Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/X01sfTguEZRlbViMsVbdLRhWtwM.asa
File:                     X01sfTguEZRlbViMsVbdLRhWtwM.asa (raw, json)
Hash identifier:          ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=
Subject key identifier:   5F:4D:6C:7D:38:2E:11:94:65:6D:58:8C:B1:56:DD:2D:18:56:B7:03
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019D2A51335D699A598E706C656AE1F60C9C
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/X01sfTguEZRlbViMsVbdLRhWtwM.asa
Signing time:             Thu 26 Mar 2026 13:24:17 +0000
ASPA not before:          Thu 26 Mar 2026 13:24:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50534
Providers:                AS: 5089
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:51:33:5d:69:9a:59:8e:70:6c:65:6a:e1:f6:0c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Mar 26 13:24:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f4d6c7d382e1194656d588cb156dd2d1856b703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:ff:71:cd:dd:c3:fb:32:a9:4b:d3:f0:de:
                    d9:57:1f:ec:5a:be:19:9a:50:78:f1:1d:8b:36:ec:
                    2f:c3:1c:2f:1f:da:55:f4:fc:80:5b:cb:bc:10:5c:
                    67:d1:45:e9:9a:08:ea:01:d2:08:9b:6b:c5:c3:35:
                    c8:85:4a:d0:0b:ef:0b:09:d5:8a:ab:b2:ef:14:f6:
                    eb:bf:d9:14:01:25:1c:d7:83:a6:59:8f:1f:14:2f:
                    29:75:b7:db:67:d0:ac:18:dd:ab:37:08:c6:23:b6:
                    28:ed:68:b0:b7:76:ff:e1:77:40:f7:01:bc:e7:38:
                    9f:7f:71:bb:7b:62:bf:a6:51:80:cf:14:07:12:ad:
                    a8:34:16:e9:a7:71:e6:52:19:fa:92:91:6b:0c:32:
                    f5:bc:3f:67:74:54:bd:84:a5:2e:6f:e9:74:6e:6c:
                    24:a5:fd:cc:d5:90:45:10:2d:b6:50:cb:86:eb:e7:
                    e5:ad:48:af:ba:b3:1c:13:40:15:7e:1f:0a:75:c2:
                    fa:31:8e:b3:e3:67:ae:23:81:0a:08:44:18:c1:0a:
                    ae:91:70:b7:51:95:0f:81:e3:d1:3b:b9:14:2b:7c:
                    60:32:61:24:e1:7e:34:65:24:93:eb:e5:9c:ab:c1:
                    b9:08:bd:79:ae:e3:f7:a6:48:81:ce:64:e8:f2:ba:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:6C:7D:38:2E:11:94:65:6D:58:8C:B1:56:DD:2D:18:56:B7:03
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/X01sfTguEZRlbViMsVbdLRhWtwM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50534

    Signature Algorithm: sha256WithRSAEncryption
         15:86:ac:56:34:ad:39:f7:dc:b3:fd:e4:7a:9c:41:2b:de:8d:
         01:92:b7:ef:e0:8f:f3:f6:cf:74:ad:9f:ec:d2:7a:f7:02:e8:
         f5:dd:06:db:c8:47:7d:14:b0:4b:cf:af:4b:7d:e9:3d:ed:39:
         93:cc:c6:bf:d9:3c:c4:b2:68:2d:35:9b:aa:12:82:85:7b:e1:
         ed:2a:8f:88:78:ac:95:e1:7b:b3:7f:c2:83:c2:ab:c6:47:f1:
         0a:3a:2f:f7:7e:00:1a:ed:c6:19:4e:e7:51:d1:8e:fe:be:61:
         08:37:94:cc:ac:a8:d4:27:51:11:01:50:41:ae:e4:a5:00:15:
         4a:3e:72:5b:e2:19:0e:23:86:79:19:da:be:bc:e3:ee:51:7f:
         71:95:08:7f:69:d6:a0:da:3e:25:e0:43:e5:aa:73:40:28:2e:
         83:45:6d:de:dc:18:ff:f7:91:82:4b:86:fc:2b:87:69:e5:cd:
         d9:3c:d4:15:76:76:8b:86:79:a9:08:c4:f7:18:75:d6:0c:0d:
         4b:ca:a6:c1:c3:71:ca:17:33:9e:7d:65:00:e0:55:be:0d:89:
         d6:bf:95:45:db:c4:24:2b:70:07:be:bc:43:10:40:0c:e8:40:
         f2:31:48:5a:85:d8:0c:25:e5:d4:c1:84:8e:df:f8:c0:bb:25:
         72:7b:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:51 2026 by rpki-client