Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/8VIP4BNffyhbpmUvr_6dJF_eCJw.asa
File:                     8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (raw, json)
Hash identifier:          2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=
Subject key identifier:   F1:52:0F:E0:13:5F:7F:28:5B:A6:65:2F:AF:FE:9D:24:5F:DE:08:9C
Certificate issuer:       /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial:       019F80F6032E070A50556891D659D3562022
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/8VIP4BNffyhbpmUvr_6dJF_eCJw.asa
Signing time:             Mon 20 Jul 2026 19:17:14 +0000
ASPA not before:          Mon 20 Jul 2026 19:17:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49911
Providers:                AS: 8544
                          AS: 16197
                          AS: 29611
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:80:f6:03:2e:07:0a:50:55:68:91:d6:59:d3:56:20:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
        Validity
            Not Before: Jul 20 19:17:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1520fe0135f7f285ba6652faffe9d245fde089c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:cb:cb:48:f1:81:d1:ff:6d:b9:7b:7d:db:
                    90:19:73:36:b3:f3:af:13:de:5c:ff:3e:af:41:20:
                    0a:1a:5d:2d:06:04:bb:c6:c0:c3:04:b0:f0:dc:48:
                    90:18:66:04:3e:62:ef:4a:43:35:ec:31:92:0e:30:
                    c6:9c:64:48:f6:98:e1:0e:b7:8a:a6:56:8a:30:9a:
                    a9:7a:0b:92:cc:5d:05:74:1a:db:15:c2:e7:91:a2:
                    0b:77:db:30:29:a9:e8:28:2f:43:a0:ce:a6:73:f2:
                    f4:84:7c:06:b1:b7:de:30:32:c2:d9:8f:b6:85:5e:
                    c7:03:f0:4a:7a:89:6e:66:1b:be:c6:76:25:ef:e0:
                    98:88:dc:11:42:9d:7c:66:47:e6:9b:5e:fc:da:46:
                    84:2d:b6:50:9d:18:5e:2d:9e:67:7c:e1:a7:86:c8:
                    2b:c1:c5:b5:9f:2e:a7:d1:3f:98:93:93:11:ab:b5:
                    d2:2e:83:09:aa:33:54:37:5f:38:8c:12:e2:9f:4c:
                    99:b9:5e:b3:14:3b:1a:9f:34:07:f7:67:0d:96:29:
                    fa:61:21:14:b5:d8:b4:b2:24:de:6b:53:db:23:f5:
                    52:83:1b:02:1c:aa:3f:82:6f:8e:81:65:ae:a5:91:
                    cd:a6:c2:64:bb:c2:bb:18:dd:26:77:e4:17:2e:12:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:0F:E0:13:5F:7F:28:5B:A6:65:2F:AF:FE:9D:24:5F:DE:08:9C
            X509v3 Authority Key Identifier:
                keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/8VIP4BNffyhbpmUvr_6dJF_eCJw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49911

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:b5:64:d3:b5:b2:50:95:7f:ce:0d:93:45:ca:da:92:17:
         10:01:87:08:a3:40:87:19:a2:99:60:6b:5f:df:7c:4e:1d:a1:
         c5:e1:cb:c5:92:9a:3b:c6:87:c1:9d:a1:71:4b:39:96:e1:8a:
         aa:13:9f:d2:47:6c:f1:33:eb:7c:0b:12:3a:b8:8a:66:99:89:
         74:2d:4a:bc:2c:9a:02:80:ad:fb:e1:46:4a:6f:26:f6:d8:4b:
         0d:2e:38:b5:6d:8b:11:c3:77:3f:c7:5d:d4:58:9c:8a:83:2a:
         a4:b0:a1:f5:dc:21:a2:40:9f:f8:d5:34:5b:7a:dd:81:6d:51:
         81:15:77:46:e5:b3:86:01:b6:61:94:9c:fc:6e:e0:d0:78:e3:
         fb:18:bd:e1:07:70:10:c5:6c:55:44:ce:51:c8:bd:e4:b9:33:
         e7:f0:84:14:ec:8e:fd:11:a6:6f:d5:67:03:57:2d:08:ea:f4:
         aa:02:5e:23:86:16:58:30:c4:07:79:92:96:eb:d4:0f:fc:ce:
         8d:1f:be:65:08:6c:c8:0a:16:25:3e:90:a2:83:60:24:99:5d:
         56:ae:01:ea:7d:e7:5d:10:e1:c0:4a:b6:d6:7a:71:d9:e9:85:
         4e:89:d5:ac:e1:8c:80:b3:0e:1b:d6:e9:e9:11:5c:3c:2a:a0:
         10:0f:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:30 2026 by rpki-client