Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/jjGd3ucimvf728iSKFsprOPsNbY.asa
File:                     jjGd3ucimvf728iSKFsprOPsNbY.asa (raw, json)
Hash identifier:          MQlS4p3aqurkc4ReIcG+dfIt9f7/Ky1ZOuhGPUbc9PM=
Subject key identifier:   8E:31:9D:DE:E7:22:9A:F7:FB:DB:C8:92:28:5B:29:AC:E3:EC:35:B6
Certificate issuer:       /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial:       019D53206863748C8FF831DB8D89119BB8B1
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/jjGd3ucimvf728iSKFsprOPsNbY.asa
Signing time:             Fri 03 Apr 2026 11:35:25 +0000
ASPA not before:          Fri 03 Apr 2026 11:35:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48885
Providers:                AS: 174
                          AS: 1299
                          AS: 3303
                          AS: 41095
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:53:20:68:63:74:8c:8f:f8:31:db:8d:89:11:9b:b8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
        Validity
            Not Before: Apr  3 11:35:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e319ddee7229af7fbdbc892285b29ace3ec35b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:f0:5e:c0:b7:3f:2a:6b:e6:4c:3e:81:7a:
                    d8:cc:73:aa:08:f0:48:65:bf:0c:f9:e1:e4:fa:ca:
                    36:98:1b:c1:55:f0:94:4f:dc:df:47:0b:a7:cc:d0:
                    38:fa:07:74:cb:bf:70:3a:a4:a8:2f:76:f3:07:4b:
                    f6:d2:d3:1c:aa:2d:62:ed:8f:7d:12:2a:d8:94:15:
                    8b:1a:72:b1:05:d1:05:85:aa:26:f7:c8:2b:32:95:
                    7f:a8:9c:51:90:d9:74:93:91:e5:e6:df:ed:77:75:
                    91:c1:d2:2b:1b:5b:4b:0d:5a:0f:c8:0c:90:7a:4d:
                    6b:9a:bc:a8:e3:ca:21:37:24:d1:60:66:c4:1c:4e:
                    cc:00:11:46:b4:fb:5f:66:2f:e2:d5:3c:bb:52:29:
                    93:49:d8:48:9d:fa:ce:24:bc:4c:38:28:33:a7:00:
                    39:8a:77:69:63:a7:32:3a:b2:08:5b:c3:70:10:06:
                    6c:e4:d6:56:da:3f:57:0f:76:1e:f7:72:16:5e:81:
                    bd:29:6d:f6:f3:67:df:72:86:54:3c:b3:46:76:4c:
                    8c:2d:47:f4:f6:48:2c:bf:d9:d1:34:6b:0f:8f:7a:
                    c3:dd:e0:b1:bd:52:26:af:be:41:06:91:4f:65:e0:
                    65:42:31:e8:b0:93:04:62:5b:fa:b3:d7:ae:10:6c:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:9D:DE:E7:22:9A:F7:FB:DB:C8:92:28:5B:29:AC:E3:EC:35:B6
            X509v3 Authority Key Identifier:
                keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/jjGd3ucimvf728iSKFsprOPsNbY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48885

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:9c:f6:31:39:1b:94:1b:55:15:43:71:26:a0:14:99:78:
         83:e5:35:a6:62:68:1f:d3:c7:6b:25:b9:39:36:7c:4c:69:8b:
         e1:ce:8a:ce:5e:32:b0:18:39:dc:01:83:f4:f2:da:cb:2b:b2:
         a9:91:a7:89:f4:7a:8a:fa:cc:15:bf:84:83:eb:79:b4:30:40:
         93:4a:c2:4d:9e:35:ea:f3:0a:ef:f5:1e:c0:1c:0e:2b:16:53:
         17:bc:be:a4:94:b4:41:20:7b:0b:24:42:70:75:15:85:10:62:
         22:0d:06:08:5d:84:e6:2f:f6:cf:ce:5d:82:29:63:d8:c9:7f:
         f0:e8:a6:83:01:4c:14:a5:a5:b2:4d:ac:81:7e:03:de:23:4c:
         72:3a:f8:04:50:f1:19:53:a7:0a:68:1b:5a:ae:a6:aa:4d:81:
         4d:2c:69:18:4d:85:e7:6c:db:62:57:fb:d2:16:b5:2e:b7:ab:
         cf:65:e7:4a:43:3e:fc:10:14:f4:2e:5c:7e:6e:6f:15:5f:dd:
         03:fb:df:70:df:05:23:f6:33:5b:71:93:d1:05:2e:f0:f7:ba:
         6b:27:8e:1d:e3:f3:96:88:70:1f:b6:8e:8c:10:e6:e4:c0:0e:
         aa:ad:aa:c4:7b:c8:c1:69:12:dd:eb:13:30:94:c9:90:fd:92:
         22:83:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:33 2026 by rpki-client