Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa
File:                     Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa (raw, json)
Hash identifier:          yoP5UGd9Isi8iSG9JXG0GRxBp5+VrDnOmOlRk93yWB4=
Subject key identifier:   55:CB:3D:41:28:D5:D8:A5:44:DE:B3:DF:FB:69:63:B1:93:B8:FD:0F
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       019F4E68919BEE6B5AD7B0BD91404B5DE56C
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa
Signing time:             Fri 10 Jul 2026 23:41:43 +0000
ASPA not before:          Fri 10 Jul 2026 23:41:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42330
Providers:                AS: 2914
                          AS: 209505
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4e:68:91:9b:ee:6b:5a:d7:b0:bd:91:40:4b:5d:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Jul 10 23:41:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55cb3d4128d5d8a544deb3dffb6963b193b8fd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:e7:6f:4d:84:bd:fa:62:ef:c8:07:10:25:
                    22:c1:4a:b2:d0:2b:f8:23:7f:4d:fb:ed:36:77:8d:
                    64:01:1e:ca:00:21:77:03:ed:00:53:0b:1f:bf:b6:
                    af:9b:7c:ff:c8:3d:b9:83:9f:0c:55:7c:12:75:5b:
                    cd:97:f6:bd:1c:a6:f4:05:d9:50:17:e5:26:9e:da:
                    76:c8:97:99:14:b0:88:1a:2b:c4:db:fb:51:b0:19:
                    54:a1:49:17:19:9b:39:b4:2e:e5:2f:ed:04:7b:62:
                    39:ff:cd:51:10:1d:92:e4:5d:ea:30:17:31:12:41:
                    f6:db:b4:0d:05:53:d9:eb:96:ce:e9:14:3a:72:ea:
                    a3:81:b9:cf:d9:c5:a3:c3:e9:69:b9:33:d9:2e:7c:
                    10:e2:f4:d6:4c:fa:8a:b6:67:e5:5b:cd:92:ab:e4:
                    0e:11:ac:f1:9a:54:93:f7:6b:1f:dd:2c:fc:fb:34:
                    11:ba:1c:cf:51:a3:1d:2e:16:8d:4b:dd:70:f2:19:
                    30:3d:8d:3f:10:7e:00:2a:f5:65:36:b0:fd:60:a6:
                    d7:0b:8f:75:2e:38:32:63:8d:b0:7c:7c:c4:87:ae:
                    02:95:13:3c:c0:c6:ae:9b:cc:84:3d:1f:16:71:9d:
                    47:3f:a5:91:58:0b:72:57:99:43:53:99:c0:cc:9d:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:3D:41:28:D5:D8:A5:44:DE:B3:DF:FB:69:63:B1:93:B8:FD:0F
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42330

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:e1:93:43:8f:6b:90:dc:13:80:d5:cd:b8:40:30:e1:44:
         41:af:43:c0:b6:9f:ce:fd:14:aa:f4:26:e3:c0:08:ec:b3:24:
         d5:99:e0:3e:b0:59:42:0e:74:48:7d:e7:5a:38:31:d4:56:07:
         47:75:9b:2a:c5:9c:c6:34:ae:ae:13:55:69:41:d7:88:1f:68:
         39:f3:20:3b:84:d3:f4:82:8e:32:f8:92:66:9a:fd:f4:2f:fe:
         f2:26:ca:84:fe:c4:f2:64:ca:7c:f6:b4:d0:1a:38:92:a6:b1:
         33:06:df:b7:72:f1:1f:a1:78:c1:96:c2:35:0a:fa:59:78:d0:
         b3:bd:f1:91:6e:a4:37:f3:0a:52:87:4a:0f:89:06:5b:e1:73:
         e3:e5:20:ed:e3:6b:ad:3e:95:7a:2d:1f:b3:9c:42:f1:44:94:
         30:da:ed:9f:d8:d0:52:f6:03:0d:da:55:56:1c:3d:19:b3:c7:
         33:15:dd:8c:5c:2c:a8:5f:ea:68:0d:59:98:76:79:77:22:e0:
         7a:17:18:e6:a4:25:7c:45:9d:1f:cf:cc:c3:b7:9a:62:45:3e:
         24:e4:28:17:d2:bd:3d:b0:d1:ae:68:b2:de:5e:a6:9a:c2:32:
         fb:6c:2d:69:bf:89:cf:27:2d:9f:19:a6:45:06:8a:a4:5d:31:
         ac:16:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:26 2026 by rpki-client