Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/KN1P7f4-fZ68qRby6mZLX1tWgW0.asa
File:                     KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (raw, json)
Hash identifier:          0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=
Subject key identifier:   28:DD:4F:ED:FE:3E:7D:9E:BC:A9:16:F2:EA:66:4B:5F:5B:56:81:6D
Certificate issuer:       /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial:       019E68BA66DCCA8FEFA7CAA4981B96F73394
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/KN1P7f4-fZ68qRby6mZLX1tWgW0.asa
Signing time:             Wed 27 May 2026 09:18:26 +0000
ASPA not before:          Wed 27 May 2026 09:18:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44439
Providers:                AS: 39704
                          AS: 43366
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:68:ba:66:dc:ca:8f:ef:a7:ca:a4:98:1b:96:f7:33:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
        Validity
            Not Before: May 27 09:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28dd4fedfe3e7d9ebca916f2ea664b5f5b56816d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:82:42:ff:cb:98:9c:b6:31:c1:4d:e9:59:
                    fe:49:31:01:ed:6c:2f:6a:83:e9:16:2f:ba:1d:2d:
                    ac:b6:77:4f:b8:66:8a:5e:6d:cc:bf:a9:a2:46:f0:
                    81:6f:41:cf:6e:53:a1:2d:47:c0:29:71:95:e0:c1:
                    4a:35:bf:9b:b0:bb:fd:cb:53:5c:57:50:e7:1f:f7:
                    d3:de:4e:a7:9f:8f:e4:50:f9:e9:81:75:c4:eb:fa:
                    0a:39:16:64:fd:b5:16:6a:92:c1:4d:22:da:40:07:
                    8f:6b:a2:b1:fd:ac:01:04:c6:fa:43:e3:7d:06:66:
                    d4:2a:3d:8d:56:31:b0:33:34:66:ae:16:da:97:e8:
                    32:01:0a:e1:b9:e0:9f:a8:3b:54:db:7b:9e:28:d8:
                    ad:84:b1:a5:a9:c6:1b:9a:dd:cf:04:ad:ab:e6:11:
                    56:0e:80:b5:c8:05:42:12:fb:79:ea:c5:52:e4:72:
                    de:cf:f1:cd:85:5b:d7:b9:a9:66:ed:fa:13:53:a4:
                    3a:2c:70:4b:86:bb:a5:e2:e4:80:54:e7:74:cd:8c:
                    ae:21:e9:36:0b:ca:14:13:2e:17:d9:17:9a:ea:d7:
                    eb:80:68:e3:82:13:f8:da:7f:f3:44:17:6a:25:22:
                    c6:bc:78:f3:08:04:30:25:c8:4f:9a:a4:1c:df:9b:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:4F:ED:FE:3E:7D:9E:BC:A9:16:F2:EA:66:4B:5F:5B:56:81:6D
            X509v3 Authority Key Identifier:
                keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/KN1P7f4-fZ68qRby6mZLX1tWgW0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44439

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:86:01:d1:93:1c:11:20:1d:27:6d:d2:0d:20:3a:81:6c:
         3d:36:6a:55:4f:36:6a:75:97:26:cb:02:d4:bb:2c:95:bd:f5:
         32:1a:d1:1a:60:ae:0c:e5:5c:39:5a:8d:c0:84:a0:ea:8c:49:
         68:fb:22:c2:bd:96:d0:0f:25:89:cf:7d:c8:13:25:aa:ae:c3:
         c1:d7:a7:14:eb:f3:ca:f6:7d:e6:a4:70:7a:4e:e6:9a:ab:8a:
         86:fb:31:e3:71:2f:8f:4f:3a:79:e2:32:19:87:d9:ef:c0:0d:
         58:41:3f:7a:0a:49:b3:bb:e3:04:c2:37:6b:c6:a1:f4:a0:97:
         67:40:fa:6a:98:2e:2d:2f:7e:56:a3:72:3e:f5:b4:0b:88:75:
         50:06:0e:63:02:19:dc:21:7e:bc:98:86:99:2a:d4:ee:95:2e:
         7b:e6:6b:c6:81:ce:ef:af:71:ee:93:e0:d3:b6:49:91:5f:e8:
         56:f3:d2:61:75:7d:e3:be:a1:71:f0:10:17:ac:3e:42:0a:3c:
         38:ab:7f:c3:be:94:49:a4:e3:12:eb:ac:61:0c:1a:56:46:f9:
         1a:23:e2:c2:b3:ea:b4:55:37:f4:c7:ee:11:ac:1c:82:8c:aa:
         3c:f7:d9:4d:ac:20:20:e5:c6:f4:30:97:a0:15:88:95:35:9b:
         75:39:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:58 2026 by rpki-client