Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa
File:                     C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (raw, json)
Hash identifier:          6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=
Subject key identifier:   0B:D6:39:F0:12:B0:91:AC:34:64:74:E5:FE:3D:2D:C5:CA:48:F8:75
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019D1F40E233CFCB9A98CF7FDCAC72A5DAC7
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa
Signing time:             Tue 24 Mar 2026 09:50:39 +0000
ASPA not before:          Tue 24 Mar 2026 09:50:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            30823
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 6762
                          AS: 50263
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1f:40:e2:33:cf:cb:9a:98:cf:7f:dc:ac:72:a5:da:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Mar 24 09:50:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0bd639f012b091ac346474e5fe3d2dc5ca48f875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:0b:17:72:65:a8:27:4a:40:a1:70:e0:0b:
                    88:29:88:a0:da:c5:5d:a0:70:ab:d9:f9:f6:b9:86:
                    4b:9c:db:10:14:5c:96:33:62:5a:f5:f3:a0:38:2b:
                    30:1c:fa:17:28:e3:d3:00:88:ea:fd:17:78:f4:dc:
                    5b:8f:2f:66:eb:76:ef:b7:22:9a:2f:5e:e9:4d:e1:
                    f8:6a:79:d4:a6:89:dd:f9:f8:1a:57:19:5f:51:44:
                    20:99:61:9f:c8:9e:9d:bd:25:b4:c1:30:34:e4:86:
                    49:49:f5:c4:f1:3d:fb:e1:71:84:e2:73:e5:31:d4:
                    67:f2:b8:a5:4f:c4:18:51:a5:de:f8:04:fe:de:96:
                    b8:a5:00:19:51:3c:dd:e5:92:ae:d2:6e:c8:c8:da:
                    49:32:42:75:c2:b5:f4:8b:b1:aa:af:27:8e:d7:39:
                    e1:0c:66:8a:a5:d1:c1:cf:8c:d6:df:ac:69:36:89:
                    c5:7c:ad:40:f1:fa:8b:d1:a6:8c:6b:19:9e:47:b0:
                    8d:67:66:d0:c2:ef:4d:ac:6f:19:f6:26:ff:b6:6b:
                    5b:95:4f:d3:a4:e4:4b:4b:0e:da:e4:85:74:f1:37:
                    f5:a2:a7:e0:74:50:a2:d2:5e:fc:10:eb:03:4c:33:
                    fd:51:22:63:fa:b8:64:12:3c:2b:37:e1:74:0e:ac:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D6:39:F0:12:B0:91:AC:34:64:74:E5:FE:3D:2D:C5:CA:48:F8:75
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30823

    Signature Algorithm: sha256WithRSAEncryption
         22:18:ec:87:ed:20:fd:40:4f:b4:94:44:6d:13:d5:89:10:71:
         9f:21:83:1d:1f:80:ec:83:f9:d2:59:44:ab:60:28:db:c3:85:
         cf:18:cd:ca:a3:4c:a3:3b:90:80:e5:cb:fb:05:3d:33:2b:6b:
         f4:a0:4d:88:d2:b5:df:d0:50:30:32:18:59:b4:bc:9d:be:32:
         a8:56:fe:39:c5:d3:5b:6c:62:23:19:34:ae:39:6b:19:8c:14:
         16:06:8c:71:6f:fa:d2:07:d2:ff:9e:40:16:a0:8a:77:33:a2:
         7e:32:9e:0f:1c:b9:33:3b:e5:c3:80:cb:85:04:42:b0:ed:f7:
         24:c0:d3:1a:15:b2:f1:9c:0b:00:7c:e9:bf:9c:22:89:a5:12:
         ac:a3:a2:c7:29:f9:67:ec:40:e9:d4:b1:90:43:85:35:70:e9:
         0f:2f:46:33:6e:f2:e3:a4:50:ae:f4:ba:0b:01:5f:7b:de:23:
         86:ae:a4:0c:e7:8e:81:72:91:42:ed:a3:91:33:c4:d7:c7:ee:
         60:fa:53:65:2d:60:28:20:08:9d:70:48:eb:6e:f5:11:85:bf:
         75:6c:e6:67:28:c5:b4:60:53:83:44:3d:68:21:95:fe:41:4c:
         01:f1:96:5d:69:76:e6:1d:9c:4e:37:62:2d:2b:ed:20:ce:cd:
         1f:74:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:05:34 2026 by rpki-client