Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/Jf9n1jU0iNZqHiPFX0khcO8APqY.asa
File:                     Jf9n1jU0iNZqHiPFX0khcO8APqY.asa (raw, json)
Hash identifier:          HmCAO4LPXkIwoXgwKfzir3g7UxPnF0W1mI++hpZZWhw=
Subject key identifier:   25:FF:67:D6:35:34:88:D6:6A:1E:23:C5:5F:49:21:70:EF:00:3E:A6
Certificate issuer:       /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial:       019F1901015BDA1E41694AF7955E24B6B356
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/Jf9n1jU0iNZqHiPFX0khcO8APqY.asa
Signing time:             Tue 30 Jun 2026 14:48:44 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:44 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49552
Providers:                AS: 42184
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:01:5b:da:1e:41:69:4a:f7:95:5e:24:b6:b3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
        Validity
            Not Before: Jun 30 14:48:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25ff67d6353488d66a1e23c55f492170ef003ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:d2:ed:85:97:9e:cc:80:8f:f4:f2:d2:20:
                    61:6b:de:46:26:cc:9c:95:f2:a1:41:46:0d:af:92:
                    38:dd:8c:98:1d:1e:9a:1f:07:a9:1f:38:a1:c9:8c:
                    e6:7b:27:0f:46:9e:d2:c7:39:e8:8f:18:6e:a0:38:
                    95:6b:05:26:70:76:f0:e8:29:fc:57:41:ac:a5:21:
                    6c:0c:8e:87:f3:ec:73:0e:a9:14:0d:24:51:c4:90:
                    64:e9:2d:e8:7d:77:d1:21:0d:7c:ba:8c:7a:73:01:
                    ae:9e:26:d8:c3:a0:4b:14:2e:7a:94:c3:6e:d2:17:
                    a2:56:f6:18:fd:6d:d7:9e:13:99:c7:8b:76:1d:88:
                    8b:4c:22:4d:f1:f8:47:be:18:24:9a:ba:03:a0:d2:
                    90:30:4f:d0:32:8f:e0:89:7e:d3:a0:77:3f:cc:f7:
                    96:17:be:6f:e5:13:2a:3c:ee:46:86:df:b6:ce:e0:
                    12:cc:4c:6f:b8:67:9d:b9:22:37:62:a9:b9:96:9f:
                    e4:cf:a4:d0:fa:f8:07:dc:21:67:b6:e4:c5:a9:5a:
                    3e:b6:6b:61:8d:b3:51:73:cb:45:6e:6f:51:f9:65:
                    05:69:11:19:d7:aa:f7:e8:ce:da:73:dd:f5:ca:d9:
                    89:1d:cc:d2:d8:5e:0e:45:f9:e6:fb:37:b2:be:8d:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FF:67:D6:35:34:88:D6:6A:1E:23:C5:5F:49:21:70:EF:00:3E:A6
            X509v3 Authority Key Identifier:
                keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/Jf9n1jU0iNZqHiPFX0khcO8APqY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49552

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:80:3f:3d:e3:8b:cb:95:b0:3d:4c:d6:5d:94:fb:03:91:
         2d:a6:c2:12:e2:8a:24:90:f1:6f:cb:63:e7:eb:d5:ba:21:50:
         af:18:c8:bb:2b:f9:81:93:6e:12:0e:97:6c:df:54:45:ea:96:
         d2:34:da:a3:af:0d:a5:b8:73:c1:80:88:42:fa:70:cf:aa:82:
         96:f3:3a:9c:28:c6:7d:08:61:91:91:10:28:49:f8:4d:27:8c:
         da:d9:a0:d3:01:12:f7:12:42:09:ba:8b:d6:03:b1:fa:b1:99:
         fb:44:f1:e1:fa:05:90:3c:a7:93:fd:97:b8:c2:0d:90:f1:31:
         44:59:a1:ba:06:29:a6:55:57:47:e7:af:a7:ff:63:b8:b1:82:
         28:5c:e1:dd:fb:09:d4:28:e0:9b:dc:5f:3f:78:2e:62:42:58:
         d9:8f:38:24:79:71:ac:df:fe:c3:d2:b3:2e:33:0d:7c:1c:c9:
         39:82:27:11:74:08:2f:24:5f:16:fc:01:35:7a:2d:10:ce:d1:
         05:26:1d:7a:04:6a:3c:ba:41:e0:5c:e8:e9:0c:a6:7d:21:86:
         e3:26:6f:4c:76:2e:cf:2d:f6:b4:c4:bc:17:5e:66:8d:41:f4:
         1b:77:a2:9a:88:b6:af:f8:2d:d1:8d:16:0c:9e:ff:3a:1a:4f:
         67:00:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:59 2026 by rpki-client