Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa
File:                     Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa (raw, json)
Hash identifier:          rvt0cOfBmuzqjIWb11wj25KlP9Cx+dsTFZQsIbWyVbY=
Subject key identifier:   41:AC:FD:5C:09:E2:FF:22:10:EC:5E:15:F3:A4:C4:F8:35:22:E0:D1
Certificate issuer:       /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial:       019E88C2C7A2989C6C40CA4D787665DEB714
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa
Signing time:             Tue 02 Jun 2026 14:35:26 +0000
ASPA not before:          Tue 02 Jun 2026 14:35:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44970
Providers:                AS: 31445
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:c2:c7:a2:98:9c:6c:40:ca:4d:78:76:65:de:b7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
        Validity
            Not Before: Jun  2 14:35:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41acfd5c09e2ff2210ec5e15f3a4c4f83522e0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:08:73:a4:78:db:d9:fd:10:0d:af:28:1f:
                    b4:90:75:16:4d:99:7a:aa:7c:a3:66:11:4e:eb:a0:
                    16:a0:0d:0d:e7:74:69:65:25:89:05:58:87:d3:a0:
                    1d:41:f4:0a:0c:ed:ca:31:b6:76:2e:28:25:9a:93:
                    48:89:b8:40:81:68:19:7d:71:62:a0:74:79:8d:12:
                    91:b5:8c:c1:ea:e9:d5:88:f0:ed:06:f3:50:01:94:
                    63:e6:33:97:f9:c6:d3:81:8b:2b:d1:9f:2c:bb:7a:
                    e8:69:88:9d:c6:22:55:e8:c1:46:b7:29:c3:21:af:
                    65:75:7b:f9:c6:03:a3:57:dd:e9:c2:4d:88:bc:61:
                    cd:ee:97:9a:0e:be:d4:16:1a:93:7d:e4:d6:9b:49:
                    2b:d7:8c:5f:52:a4:b4:b3:75:24:16:9a:df:88:60:
                    dd:06:cd:8f:ea:14:bd:60:3a:55:fb:2a:43:3d:4c:
                    9d:aa:21:8e:54:bc:ca:22:6e:39:cb:39:12:e9:6e:
                    55:cb:5a:0c:31:fb:c7:34:40:3b:54:21:3e:f6:55:
                    47:04:1c:70:25:46:a3:72:8f:9e:2f:10:d6:e0:f6:
                    7c:84:2d:00:32:fb:14:40:d6:99:fd:40:8b:ba:73:
                    d0:71:01:4d:19:2a:fd:b9:c6:d7:ab:c0:63:53:69:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AC:FD:5C:09:E2:FF:22:10:EC:5E:15:F3:A4:C4:F8:35:22:E0:D1
            X509v3 Authority Key Identifier:
                keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/Qaz9XAni_yIQ7F4V86TE-DUi4NE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44970

    Signature Algorithm: sha256WithRSAEncryption
         35:98:c0:47:92:37:a0:29:62:dc:fc:25:99:d8:34:4a:db:1f:
         f9:d7:15:e4:f0:41:03:34:12:78:6a:90:8c:d7:43:c6:9a:bb:
         80:89:ad:34:70:61:ac:b7:a9:f4:cd:05:2c:53:9a:b6:2f:61:
         1b:80:40:b6:cc:11:e1:5b:98:e1:34:1e:44:3d:19:b0:22:4f:
         c7:26:c4:7f:a5:c7:67:af:1b:da:02:8a:c9:95:91:97:da:19:
         6f:38:ac:a1:6e:e6:6a:f3:4e:94:c5:d6:9d:c1:8b:76:ce:98:
         c9:b7:7b:fd:63:f6:da:c7:cf:ac:c5:a9:63:64:5f:08:96:3d:
         3c:25:48:24:80:20:3f:0e:15:72:b4:43:bd:fc:b8:e2:8e:3c:
         8c:58:70:6d:89:54:bf:d0:3d:68:3f:05:44:3a:b7:30:61:24:
         dd:17:a6:ef:6d:39:a6:42:82:d2:e0:5c:5d:9d:e2:ac:02:86:
         e5:32:b2:39:1c:ad:f9:95:24:f0:87:ac:63:72:e9:02:35:a8:
         c8:84:6a:b4:82:b3:02:5c:23:33:f9:d9:48:98:df:e8:f1:e4:
         09:cb:24:8c:e9:00:10:4e:da:ca:e4:dd:07:90:ba:ac:2b:23:
         a0:f1:c5:7a:b9:29:6e:03:bd:08:1a:f1:b7:95:0f:31:a5:7d:
         d3:ce:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:17 2026 by rpki-client