Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/tSbeP8_EOpw6AyTRFTldETaK43c.asa
File:                     tSbeP8_EOpw6AyTRFTldETaK43c.asa (raw, json)
Hash identifier:          KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=
Subject key identifier:   B5:26:DE:3F:CF:C4:3A:9C:3A:03:24:D1:15:39:5D:11:36:8A:E3:77
Certificate issuer:       /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial:       019F19011C135A6CF715EDD9878788904805
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/tSbeP8_EOpw6AyTRFTldETaK43c.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41457
Providers:                AS: 16276
                          AS: 20473
                          AS: 31898
                          AS: 51202
                          AS: 216078
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1c:13:5a:6c:f7:15:ed:d9:87:87:88:90:48:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b526de3fcfc43a9c3a0324d115395d11368ae377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:d8:d1:17:9e:a6:71:d5:26:c8:3c:1d:d4:
                    52:90:ab:f4:09:29:96:b9:fb:4e:7b:f3:17:52:fd:
                    37:0c:cc:2c:06:29:e2:54:b0:13:a2:20:36:6e:2d:
                    ac:f2:a3:0e:cd:0b:ae:c5:f2:cc:b4:61:e9:63:22:
                    cf:a8:4c:25:1c:f8:8c:99:70:27:05:e8:74:55:d0:
                    f1:ca:44:01:68:c1:1d:ec:92:1c:38:b5:f5:fb:eb:
                    bc:42:54:e7:e0:23:07:7a:9a:d0:95:fc:f5:c2:8d:
                    94:8c:8b:9e:4e:38:fb:39:6e:2f:6e:f0:c5:0d:3f:
                    02:70:21:9a:92:8f:cd:f8:19:83:18:84:ec:91:f6:
                    59:92:c2:8e:55:eb:0f:80:53:d0:9b:64:0e:ce:91:
                    32:c1:98:9e:6a:51:ba:f8:80:47:6d:82:1d:82:db:
                    41:f3:3c:77:21:4f:09:92:f1:63:e2:22:ae:1b:4c:
                    c6:91:5d:02:9a:ad:b3:8c:ca:60:f5:b8:5e:72:c1:
                    02:8d:2b:d1:41:c3:23:c7:72:86:ed:e7:41:c8:05:
                    23:28:06:e5:20:4c:f1:b7:df:ed:32:43:3d:8f:f6:
                    e0:e6:41:ba:6c:9c:a9:fd:79:52:07:6f:8e:f7:03:
                    a4:d6:df:f2:d1:7b:8e:b0:5c:99:d1:ca:f4:a6:d8:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:26:DE:3F:CF:C4:3A:9C:3A:03:24:D1:15:39:5D:11:36:8A:E3:77
            X509v3 Authority Key Identifier:
                keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/tSbeP8_EOpw6AyTRFTldETaK43c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41457

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:06:48:43:a3:0c:23:c8:95:2a:cd:61:c1:85:db:79:31:
         fa:ce:8f:85:b3:74:6b:2e:48:9f:63:8e:fc:a5:70:4e:01:f6:
         36:ec:33:d6:6e:13:a3:36:a3:b8:5d:04:e1:f5:7a:03:ac:65:
         b4:ba:32:4e:df:a4:87:a2:d4:c4:d3:91:3e:aa:04:72:33:6c:
         6e:7f:54:6d:8c:41:65:44:a6:3d:b6:09:01:bb:9c:ad:71:88:
         cf:63:33:f2:77:ba:11:54:fd:45:c2:e7:48:fe:4e:9e:31:af:
         31:c7:2b:4e:ef:c7:79:ed:d4:e2:fd:81:e2:06:b0:31:4d:19:
         e2:7b:33:80:48:c3:3b:78:65:a3:7c:40:df:05:df:f8:f1:0e:
         5b:cf:e7:f0:9b:16:33:d5:eb:2e:ec:15:61:5c:39:b5:a1:0b:
         ee:e2:53:21:9b:d7:99:90:97:b4:cd:f0:16:69:fa:50:e1:65:
         00:8e:ba:66:18:6a:a0:f6:b5:ce:4e:49:20:16:ea:6b:d2:c9:
         56:fd:d4:14:1c:57:4e:1f:71:b2:ef:10:b7:3a:2f:5c:94:56:
         88:2a:1e:47:9f:38:5b:f3:00:9e:81:67:4e:fa:3a:af:2f:0c:
         c4:fd:f9:bb:1f:04:de:e3:31:b2:6e:13:e4:25:7c:ba:5e:ca:
         84:63:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:15 2026 by rpki-client