Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/Ascb1T5MRl8oo-kehh_BRkLaHrA.asa
File:                     Ascb1T5MRl8oo-kehh_BRkLaHrA.asa (raw, json)
Hash identifier:          W9WHd/i0tHzguizYbyV14C4Ft3qCu8gI4uA0bUVEKZ4=
Subject key identifier:   02:C7:1B:D5:3E:4C:46:5F:28:A3:E9:1E:86:1F:C1:46:42:DA:1E:B0
Certificate issuer:       /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial:       019C8980D1ED22E8A4151A7CC4A1D397C8E5
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/Ascb1T5MRl8oo-kehh_BRkLaHrA.asa
Signing time:             Mon 23 Feb 2026 07:57:26 +0000
ASPA not before:          Mon 23 Feb 2026 07:57:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50629
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 3320
                          AS: 3356
                          AS: 5511
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:89:80:d1:ed:22:e8:a4:15:1a:7c:c4:a1:d3:97:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
        Validity
            Not Before: Feb 23 07:57:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=02c71bd53e4c465f28a3e91e861fc14642da1eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:06:8e:7f:0a:a2:76:4c:7f:a5:48:40:fc:
                    8d:13:38:c3:e1:83:6f:1c:39:4e:09:10:ba:f1:32:
                    dd:2a:36:26:a5:24:fc:4a:cf:ef:4a:fb:b1:0f:33:
                    d9:fb:a6:44:b6:29:f0:af:04:c4:f4:60:c7:14:b0:
                    71:7f:92:45:f2:37:07:28:d8:56:9a:9b:42:de:23:
                    8b:83:bf:d5:eb:61:2b:f7:58:69:68:f9:c2:f5:10:
                    f2:35:9d:56:86:53:15:fc:71:bb:75:53:d9:5e:d6:
                    33:fd:eb:37:66:2c:27:9b:fa:14:31:2d:2b:b1:ec:
                    4f:9f:ea:c9:3b:66:1a:a5:5a:9f:7a:37:87:5c:9f:
                    cf:49:b2:52:ab:89:b6:9b:17:30:39:67:12:b9:bf:
                    14:5f:44:8b:85:52:f9:1c:af:ff:7e:fe:57:56:95:
                    25:8b:a8:79:8f:b3:d6:11:7f:8e:b4:0a:38:a8:6d:
                    63:13:ed:60:bf:5e:22:f7:d5:ca:45:8c:f2:a1:07:
                    33:73:0e:9d:6c:c2:97:bc:34:51:a3:75:c3:d6:64:
                    46:00:01:fb:55:1f:09:61:f4:2b:56:39:0c:6f:06:
                    3f:61:0c:2a:ca:4e:37:af:f9:5c:9a:66:9b:a3:87:
                    3c:95:0c:c4:c8:a8:31:13:8e:d8:3d:ed:b0:11:8a:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C7:1B:D5:3E:4C:46:5F:28:A3:E9:1E:86:1F:C1:46:42:DA:1E:B0
            X509v3 Authority Key Identifier:
                keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/Ascb1T5MRl8oo-kehh_BRkLaHrA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50629

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:59:2c:8a:5f:90:39:cd:36:13:d2:ef:11:be:86:1c:d9:
         51:08:03:b4:bf:f1:99:22:da:39:e0:cd:72:a7:03:94:40:3e:
         fd:0d:f7:30:26:b0:f0:41:27:3e:09:b2:3f:86:e4:43:78:22:
         3a:01:af:4b:bd:fb:c6:6d:dd:35:6a:2b:64:7a:4b:10:72:7b:
         b4:7a:8f:9f:32:93:0e:5f:a5:34:6b:04:7e:0a:78:cd:4d:93:
         8f:fd:0b:99:35:ca:d3:b9:04:78:84:1c:98:d0:d1:ee:63:e4:
         00:94:b8:8b:78:f3:40:2a:4e:c3:e7:6d:25:0c:b3:ed:99:bc:
         63:2a:53:aa:2f:11:87:df:6e:7d:c6:03:3c:1b:73:ed:70:13:
         00:7c:ca:f7:12:c9:db:fd:06:68:ae:61:b2:60:11:f1:81:c8:
         82:d0:90:78:70:8b:b2:ba:82:a7:4a:66:8d:9f:a7:e8:7d:b1:
         cb:54:ae:6e:48:70:1b:99:b8:ed:fb:01:46:af:dd:a0:c9:6a:
         a9:dc:ac:91:8b:b6:3d:13:a8:4d:17:74:07:ad:bd:fc:eb:d9:
         e3:23:49:21:f6:08:1c:b3:4c:ef:e8:63:ce:92:7c:77:94:05:
         5d:6f:49:1c:b2:d8:5a:00:6b:ee:41:b0:a6:b8:21:80:72:48:
         35:22:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:36 2026 by rpki-client