Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41051.asa
File:                     AS41051.asa (raw, json)
Hash identifier:          /I3blOoDipe9cn51PHXcllsS7iPiCuWfGkm9iM6k11w=
Subject key identifier:   DF:F2:98:78:C4:6B:A9:17:E9:EC:C6:97:3B:E4:0D:CB:C3:75:BA:60
Certificate issuer:       /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial:       354A2D40CCC4A87BCCFB515F28951D492FA4DDF6
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41051.asa
Signing time:             Mon 23 Feb 2026 19:13:46 +0000
ASPA not before:          Mon 23 Feb 2026 19:08:46 +0000
ASPA not after:           Mon 22 Feb 2027 19:13:46 +0000
Customer ASID:            41051
Providers:                AS: 6939
                          AS: 39351
                          AS: 50629
                          AS: 58299
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4a:2d:40:cc:c4:a8:7b:cc:fb:51:5f:28:95:1d:49:2f:a4:dd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
        Validity
            Not Before: Feb 23 19:08:46 2026 GMT
            Not After : Feb 22 19:13:46 2027 GMT
        Subject: CN=DFF29878C46BA917E9ECC6973BE40DCBC375BA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:58:67:35:b8:ee:d0:ae:e6:8f:9f:77:d3:
                    fa:cc:c4:20:6a:93:5e:ed:f1:7b:35:49:1f:2b:c4:
                    0a:19:c3:f2:b8:75:43:14:7a:3f:84:cd:fc:31:69:
                    e8:19:f9:da:32:6b:bb:07:54:37:70:84:ff:6e:86:
                    0e:e2:64:ce:08:8e:10:2a:b4:47:cb:92:c7:f6:c5:
                    e0:f7:89:39:5a:18:18:be:ce:4e:3e:19:aa:cc:82:
                    d1:bc:38:02:15:c2:61:2b:bf:91:db:d2:f8:da:f4:
                    8f:fa:e1:25:f4:06:ac:45:e5:f2:2a:2f:03:66:21:
                    02:40:27:41:67:75:d1:e4:b5:0b:49:e2:82:6c:4b:
                    3a:ad:ff:af:05:3c:6c:d3:27:47:16:3e:27:77:33:
                    1c:69:7e:d2:e8:7a:c0:50:e5:17:82:4f:d3:5a:be:
                    ad:55:f8:89:e9:70:6f:28:31:98:8b:7b:0a:b2:64:
                    88:91:7b:b9:b9:21:d0:f7:f3:55:8c:16:7c:81:09:
                    8d:60:85:cf:26:0a:d3:46:a1:c4:e7:c0:2c:a8:68:
                    78:4f:5c:bb:dd:ed:d7:8a:4b:dd:6c:5f:02:ba:c2:
                    a6:f1:01:8d:03:84:15:29:b5:d5:4f:b3:5c:4d:a9:
                    1a:44:7a:c6:97:96:11:eb:db:d9:71:c4:cf:ee:e8:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:98:78:C4:6B:A9:17:E9:EC:C6:97:3B:E4:0D:CB:C3:75:BA:60
            X509v3 Authority Key Identifier:
                keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41051.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41051

    Signature Algorithm: sha256WithRSAEncryption
         54:87:f4:aa:bb:77:07:4a:78:c9:c5:e9:38:e6:4e:31:a5:0f:
         c0:c9:e9:58:5d:02:a3:59:08:e4:57:3f:f0:c7:45:73:2f:3d:
         58:b9:73:9e:41:82:05:d5:4d:f5:db:73:86:dd:94:0d:b6:6f:
         3e:f7:77:2a:ac:d2:ee:a8:fe:43:10:02:4f:40:6c:49:67:07:
         73:2f:e0:ab:a8:3b:1c:ec:b5:8f:11:9f:a5:ef:c6:b2:58:16:
         ff:5d:d5:7f:7c:bc:2d:97:6b:e6:8e:3b:00:d3:68:e3:d7:73:
         4c:a1:22:cb:2d:d6:7a:99:b3:f9:51:e1:fe:f4:19:fd:5c:2d:
         45:13:5c:b5:be:8f:be:ea:43:c6:e9:2a:71:33:27:f3:ec:62:
         fd:d9:d7:34:6e:70:fe:20:97:9d:3c:09:3c:7a:f1:a9:92:df:
         63:00:a0:b9:3a:54:76:aa:65:34:78:26:01:0d:77:56:eb:cb:
         c0:95:75:d4:0c:7e:8f:db:74:78:20:52:6a:3e:11:9d:76:76:
         9c:46:05:06:e7:da:0d:c9:47:c4:e5:b8:20:77:d6:90:2e:2b:
         fd:05:b0:f8:75:19:8b:61:0a:aa:d1:ba:2f:6e:40:62:10:5b:
         37:f2:80:e6:6e:28:95:fd:d3:1b:b7:ce:67:00:32:dd:6d:68:
         6c:57:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:16 2026 by rpki-client