80:36:f4:89:1a:
                    6c:e5:97:87:c3:f2:af:e5:6a:c3:cc:ba:98:2c:c4:
                    c5:42:68:9e:5b:4e:43:8c:8f:58:ca:b5:bd:af:ee:
                    99:0b:e1:da:79:78:8d:7b:47:23:3b:fb:a6:f0:a0:
                    83:ea:57:a4:01:92:35:8b:cd:9b:2b:21:94:01:45:
                    2c:cc:7f:32:bd:45:52:db:11:29:53:fa:3e:da:83:
                    76:d8:5d:82:7f:ec:b6:6c:84:af:5e:e5:a7:36:8c:
                    72:ae:26:85:3f:32:14:b1:95:a4:a9:78:55:93:5b:
                    06:c5:f7:81:55:0f:f1:1e:46:88:33:04:6b:9d:60:
                    3a:d0:0a:da:be:13:e9:d4:4a:2d:3a:f8:70:49:55:
                    69:5f:8c:6d:6c:cd:53:fb:f7:31:87:c8:e0:5f:32:
                    fb:8a:90:b7:a2:2d:90:9f:b8:b4:dd:46:c5:a2:d8:
                    50:a2:57:95:2a:83:df:bf:df:b0:21:79:29:06:2e:
                    1b:72:9f:3a:f0:ee:76:e1:54:46:94:78:97:8a:7c:
                    40:12:f3:dc:f1:e4:4a:cf:af:c7:21:0f:20:e4:2e:
                    d3:e4:01:4d:16:03:c3:94:b2:b8:14:4c:af:be:46:
                    bb:19:23:b4:5e:24:4c:e1:a4:e3:03:8f:ba:b8:fd:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:C8:F2:38:DB:4A:A3:1A:87:17:43:E0:14:B6:4A:76:C3:AF:B7
            X509v3 Authority Key Identifier:
                keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/By7I8jjbSqMahxdD4BS2SnbDr7c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59970

    Signature Algorithm: sha256WithRSAEncryption
         97:92:da:d4:84:b3:8d:13:bb:4b:40:6d:b5:16:07:2a:2d:07:
         21:5a:ea:db:4d:eb:67:03:5f:dd:b6:74:ec:e5:44:b9:81:55:
         fb:eb:c2:74:f9:13:64:25:a6:39:90:a0:e4:f3:b0:84:f9:5d:
         c8:af:b3:ff:5a:a4:a3:1a:14:d7:73:1e:4b:a3:4a:05:2e:7f:
         77:0a:c5:5a:7f:92:4d:44:09:49:18:a7:7c:72:54:db:32:58:
         c3:51:8b:51:cf:34:54:eb:ad:96:94:4e:40:de:57:60:d1:6d:
         28:43:3f:d9:bb:73:d8:5e:cc:3d:e5:d7:52:77:3b:ec:65:8f:
         13:62:29:a5:68:ce:cc:55:d3:18:27:60:1f:60:c7:53:7f:c6:
         44:2e:e3:35:f9:ac:16:9d:66:d9:61:a0:d3:18:fe:38:0a:cc:
         7c:b8:bc:c5:d8:36:07:bc:d0:2f:7c:1b:48:c0:53:e9:69:4c:
         c8:bb:d9:bb:01:1c:89:44:f3:63:55:69:4b:3c:65:cd:94:c2:
         3b:5c:a5:35:c0:4c:f6:74:d8:a6:58:6f:31:83:11:09:61:22:
         3e:c6:a2:90:99:55:53:04:6d:1d:2b:6a:39:bd:95:1e:03:bd:
         db:42:08:c4:89:57:66:96:5b:2c:f7:45:20:65:e8:cc:c8:14:
         54:e6:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:16 2026 by rpki-client