Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/eNypCQqIJRNls5R5rHbJCG2j29M.asa
File:                     eNypCQqIJRNls5R5rHbJCG2j29M.asa (raw, json)
Hash identifier:          dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=
Subject key identifier:   78:DC:A9:09:0A:88:25:13:65:B3:94:79:AC:76:C9:08:6D:A3:DB:D3
Certificate issuer:       /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial:       019D7CEA40A88DD84C0F58FB1B42837D8DE2
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/eNypCQqIJRNls5R5rHbJCG2j29M.asa
Signing time:             Sat 11 Apr 2026 14:20:19 +0000
ASPA not before:          Sat 11 Apr 2026 14:20:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214751
Providers:                AS: 44889
                          AS: 48434
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:7c:ea:40:a8:8d:d8:4c:0f:58:fb:1b:42:83:7d:8d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
        Validity
            Not Before: Apr 11 14:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78dca9090a88251365b39479ac76c9086da3dbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:ac:fb:7d:08:75:56:a9:99:e1:90:30:03:
                    d8:70:4b:5c:33:ee:7d:4c:8d:a3:7d:d4:30:33:1c:
                    7e:d5:3c:1c:ae:77:e4:f5:c6:22:a2:56:9b:07:41:
                    e0:93:5e:98:32:fc:0a:47:ed:c9:c7:e1:b6:9f:6d:
                    85:23:13:91:7d:97:f0:a0:04:48:8c:31:d7:1d:e0:
                    85:6d:73:69:75:19:8e:a9:8a:74:0d:68:76:c4:c0:
                    ac:23:92:11:ec:37:9b:27:35:ac:27:6f:cd:2d:96:
                    09:ca:42:04:e9:09:d6:a5:f6:3f:20:e5:55:d5:d9:
                    35:8b:bf:65:b3:60:77:0e:fe:0e:79:61:7a:3c:10:
                    39:06:eb:c1:12:59:fe:49:19:65:b8:dc:74:63:8b:
                    d5:19:97:80:62:2d:5a:f9:78:68:f8:0b:9b:25:cc:
                    bc:fc:e2:87:71:a4:52:62:36:1d:96:c3:b1:82:c0:
                    32:d4:bb:69:00:f3:96:8a:b1:fa:4a:e6:10:5e:d0:
                    81:83:ae:ad:c1:18:0d:5a:ec:73:a2:90:d4:c6:2c:
                    75:a7:5c:6d:66:73:af:16:d5:7b:2e:79:98:b5:14:
                    a7:ab:cb:2e:9e:1c:84:d4:a9:4c:3e:0d:56:dd:24:
                    61:b4:72:ac:8b:7e:b3:b6:c7:b4:ea:71:d5:be:ec:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:A9:09:0A:88:25:13:65:B3:94:79:AC:76:C9:08:6D:A3:DB:D3
            X509v3 Authority Key Identifier:
                keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/eNypCQqIJRNls5R5rHbJCG2j29M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214751

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:12:b7:7d:25:48:ab:f0:b8:a1:64:f4:68:7c:eb:cd:18:
         b1:f2:2b:e8:ee:0e:ea:a4:52:9d:4d:7f:2e:f3:b9:92:d1:3c:
         e8:16:f9:37:86:ac:dc:98:0a:8b:7a:47:dc:bb:65:bc:4c:20:
         ce:2e:90:fd:5c:9d:0d:25:9d:94:1f:48:bb:f6:a3:32:2b:04:
         68:c6:37:f7:79:aa:1f:d2:44:24:4c:b9:dd:8a:42:c7:53:6e:
         b9:cb:8e:58:08:52:88:14:9c:fb:e4:fa:48:92:ba:c6:e8:d5:
         b8:9c:42:b0:95:dc:e0:eb:98:43:9d:85:e8:8f:71:2f:a7:5c:
         c7:5f:13:7c:a7:e5:4d:87:2c:86:26:46:f3:8e:c0:09:d8:a6:
         5d:25:b8:7c:0a:87:05:3c:c8:6d:12:ce:20:08:b3:24:f4:30:
         84:1f:1e:7c:05:66:c2:32:da:a7:f6:9e:b6:9d:fe:7f:02:21:
         5e:25:85:4e:a8:8c:9a:00:cd:60:80:67:64:c0:45:9d:18:a9:
         65:cf:31:9a:c8:96:29:5c:60:c0:85:9a:c8:a2:f9:41:4f:54:
         2a:d3:4f:20:90:c5:89:20:0f:cd:49:f1:0b:d6:c2:d0:ab:93:
         98:d8:35:70:6f:08:9b:c6:fd:ba:2f:b0:9f:75:00:c1:5c:0b:
         48:bd:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:54 2026 by rpki-client