Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/Y1PRKyjCPvwdXNp-Fs65Ke41iwc.asa
File:                     Y1PRKyjCPvwdXNp-Fs65Ke41iwc.asa (raw, json)
Hash identifier:          gAKM4vbSSXwOG7g6sThTXMB1jmEXB9/rJVWB4pw362Y=
Subject key identifier:   63:53:D1:2B:28:C2:3E:FC:1D:5C:DA:7E:16:CE:B9:29:EE:35:8B:07
Certificate issuer:       /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial:       019DE3EB53B4A688AF8060FDE362FB939D07
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/Y1PRKyjCPvwdXNp-Fs65Ke41iwc.asa
Signing time:             Fri 01 May 2026 14:22:23 +0000
ASPA not before:          Fri 01 May 2026 14:22:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202831
Providers:                AS: 31500
                          AS: 35598
                          AS: 49612
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e3:eb:53:b4:a6:88:af:80:60:fd:e3:62:fb:93:9d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
        Validity
            Not Before: May  1 14:22:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6353d12b28c23efc1d5cda7e16ceb929ee358b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:ce:96:85:4b:8b:10:9e:72:36:ea:ae:1d:
                    fd:82:46:c7:1b:b2:fa:7a:1b:91:7d:69:ea:87:cc:
                    59:f3:c6:f8:a0:60:72:4c:58:36:9a:cb:3b:a2:df:
                    9a:00:7a:31:fb:ad:82:b5:f3:31:14:1d:75:33:65:
                    ae:26:2b:fe:32:77:02:4b:37:fd:a1:4a:97:78:f9:
                    4f:0e:62:d0:62:a5:7a:07:79:f1:90:98:09:54:8e:
                    37:fb:4d:c4:9f:de:ec:2a:7a:49:7d:ec:56:9b:ed:
                    4f:92:f2:33:02:84:b0:89:b1:f5:05:53:47:c1:81:
                    25:c8:1e:14:3d:6a:2e:2e:fa:06:d4:58:f9:85:76:
                    d5:cc:0a:2c:15:bf:63:27:b2:65:47:e6:13:a2:c8:
                    33:0b:25:d9:f0:5c:7d:59:1d:dc:43:d5:d1:e1:ea:
                    2a:97:5f:fb:a1:e2:1b:18:ba:72:08:53:be:27:b7:
                    ce:c0:c9:2b:d5:f1:69:9b:ac:de:ed:5c:5a:84:49:
                    d6:30:57:c8:98:6d:9d:79:9a:e1:56:5b:c6:74:72:
                    f9:d3:11:4e:b4:a5:d7:20:b9:88:84:81:34:26:b3:
                    9e:04:8d:11:a3:36:79:6b:16:6f:d3:e7:78:1a:d6:
                    76:7d:3a:0b:a3:ca:af:4d:f9:f4:05:90:8d:08:03:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:D1:2B:28:C2:3E:FC:1D:5C:DA:7E:16:CE:B9:29:EE:35:8B:07
            X509v3 Authority Key Identifier:
                keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/Y1PRKyjCPvwdXNp-Fs65Ke41iwc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202831

    Signature Algorithm: sha256WithRSAEncryption
         20:80:49:1a:df:2f:c7:53:9b:bc:4f:ae:c6:4c:31:4a:9b:ef:
         ec:0f:13:20:27:7e:fd:20:fa:87:b2:db:f1:60:5b:9b:48:43:
         15:39:73:11:a2:14:0e:16:be:27:00:c3:7d:b1:e2:67:1e:0b:
         d5:0d:b1:fc:a7:48:5c:04:d6:28:50:3f:5e:a7:b8:12:89:34:
         0e:ff:d4:eb:26:56:8b:79:46:83:55:e7:cd:ba:4e:94:a9:b6:
         c7:b0:95:3f:81:87:5a:97:03:10:10:5b:ac:dc:a2:b3:23:f1:
         3a:20:39:2a:3a:bf:d4:36:48:c8:69:af:20:48:87:61:3c:e3:
         2c:66:ef:90:d6:89:76:6e:d8:f9:f8:10:8b:1f:97:45:19:75:
         c5:a0:83:35:53:35:1d:28:7c:a6:64:3b:d5:15:98:02:ec:72:
         c9:f1:b0:bd:96:89:d0:f2:e6:09:d9:11:1a:e3:cd:22:5e:33:
         e9:fa:6f:96:d7:85:da:10:9d:1f:fd:f3:eb:b3:b0:a4:71:44:
         3d:56:4a:7e:e1:b5:20:5f:d4:d7:ba:cc:ae:e3:c8:ba:01:b1:
         72:6e:10:9b:b5:e3:8b:7f:f4:96:3b:e0:ab:1b:53:8d:de:25:
         65:12:07:f1:75:e6:eb:d7:9f:6b:1f:66:39:9b:dc:b8:07:60:
         33:7b:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:21 2026 by rpki-client