Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/WONBLwBKpxNMRzip371kxfQVjeI.asa
File:                     WONBLwBKpxNMRzip371kxfQVjeI.asa (raw, json)
Hash identifier:          GffsttYQI233beYeqBwhQ6dApHBHZjHU0cBZXCSiX1o=
Subject key identifier:   58:E3:41:2F:00:4A:A7:13:4C:47:38:A9:DF:BD:64:C5:F4:15:8D:E2
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       019D864AC4EA082F2CAD1747F2F78D29EDD1
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/WONBLwBKpxNMRzip371kxfQVjeI.asa
Signing time:             Mon 13 Apr 2026 10:02:20 +0000
ASPA not before:          Mon 13 Apr 2026 10:02:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41073
Providers:                AS: 174
                          AS: 1299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:86:4a:c4:ea:08:2f:2c:ad:17:47:f2:f7:8d:29:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: Apr 13 10:02:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58e3412f004aa7134c4738a9dfbd64c5f4158de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:d2:e3:d7:13:32:c6:2d:a9:98:c5:cc:19:
                    14:27:84:e4:d3:be:09:4c:1b:0b:c6:73:0e:6c:d8:
                    21:58:e6:50:e5:47:8b:42:bb:e0:59:a1:b2:38:53:
                    64:ab:1f:c3:51:d4:6e:28:77:82:6c:ee:3f:f9:39:
                    07:dd:ba:af:4b:58:65:fc:34:3f:44:e6:5d:ea:77:
                    31:74:6e:69:40:ca:93:a7:28:7f:2c:e7:05:14:80:
                    8b:b2:6e:ab:b2:f9:83:38:f6:57:d2:62:90:3d:d5:
                    8c:59:2e:13:79:9a:ff:06:20:d7:b8:74:36:ad:5e:
                    88:a0:6a:03:40:f0:d4:f3:15:d9:66:d3:24:53:4e:
                    bf:4f:83:01:f0:dc:23:72:4f:c1:e9:0b:ec:5c:2d:
                    d4:cc:37:35:64:af:3a:be:12:be:e4:ac:1a:c6:a8:
                    f8:dc:b3:c1:2d:c8:78:43:3c:1b:94:4c:8f:04:94:
                    9e:3a:c7:1d:50:5d:51:83:46:23:cb:f9:50:54:76:
                    1d:8c:d1:9e:12:15:fb:66:8e:6d:03:28:65:8a:f1:
                    3b:dc:fc:84:89:fd:0a:b4:5c:21:eb:89:f6:90:a0:
                    00:30:89:34:02:a0:1d:bc:a0:8e:52:83:44:a9:e7:
                    e6:23:11:e1:05:bf:be:34:b0:51:de:b7:7b:9f:6e:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E3:41:2F:00:4A:A7:13:4C:47:38:A9:DF:BD:64:C5:F4:15:8D:E2
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/WONBLwBKpxNMRzip371kxfQVjeI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41073

    Signature Algorithm: sha256WithRSAEncryption
         75:a5:98:5e:d7:62:2b:35:45:10:5b:a8:fc:da:1f:eb:cb:be:
         28:3b:2b:7c:21:a3:20:ec:71:69:3b:34:de:66:21:77:b2:24:
         6d:f5:8e:f3:1c:9d:e4:be:36:31:64:e5:d6:9d:7c:33:6b:53:
         c6:bf:da:d5:66:02:b4:ce:24:6f:a1:13:7e:a3:91:a6:65:3a:
         30:26:6c:c2:ba:f4:75:61:7d:c9:39:4a:0c:2a:97:a2:c3:1e:
         44:b6:20:56:ac:3b:38:78:9a:1b:7d:6d:56:4e:8c:e5:8e:91:
         0c:9e:d1:1b:7a:d6:4b:ed:ec:48:fc:c9:f9:96:e4:dd:63:11:
         d5:5a:2f:26:4d:18:cc:64:a5:b5:e4:69:57:ea:f7:e3:cf:93:
         12:cc:0a:ef:e5:20:da:9d:04:e8:f7:1d:10:4d:88:3a:e7:82:
         82:9f:df:9a:c4:82:39:e1:20:c8:72:a0:75:a2:3a:92:4b:65:
         ee:93:29:b6:bd:ef:6b:cb:05:04:3b:01:73:a9:45:d4:33:4d:
         26:4f:5c:21:d5:5d:5b:75:f4:0e:2b:ff:e0:45:fe:12:4f:ba:
         da:21:72:c3:8e:66:ba:f4:71:40:8a:6e:ef:ae:a8:d1:dd:c4:
         6a:5d:80:2e:2e:27:66:8d:3a:4a:ed:f4:87:63:04:d6:c4:5c:
         78:5b:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:12:11 2026 by rpki-client