Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/JjXi4XbAnV9bj8nE6_XGuu1V074.asa
File:                     JjXi4XbAnV9bj8nE6_XGuu1V074.asa (raw, json)
Hash identifier:          O90Cg0AUX3YziSsowsx54UsgUbqTnyh9MTtkhA73QD8=
Subject key identifier:   26:35:E2:E1:76:C0:9D:5F:5B:8F:C9:C4:EB:F5:C6:BA:ED:55:D3:BE
Certificate issuer:       /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial:       019D85F7744199D92869990E853AC0D2E595
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/JjXi4XbAnV9bj8nE6_XGuu1V074.asa
Signing time:             Mon 13 Apr 2026 08:31:20 +0000
ASPA not before:          Mon 13 Apr 2026 08:31:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57025
Providers:                AS: 3491
                          AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:85:f7:74:41:99:d9:28:69:99:0e:85:3a:c0:d2:e5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
        Validity
            Not Before: Apr 13 08:31:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2635e2e176c09d5f5b8fc9c4ebf5c6baed55d3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:b3:64:a0:c9:bc:26:22:f8:3d:52:de:31:
                    15:79:5c:57:35:e6:73:b8:e2:bc:30:d5:ce:c6:cc:
                    f4:35:41:d9:27:a3:8e:f3:18:5e:bb:32:5c:20:ac:
                    5b:52:72:af:4d:14:04:7f:0a:83:47:f4:3e:e4:64:
                    7d:74:2b:10:d7:c0:f4:9c:72:08:ef:ac:16:2e:2a:
                    e5:ea:e3:57:d8:82:30:e4:70:4c:1e:a1:a3:7a:dc:
                    1c:d6:53:85:ce:a3:99:c2:75:67:b8:45:08:1c:ba:
                    99:1b:12:0f:1d:34:c9:51:04:f3:52:72:b7:91:ae:
                    dd:14:0b:9c:33:7a:3d:05:3e:c4:64:fe:95:2c:84:
                    82:2e:bf:29:00:9d:50:a6:0b:e8:18:17:cd:c9:75:
                    93:1e:c0:23:f6:b5:eb:a3:e2:0a:7a:ad:1f:14:8a:
                    9b:26:f3:e0:1a:d8:8b:f0:8c:ba:63:f3:b1:cb:16:
                    57:83:ed:11:d4:6b:26:eb:be:ea:87:b7:09:dd:6d:
                    59:f5:56:5b:e8:6f:e1:11:dd:87:a3:0f:d5:09:e0:
                    7d:0d:84:7a:04:97:99:46:bd:1c:99:1a:68:fc:74:
                    90:f3:b2:7d:cc:40:c0:5a:f6:f7:8f:7f:27:bf:f9:
                    7c:4c:b1:a9:69:95:3c:db:79:fc:d0:25:e4:a2:8d:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:E2:E1:76:C0:9D:5F:5B:8F:C9:C4:EB:F5:C6:BA:ED:55:D3:BE
            X509v3 Authority Key Identifier:
                keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/JjXi4XbAnV9bj8nE6_XGuu1V074.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57025

    Signature Algorithm: sha256WithRSAEncryption
         56:e8:dd:9f:2d:2f:a3:5e:bc:d7:25:08:36:c5:dc:bb:cf:d2:
         13:73:13:18:96:85:01:0a:bd:78:2f:51:ab:86:a9:26:94:7d:
         6b:aa:7d:60:6f:e2:30:57:ee:c4:4d:c9:92:b2:3a:51:f6:ee:
         b1:80:4f:81:01:52:3c:7b:58:13:1c:e9:44:fb:60:1b:ff:d0:
         35:0f:a1:6d:ac:3b:7d:32:6c:2d:9e:df:b8:dc:c4:fe:be:84:
         fc:67:72:22:57:b3:c4:e3:55:68:d6:05:44:99:46:44:6e:ba:
         58:79:ce:21:f3:f5:bb:5d:9a:3b:7d:8e:5e:ab:02:e7:c2:1d:
         d2:a2:40:99:b6:c8:98:37:63:05:78:e7:3e:f8:7c:0c:12:d4:
         8a:e3:bd:38:71:d3:0c:cb:81:51:aa:42:03:a8:c6:8d:f4:62:
         25:c5:d0:54:20:d1:0b:34:86:59:46:e6:b3:42:de:1c:c7:0d:
         7c:32:9d:9a:61:73:d1:0b:44:50:cf:8b:7f:7d:71:86:9d:78:
         06:ff:69:63:66:2b:78:ba:3d:61:20:ae:df:29:ef:5f:9e:be:
         e1:5f:aa:72:7e:2c:de:d7:7f:22:eb:52:37:2e:39:5f:f3:39:
         78:a6:22:0b:18:c0:59:03:04:c0:e7:9a:2e:8c:18:14:f7:6b:
         2a:41:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:23 2026 by rpki-client