Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/YKcDKEWIMlg76GTNhpBhJgfgseg.asa
File:                     YKcDKEWIMlg76GTNhpBhJgfgseg.asa (raw, json)
Hash identifier:          QXQfDgm1NSd802AZFlLWGYSREWy9tsWnBFqvrA0d4ww=
Subject key identifier:   60:A7:03:28:45:88:32:58:3B:E8:64:CD:86:90:61:26:07:E0:B1:E8
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       01A0B22817B3164198FBA176CAB7C56C2698
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/YKcDKEWIMlg76GTNhpBhJgfgseg.asa
Signing time:             Fri 18 Sep 2026 01:36:07 +0000
ASPA not before:          Fri 18 Sep 2026 01:36:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50338
Providers:                AS: 6939
                          AS: 47232
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b2:28:17:b3:16:41:98:fb:a1:76:ca:b7:c5:6c:26:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Sep 18 01:36:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=60a70328458832583be864cd8690612607e0b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:d7:5c:ab:21:b9:b6:5b:5b:51:9a:1f:ee:
                    68:05:11:a4:c8:8a:a2:82:dd:40:16:28:74:9f:33:
                    c1:89:d9:19:f7:3b:9c:9b:1f:e6:0c:53:9f:1e:66:
                    c1:d0:87:c4:91:c9:e5:02:6a:ae:4c:0b:ff:cd:4c:
                    30:34:d6:32:a0:1a:c1:db:0c:93:74:06:e3:30:9e:
                    04:50:c5:5f:28:b5:f7:35:a0:55:34:a7:3e:90:c6:
                    46:dd:02:e3:26:ed:ed:bd:34:0c:20:ba:ae:c6:0f:
                    c6:e1:82:0b:7b:d2:e1:6a:9e:2e:9a:60:7c:52:1d:
                    b7:90:03:74:c6:01:e1:c1:70:4d:03:2d:88:8c:c1:
                    c2:40:ba:c9:bd:40:e7:a8:b3:64:50:ba:db:a7:51:
                    23:ef:76:82:92:76:aa:95:f0:44:40:5d:d5:84:4d:
                    71:8c:b3:0f:8f:a7:97:c7:c1:26:98:f6:73:4c:f7:
                    a4:eb:f3:c8:34:32:2c:55:5b:2d:b1:1c:63:ed:42:
                    7f:d5:ca:2f:16:f9:8e:5a:48:14:aa:27:ec:0b:30:
                    18:6e:c5:31:97:f1:19:fd:bc:1a:15:6d:69:96:b4:
                    9b:1b:d8:42:43:fc:62:e5:f9:e5:08:b9:a9:10:29:
                    16:7e:b4:84:11:b5:95:7a:71:74:4c:71:70:ac:d4:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A7:03:28:45:88:32:58:3B:E8:64:CD:86:90:61:26:07:E0:B1:E8
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/YKcDKEWIMlg76GTNhpBhJgfgseg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50338

    Signature Algorithm: sha256WithRSAEncryption
         58:49:8f:f0:f1:1b:ac:06:85:61:e6:7f:a0:99:08:e7:37:e4:
         27:a4:80:d9:db:40:a7:96:db:39:45:00:b8:45:81:2b:9d:db:
         0c:6b:d8:07:6c:7b:3a:f6:ba:04:da:81:33:dd:2c:6c:91:b2:
         01:61:a2:5c:c5:d3:22:67:4b:28:67:e0:80:39:23:c9:bc:1d:
         0c:34:0a:cd:e6:7d:aa:c0:42:73:01:11:60:62:11:b8:81:d1:
         b5:8e:57:ec:f0:87:e5:be:8c:ba:18:0a:a2:85:9b:7a:1a:db:
         11:b5:69:31:98:3b:ab:95:2d:58:38:9d:aa:c9:c6:09:4b:93:
         c7:0c:ef:53:b6:b9:cb:dc:9a:26:e3:eb:7d:4d:fd:cd:c4:bb:
         e3:8c:28:a0:aa:65:65:a6:08:86:7b:8f:28:22:cb:cc:57:02:
         39:40:85:a9:3f:53:70:dd:b6:f5:b3:56:07:7f:13:3b:7c:05:
         43:9d:f1:b5:aa:d8:60:13:5c:a1:75:96:ee:5b:68:aa:dc:26:
         b1:24:ee:c1:ad:5f:f5:ce:f7:67:87:5c:1f:bd:fb:96:b2:1e:
         f1:cc:0a:fc:e0:be:0c:ed:bb:79:f5:9e:44:04:17:7b:2b:31:
         95:24:b4:ca:69:6f:68:5b:99:6c:35:51:de:f7:f9:8d:03:bb:
         c4:49:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:55 2026 by rpki-client