Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa
File:                     X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa (raw, json)
Hash identifier:          7i3IVTiIuvLVvc+83Pz8wtd/lc6dgYITJMUxdSIn8Do=
Subject key identifier:   5F:CF:0A:1A:7B:12:B8:CB:7E:D5:2E:F5:79:8F:73:43:74:59:EA:D5
Certificate issuer:       /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial:       019D01222BB0E4505E6C51229E8939CA93A1
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa
Signing time:             Wed 18 Mar 2026 13:28:29 +0000
ASPA not before:          Wed 18 Mar 2026 13:28:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48326
Providers:                AS: 6939
                          AS: 31117
                          AS: 39392
                          AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:01:22:2b:b0:e4:50:5e:6c:51:22:9e:89:39:ca:93:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
        Validity
            Not Before: Mar 18 13:28:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5fcf0a1a7b12b8cb7ed52ef5798f73437459ead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:fb:6c:9d:e0:c2:1a:9b:fb:cc:ac:37:27:
                    e5:6a:6c:38:f3:95:29:a0:2c:14:1e:6a:4c:79:69:
                    78:8c:bc:a3:35:95:f5:9e:6f:f9:9d:a0:ee:48:3c:
                    c1:7c:c2:af:ad:7c:28:0e:91:8f:e1:63:41:44:ca:
                    6b:64:94:90:38:ad:0e:bc:ed:55:3d:17:f6:11:95:
                    1b:56:65:a9:f6:1d:57:3e:fc:ed:3f:ea:8e:68:6c:
                    7b:e0:fd:d1:b8:0e:d0:cd:e6:ff:5e:78:e5:32:af:
                    13:8e:39:53:86:7b:3f:24:86:67:4f:1a:3f:f0:a6:
                    76:2e:da:09:5f:eb:76:00:e7:bb:fa:87:01:b7:5d:
                    4f:03:35:c6:42:15:5c:d0:33:7f:5f:fb:a5:02:ed:
                    48:88:3f:71:c4:55:4d:ec:4a:65:cb:12:31:04:4b:
                    9e:a2:fa:4f:eb:a3:46:90:25:0e:d2:4f:61:d1:a2:
                    68:52:75:fe:2e:97:08:55:c5:55:f0:e4:d4:30:12:
                    8e:e2:9b:7e:de:de:f5:02:9e:ea:ec:a3:41:de:54:
                    fe:89:0d:aa:47:99:6c:19:1c:af:6d:94:d7:a7:f9:
                    a0:fa:80:b5:41:10:33:0c:4a:ef:28:a7:5b:71:1f:
                    a1:cd:df:29:50:ed:e6:cb:93:84:fe:b9:48:63:8e:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CF:0A:1A:7B:12:B8:CB:7E:D5:2E:F5:79:8F:73:43:74:59:EA:D5
            X509v3 Authority Key Identifier:
                keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48326

    Signature Algorithm: sha256WithRSAEncryption
         50:57:38:ef:88:65:8e:86:77:81:69:b3:1e:1c:62:a7:c7:62:
         aa:6a:5c:b7:9e:82:0f:cb:01:d9:3f:d9:8c:2e:2f:68:9d:94:
         04:af:28:38:64:c0:21:f2:9c:ef:62:61:18:4e:bc:1a:7a:93:
         b1:db:ed:c9:40:37:1c:bb:cc:4f:50:ca:f4:b6:b7:5d:dc:20:
         07:54:bd:41:a9:c8:68:1f:bc:c3:c2:88:c5:7a:67:04:be:6a:
         b1:ba:86:1b:6b:19:92:ec:ff:41:9c:f2:be:2d:7e:4e:8c:36:
         cf:50:2a:ff:92:ba:3a:fe:a2:f0:6f:45:96:47:c8:f7:cc:e8:
         11:bb:20:fe:c2:ec:bb:86:26:8d:48:a9:7e:c6:4a:fe:a1:78:
         71:f2:24:64:ed:cd:f7:b0:2b:ba:f2:43:9e:aa:7f:50:94:75:
         d7:37:9c:a0:31:b7:44:f3:66:c0:10:ca:02:f2:73:33:4b:39:
         e4:16:7e:58:c8:18:0b:d3:ec:6b:d7:10:b9:ee:60:dc:b3:96:
         ab:78:3d:13:9a:1b:d5:cc:65:f0:59:db:cf:53:8b:16:f7:05:
         94:4a:1d:88:06:e7:76:2a:98:ec:04:66:32:7f:46:e2:89:41:
         41:ef:55:ce:91:0d:49:01:db:7a:a6:d1:0f:7b:dc:b0:a1:1c:
         d2:fb:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:28 2026 by rpki-client