Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7awGjvnOLuwHkizQWxmHuCLrtgg.asa
File:                     7awGjvnOLuwHkizQWxmHuCLrtgg.asa (raw, json)
Hash identifier:          jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=
Subject key identifier:   ED:AC:06:8E:F9:CE:2E:EC:07:92:2C:D0:5B:19:87:B8:22:EB:B6:08
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019F19015152B27EAE207BEB4A74BC618362
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7awGjvnOLuwHkizQWxmHuCLrtgg.asa
Signing time:             Tue 30 Jun 2026 14:49:04 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50028
Providers:                AS: 6424
                          AS: 47787
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:51:52:b2:7e:ae:20:7b:eb:4a:74:bc:61:83:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Jun 30 14:49:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edac068ef9ce2eec07922cd05b1987b822ebb608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:fe:a2:3f:63:83:0b:65:93:01:57:44:27:
                    c8:00:a1:86:a3:66:19:79:a8:fd:15:b2:73:80:e8:
                    00:37:e5:78:5e:5c:4e:e0:c9:65:53:f3:66:97:c4:
                    01:33:49:33:a0:01:f0:ee:6b:d3:8a:79:f3:27:9b:
                    b6:72:6b:3e:eb:4e:ea:c9:a2:25:f4:a3:59:a4:15:
                    78:df:07:2d:1e:ff:f7:c7:08:fa:8b:bb:c7:4a:80:
                    e7:c6:9f:09:fc:49:dc:c5:b3:72:82:95:ee:25:a2:
                    14:e5:dd:60:ae:40:6c:91:d6:15:91:19:f2:e3:51:
                    bc:29:5b:74:56:0e:a6:9a:e2:89:9d:f8:ee:af:6d:
                    a3:33:66:8b:95:ef:c2:0e:3a:53:7b:3a:fe:e1:61:
                    bb:0f:9b:96:61:c3:5a:f4:36:dd:0d:45:9a:39:6f:
                    b9:9b:00:bb:2b:02:7e:3a:31:d4:a2:a0:9f:e1:18:
                    4d:93:00:33:09:fe:8d:01:64:26:13:2d:10:72:22:
                    4b:2e:67:00:84:4e:5c:9a:5a:72:d6:bd:22:0b:76:
                    39:2e:74:a6:b1:05:1a:c6:53:5d:5c:cb:ea:6d:6b:
                    17:fb:18:ca:ef:de:4b:93:46:1b:2c:8e:1e:7f:a0:
                    52:d8:8b:a9:b4:7d:58:a2:46:d6:33:ae:cc:02:f9:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:06:8E:F9:CE:2E:EC:07:92:2C:D0:5B:19:87:B8:22:EB:B6:08
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7awGjvnOLuwHkizQWxmHuCLrtgg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50028

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:8a:da:a4:f7:74:53:f4:3e:1a:6d:20:c6:72:9b:ff:46:
         d4:1b:f6:df:5d:9a:a2:00:28:cd:2f:f6:bc:cb:7a:67:28:01:
         88:6b:d3:db:bf:2e:a7:92:de:e9:cc:af:56:29:20:d7:18:a8:
         79:7e:df:fc:09:5d:af:e0:05:51:35:bc:2a:c6:1f:09:ab:3b:
         3b:cd:37:07:1f:34:b6:1d:4b:a2:07:5c:e6:41:e9:b4:35:e7:
         e4:95:94:4c:a4:02:46:21:29:f8:3d:c8:4e:8c:58:db:4b:b0:
         e2:a9:fb:c2:fd:36:28:95:93:c6:85:63:f1:13:06:8c:98:39:
         a2:f8:6b:8c:53:da:22:e9:21:db:8e:30:0d:93:0e:a2:f6:a3:
         60:6a:0a:10:18:f0:8c:76:8e:9a:ba:c6:ff:b1:d5:e1:36:62:
         61:30:7d:fe:9e:e6:45:e0:30:6e:2a:10:75:0a:e0:f9:8d:04:
         62:3a:8e:19:b5:32:77:b5:83:06:da:57:2d:64:a0:6a:7c:aa:
         a1:51:fe:60:2d:40:84:c1:02:0e:ba:45:c2:00:cf:7d:c7:fb:
         64:28:6a:7e:3b:79:48:0f:d7:df:14:1d:cc:37:23:d7:90:04:
         a6:7c:ba:9a:81:35:a2:67:3c:17:8c:11:8a:9f:8d:22:e4:ec:
         f7:a1:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:51 2026 by rpki-client