Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MEF3inUBFdwUSzzBPPrNynpqKew.asa
File:                     MEF3inUBFdwUSzzBPPrNynpqKew.asa (raw, json)
Hash identifier:          qyxeY4oHRpmv1kLBWmfROmIvHNMqEegs2w5oRBvEBq4=
Subject key identifier:   30:41:77:8A:75:01:15:DC:14:4B:3C:C1:3C:FA:CD:CA:7A:6A:29:EC
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       019F19014AB7885B98B3B8CA31BE82F991F7
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MEF3inUBFdwUSzzBPPrNynpqKew.asa
Signing time:             Tue 30 Jun 2026 14:49:02 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:02 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49549
Providers:                AS: 24589
                          AS: 24651
                          AS: 34535
                          AS: 43513
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4a:b7:88:5b:98:b3:b8:ca:31:be:82:f9:91:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Jun 30 14:49:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3041778a750115dc144b3cc13cfacdca7a6a29ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:82:91:18:21:24:66:0a:95:19:3a:b7:8c:
                    da:44:78:ef:bb:1d:a9:48:c5:64:a7:9c:a2:6d:01:
                    e5:30:1b:35:ee:a3:38:21:6e:01:a7:74:4e:43:c9:
                    d8:51:25:a2:dd:89:0a:63:f3:2c:f2:7c:52:8c:d2:
                    b1:ae:72:23:db:97:ef:d1:e5:4f:02:c9:51:33:13:
                    d6:1a:5c:71:0b:a5:27:df:22:d8:c7:fa:b6:1d:96:
                    0c:df:6f:9a:85:be:0d:d4:69:dc:85:52:26:b2:63:
                    a2:8b:2d:89:57:f3:25:5f:86:a2:b9:4a:5e:21:09:
                    93:d5:5d:7d:df:cb:17:f7:91:2c:b9:68:09:fa:ef:
                    6f:50:e6:a1:ce:7f:32:31:67:85:44:4b:63:f6:b5:
                    a9:70:97:67:bb:0f:c8:1b:a7:28:55:e3:8f:d6:f4:
                    a2:85:ea:f5:87:4f:d5:92:bd:91:f4:0c:7a:8a:b3:
                    e2:61:14:e7:87:df:2d:8a:7a:c8:86:95:74:25:02:
                    ff:a0:ca:a3:66:a5:bf:0c:a9:0f:de:b6:0c:e6:19:
                    37:21:72:75:8b:bc:00:87:d8:44:3e:44:1f:8d:5e:
                    1d:46:79:c6:1f:1d:df:69:6a:9d:d0:33:62:30:0d:
                    fc:65:02:ce:66:fe:58:bf:b5:ec:f3:3b:51:1e:79:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:77:8A:75:01:15:DC:14:4B:3C:C1:3C:FA:CD:CA:7A:6A:29:EC
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/MEF3inUBFdwUSzzBPPrNynpqKew.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49549

    Signature Algorithm: sha256WithRSAEncryption
         a7:1b:07:b9:e5:04:a6:ab:2e:7a:98:e4:36:49:8c:6f:d3:9c:
         61:4b:be:d2:7d:89:9e:0a:ec:11:3b:54:cc:bd:70:9f:ba:4e:
         01:03:f4:ba:cc:05:bc:30:cd:bc:6f:be:e3:66:fd:92:b4:1a:
         9d:4f:2c:61:2e:49:59:b3:f0:59:51:53:42:ad:3f:e6:4f:b4:
         2a:13:06:a2:6c:3b:11:d2:22:74:d0:23:46:b1:41:2c:46:95:
         3c:43:1d:67:ee:9c:ec:8d:4b:68:ae:ea:dc:00:06:02:4c:ee:
         6a:8f:c4:86:87:df:f6:65:96:1e:98:a3:ea:e0:90:71:44:22:
         1f:07:e5:62:54:4f:11:5e:ed:07:63:85:a1:ba:0e:17:f9:6f:
         96:01:c3:9d:0c:5b:d2:d6:97:f3:a2:bd:a8:6c:53:d2:fe:a0:
         6f:62:49:a9:98:68:75:8a:a1:a5:69:58:9e:84:9d:41:c2:fe:
         d4:57:8c:6a:87:cd:ba:6d:58:cc:43:cc:da:6b:ca:ee:5f:98:
         8a:09:df:2c:59:11:8b:24:1f:ab:c9:42:ad:73:2f:ef:fd:07:
         af:3c:6e:49:03:61:c8:86:58:f2:d4:38:1e:07:20:16:a5:60:
         6a:a0:d0:69:97:d3:d7:e3:d8:24:bf:50:17:1d:af:27:19:c5:
         9f:ae:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:49 2026 by rpki-client