Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/zsYYk54DnHl7eLevLUFDMgKz4P8.asa
File:                     zsYYk54DnHl7eLevLUFDMgKz4P8.asa (raw, json)
Hash identifier:          6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=
Subject key identifier:   CE:C6:18:93:9E:03:9C:79:7B:78:B7:AF:2D:41:43:32:02:B3:E0:FF
Certificate issuer:       /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial:       019CF663EC7341FB085A054944420AEE445E
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/zsYYk54DnHl7eLevLUFDMgKz4P8.asa
Signing time:             Mon 16 Mar 2026 11:24:29 +0000
ASPA not before:          Mon 16 Mar 2026 11:24:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49034
Providers:                AS: 196954
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:63:ec:73:41:fb:08:5a:05:49:44:42:0a:ee:44:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
        Validity
            Not Before: Mar 16 11:24:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cec618939e039c797b78b7af2d41433202b3e0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:b7:7e:84:47:ed:38:9b:de:75:71:20:44:
                    bc:e9:d1:68:d6:0b:72:89:64:52:9b:ea:64:4b:df:
                    6c:e4:0c:ba:93:f3:e3:25:b1:b7:d7:9b:3e:d1:37:
                    a1:4a:d3:ba:d9:45:8b:a8:46:2f:5e:76:8f:59:08:
                    12:d2:8a:25:5f:fc:c6:34:a5:11:16:c0:00:54:e6:
                    2a:1c:70:f6:80:85:4c:d8:24:f1:a9:f4:a5:28:f9:
                    4a:50:97:68:8d:cc:9e:ff:9a:08:5e:ff:ee:64:f5:
                    30:10:2a:24:6c:da:1e:12:a3:12:d5:94:b0:72:71:
                    e6:b0:a8:54:52:65:09:6f:36:4c:de:ce:60:f3:67:
                    a7:37:60:f9:32:ab:a9:3e:bd:06:ab:1f:f3:fd:1a:
                    6d:17:14:18:bf:fc:40:e2:b5:c6:b9:55:f9:4d:9f:
                    1c:aa:af:e2:bc:b5:7f:33:5a:d9:ec:cd:ea:9e:ec:
                    d1:f5:ac:9a:3d:f9:25:04:b9:77:12:fc:80:9d:2b:
                    4b:2c:53:5f:af:0a:22:fe:3d:8b:b9:18:62:fc:c5:
                    53:2f:a0:82:7e:64:eb:a7:24:2a:d0:ac:12:04:9d:
                    59:43:c9:d6:9c:32:c1:63:37:e3:b6:08:4a:a6:47:
                    9e:92:58:f6:c3:ec:cd:d1:7c:3b:b8:a7:98:cb:cf:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:18:93:9E:03:9C:79:7B:78:B7:AF:2D:41:43:32:02:B3:E0:FF
            X509v3 Authority Key Identifier:
                keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/zsYYk54DnHl7eLevLUFDMgKz4P8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49034

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:ad:65:31:07:82:1f:fc:5d:58:b4:20:0b:55:0f:11:cb:
         9b:7f:0d:d6:f1:9d:d2:22:8b:69:52:8b:54:13:00:86:f2:45:
         fe:61:81:15:26:12:0d:6c:f6:52:bb:c5:e3:09:96:90:01:6e:
         66:7c:ff:1f:f2:49:4b:20:ac:4d:52:bc:9d:5b:c3:f5:d4:fb:
         fa:b9:0e:5b:2c:12:00:03:13:fe:af:88:07:e4:c4:fb:08:3b:
         57:35:7c:22:ff:58:c4:4d:42:28:0c:0b:0a:17:43:e5:fc:0f:
         22:f3:4e:f5:bf:a0:3e:50:ff:37:4f:58:09:ad:b0:0b:a9:63:
         6b:7a:4e:aa:f5:bc:eb:a9:52:bc:8d:31:ae:73:67:93:d1:8c:
         62:9f:68:4e:97:df:46:f0:07:b2:32:2b:5a:c3:97:0f:74:71:
         6c:da:66:8f:e8:d6:c5:1a:f3:04:a3:63:05:7c:4e:f1:d0:d0:
         e7:bd:ed:c6:49:49:ab:d6:b1:1b:5d:c9:b8:43:5f:7e:67:d1:
         e5:63:72:5b:ea:2c:06:c2:95:f3:78:2d:b7:7a:77:58:8e:f7:
         23:0b:93:c9:b2:ff:38:30:ed:c2:fc:f9:0e:25:e2:78:9a:29:
         85:c0:f7:63:ae:71:a1:fe:d1:2c:90:b9:82:e5:af:35:a5:e8:
         27:a4:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:27 2026 by rpki-client