Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/hwSj5utHUB9kio2nxOmW83owD4k.asa
File:                     hwSj5utHUB9kio2nxOmW83owD4k.asa (raw, json)
Hash identifier:          hItYRV18Tshv+b+dYWQsYYBLeleeM3lvaF7dU7v4d3w=
Subject key identifier:   87:04:A3:E6:EB:47:50:1F:64:8A:8D:A7:C4:E9:96:F3:7A:30:0F:89
Certificate issuer:       /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial:       019D5F27524501013A4191A51C32FE61F9D1
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/hwSj5utHUB9kio2nxOmW83owD4k.asa
Signing time:             Sun 05 Apr 2026 19:38:25 +0000
ASPA not before:          Sun 05 Apr 2026 19:38:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202831
Providers:                AS: 31500
                          AS: 35598
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5f:27:52:45:01:01:3a:41:91:a5:1c:32:fe:61:f9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
        Validity
            Not Before: Apr  5 19:38:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8704a3e6eb47501f648a8da7c4e996f37a300f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:f8:9b:94:bc:65:69:01:28:87:93:1c:c1:
                    66:ff:ff:d1:b8:bb:6e:57:4d:ca:6a:70:8c:44:7e:
                    d2:2d:37:38:cc:2a:67:60:f1:78:9e:7c:be:d9:ad:
                    58:53:04:c0:d2:44:f6:a2:e9:36:26:11:36:27:a6:
                    32:1e:f4:23:1f:d0:02:9e:d6:cd:c6:68:05:51:b7:
                    47:a2:3b:9d:9d:ce:72:f3:e9:fd:59:44:f0:91:f1:
                    86:ac:8f:59:1e:99:35:b2:73:e0:7f:2b:39:a5:30:
                    73:8d:10:0d:fb:11:e6:d7:49:86:88:d0:63:c4:e4:
                    79:11:6c:98:5b:31:f2:27:0e:29:95:83:2c:51:de:
                    08:b8:da:e6:87:73:8a:df:0a:f1:bd:de:04:76:6e:
                    67:c4:0c:00:31:85:1c:15:45:95:73:d2:7a:53:f8:
                    74:b6:8c:97:7b:dd:f1:cf:54:6b:b3:00:69:e1:fc:
                    90:b5:87:b2:4b:98:95:e8:b4:e9:4d:98:22:96:2c:
                    8c:e2:29:83:a2:63:87:e6:3b:a0:3e:de:4e:9e:9e:
                    f2:65:6e:dc:85:79:a0:1f:21:62:ce:fd:ab:4c:9b:
                    75:4c:05:86:25:c3:01:2a:61:ba:6c:59:14:d1:9c:
                    a7:3f:61:1d:11:d5:49:18:ba:aa:25:9d:3b:54:52:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:04:A3:E6:EB:47:50:1F:64:8A:8D:A7:C4:E9:96:F3:7A:30:0F:89
            X509v3 Authority Key Identifier:
                keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/hwSj5utHUB9kio2nxOmW83owD4k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202831

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:5c:f6:a3:57:a3:b6:12:0a:1d:27:58:ab:1a:cb:e3:e1:
         aa:6c:bc:7a:38:cb:3b:61:ae:3f:80:20:f9:f7:93:7f:ad:f3:
         8e:41:8e:45:b7:71:36:ee:e6:8b:0b:10:09:6e:e7:9c:8e:05:
         9b:b0:f7:02:6b:cc:d4:11:b7:5e:32:34:88:cf:c9:da:70:ad:
         e0:51:0d:74:b1:ee:80:73:fa:32:0c:96:b4:d7:8b:7d:3f:ae:
         eb:aa:ac:83:78:0f:9d:c8:f7:be:d8:51:b7:cd:70:f5:7e:45:
         34:ad:00:40:9f:80:f7:cd:2e:75:34:e2:de:d6:8b:e6:49:86:
         53:1c:a6:fd:f8:e0:f8:18:5c:24:7a:ab:4e:ff:ea:21:2b:54:
         05:3a:36:bc:4d:62:34:d9:3c:aa:eb:55:13:ec:57:d2:4a:d4:
         83:4a:51:0e:72:f7:7a:57:b8:09:03:2f:29:81:80:7b:37:c7:
         7e:12:67:44:16:ff:ca:47:86:36:3b:37:a4:8c:19:f7:c5:93:
         7c:7f:f3:ae:ee:db:ab:c4:a4:37:79:c5:78:cd:ea:23:47:64:
         39:5a:88:ca:11:a4:00:71:a8:87:c4:89:55:54:42:a4:e6:e9:
         4c:03:d5:8a:48:92:ed:42:51:76:ee:9c:e9:6e:c2:af:ce:94:
         c6:d7:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:46 2026 by rpki-client