Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/7583rAn8JHQAFLDKZll5jTa6nAI.asa
File:                     7583rAn8JHQAFLDKZll5jTa6nAI.asa (raw, json)
Hash identifier:          5a2+tUeRJO0EYIQT28GL2rb5YGySJT3+niyV5yoL27Y=
Subject key identifier:   EF:9F:37:AC:09:FC:24:74:00:14:B0:CA:66:59:79:8D:36:BA:9C:02
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019DA159A873217511605C79DC423E4980DE
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/7583rAn8JHQAFLDKZll5jTa6nAI.asa
Signing time:             Sat 18 Apr 2026 16:08:20 +0000
ASPA not before:          Sat 18 Apr 2026 16:08:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48116
Providers:                AS: 39889
                          AS: 50989
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:59:a8:73:21:75:11:60:5c:79:dc:42:3e:49:80:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Apr 18 16:08:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef9f37ac09fc24740014b0ca6659798d36ba9c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:91:28:ec:0c:db:d4:e9:3b:46:20:48:1c:
                    74:4b:e8:8d:07:85:b2:2d:8e:22:b1:3d:d1:58:6d:
                    fe:a7:07:62:3c:d8:80:bc:00:8c:52:34:3a:07:cf:
                    da:d0:0c:7f:57:e3:11:1b:5e:a1:39:57:3a:59:78:
                    39:72:9d:60:81:b9:e3:ae:20:24:e6:28:7b:b8:3f:
                    6f:80:58:fc:08:ac:58:57:cd:58:ae:46:ec:77:b7:
                    11:56:02:a3:88:4b:14:f5:5a:42:eb:b0:26:b6:fb:
                    e0:5e:b3:7c:40:4d:b6:a9:8b:30:07:ec:90:d2:68:
                    0d:0b:fb:67:cc:2e:ed:c5:27:b5:e7:8b:bd:45:2e:
                    71:ee:d9:20:21:3b:f0:70:8e:71:7d:3b:22:48:09:
                    69:36:b6:b6:b5:7f:67:ae:ac:bb:8b:10:81:b6:f3:
                    b3:26:67:74:9d:73:fa:87:81:f7:41:00:e7:9f:c4:
                    07:89:6b:4c:f8:e1:9c:e7:80:ef:3e:90:8c:e9:e7:
                    bc:3d:6a:73:2f:bd:d1:23:ff:ad:00:cc:4d:f8:dd:
                    90:71:0c:a3:3c:c5:3c:d8:1b:e2:c5:67:02:58:3b:
                    2f:9c:1c:9b:10:f9:fc:6b:bb:4e:74:1f:fe:35:d3:
                    65:e7:1d:32:77:77:59:26:05:e3:b4:d3:5f:ce:14:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:37:AC:09:FC:24:74:00:14:B0:CA:66:59:79:8D:36:BA:9C:02
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/7583rAn8JHQAFLDKZll5jTa6nAI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48116

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:70:28:56:c2:af:07:41:1f:70:bf:bc:d7:a0:b8:b9:ef:
         ea:17:33:f3:5e:cb:e9:84:e4:58:e9:a8:a9:04:59:eb:71:a0:
         ac:1b:8c:10:bd:7f:d0:8f:cc:1e:a5:4b:a7:70:ca:69:fc:92:
         ea:ea:53:8e:68:3f:c4:49:5b:ae:00:09:b5:6f:4f:c0:82:c3:
         37:6a:1c:26:df:45:cf:d4:2f:58:13:c2:d9:13:89:d1:31:9e:
         77:6f:ca:65:57:cf:69:9f:93:e5:65:b1:36:5b:2e:61:d5:b7:
         dc:e2:b9:12:38:bc:96:6b:2a:f8:40:f2:e0:aa:01:f6:db:e1:
         0f:5e:01:9f:6c:5a:fd:8d:0a:c9:d3:71:ab:ca:39:9f:43:d9:
         82:f2:3f:a3:93:6b:c5:4d:73:92:45:c8:cb:8a:e4:f5:6a:f8:
         e3:98:42:6b:b4:2e:05:bf:81:03:a6:bd:70:f9:4e:f1:81:4f:
         e6:38:27:9a:aa:cf:c6:58:bf:60:d2:42:39:f3:c1:fc:1e:b1:
         68:23:e2:9b:50:34:b2:20:f2:bb:66:cb:6a:72:38:24:b6:b0:
         d5:f8:6e:95:50:89:59:e0:8d:09:0d:ae:77:dd:e5:1a:f6:d3:
         bb:e5:10:57:86:f9:99:69:69:73:c4:db:c7:52:82:a8:01:31:
         a7:29:06:79
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ2hWahzIXURYFx53EI+SYDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3
YjUwM2IwHhcNMjYwNDE4MTYwODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjlmMzdhYzA5ZmMyNDc0MDAxNGIwY2E2NjU5Nzk4ZDM2YmE5YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKiRKOwM29TpO0YgSBx0S+iNB4Wy
LY4isT3RWG3+pwdiPNiAvACMUjQ6B8/a0Ax/V+MRG16hOVc6WXg5cp1ggbnjriAk
5ih7uD9vgFj8CKxYV81Yrkbsd7cRVgKjiEsU9VpC67AmtvvgXrN8QE22qYswB+yQ
0mgNC/tnzC7txSe154u9RS5x7tkgITvwcI5xfTsiSAlpNra2tX9nrqy7ixCBtvOz
Jmd0nXP6h4H3QQDnn8QHiWtM+OGc54DvPpCM6ee8PWpzL73RI/+tAMxN+N2QcQyj
PMU82BvixWcCWDsvnBybEPn8a7tOdB/+NdNl5x0yd3dZJgXjtNNfzhS3BQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFO+fN6wJ/CR0ABSwymZZeY02upwCMB8GA1UdIwQY
MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt
OWMxYjJhZDU1OWFiLzEvNzU4M3JBbjhKSFFBRkxES1psbDVqVGE2bkFJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi
LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC79DANBgkqhkiG
9w0BAQsFAAOCAQEASkpwKFbCrwdBH3C/vNeguLnv6hcz817L6YTkWOmoqQRZ63Gg
rBuMEL1/0I/MHqVLp3DKafyS6upTjmg/xElbrgAJtW9PwILDN2ocJt9Fz9QvWBPC
2ROJ0TGed2/KZVfPaZ+T5WWxNlsuYdW33OK5Eji8lmsq+EDy4KoB9tvhD14Bn2xa
/Y0KydNxq8o5n0PZgvI/o5NrxU1zkkXIy4rk9Wr445hCa7QuBb+BA6a9cPlO8YFP
5jgnmqrPxli/YNJCOfPB/B6xaCPim1A0siDyu2bLanI4JLaw1fhulVCJWeCNCQ2u
d93lGvbTu+UQV4b5mWlpc8Tbx1KCqAExpykGeQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:24 2026 by rpki-client