Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/3j6ITLuEAtzvq7lDDH-_99jLsyw.asa
File:                     3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (raw, json)
Hash identifier:          emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=
Subject key identifier:   DE:3E:88:4C:BB:84:02:DC:EF:AB:B9:43:0C:7F:BF:F7:D8:CB:B3:2C
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019F31DA158B38B0DAA25296976E9F217587
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/3j6ITLuEAtzvq7lDDH-_99jLsyw.asa
Signing time:             Sun 05 Jul 2026 10:36:43 +0000
ASPA not before:          Sun 05 Jul 2026 10:36:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57822
Providers:                AS: 49673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:31:da:15:8b:38:b0:da:a2:52:96:97:6e:9f:21:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jul  5 10:36:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=de3e884cbb8402dcefabb9430c7fbff7d8cbb32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:69:e5:63:3a:83:99:63:56:8f:cd:b5:d3:
                    cd:f4:84:32:a3:9b:66:85:13:8d:6c:2d:7d:fe:0d:
                    ea:ab:cc:fb:ee:7e:b0:e9:a3:bc:8f:40:f6:40:bf:
                    9d:c4:f0:6f:a6:ef:a7:23:51:ff:7b:04:94:77:fe:
                    66:2b:a3:f6:e9:58:ea:9b:cb:1a:6c:9f:f7:a0:72:
                    8d:4c:83:13:2b:e1:e8:a6:f7:49:7b:14:ee:aa:df:
                    a6:4b:46:e6:d4:b3:f5:a3:7b:fc:3d:29:19:47:5d:
                    bc:70:36:47:92:04:d2:9b:71:63:30:3a:5d:6a:29:
                    89:b3:6a:1f:3d:b7:d8:2e:44:48:70:61:7c:85:ea:
                    4d:b1:16:26:e7:bd:8c:d5:d8:a5:fc:cc:ef:5d:47:
                    c2:e5:5c:e4:87:66:cd:4a:05:94:2e:df:46:6d:9f:
                    d4:c4:e4:5d:ce:61:41:72:9b:50:03:2e:6b:3b:5d:
                    3a:b9:79:eb:9e:69:4d:99:8f:e5:77:88:89:84:be:
                    dd:e2:e8:ca:18:ef:17:54:53:0a:83:69:f3:60:bd:
                    12:e7:2a:3c:ec:da:27:d4:1d:f7:ac:39:55:73:e5:
                    f6:86:29:32:9a:6c:dc:ea:eb:8f:1d:75:1a:7e:60:
                    84:1a:1f:bc:1e:0c:44:ee:99:2b:30:de:7c:82:1b:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:88:4C:BB:84:02:DC:EF:AB:B9:43:0C:7F:BF:F7:D8:CB:B3:2C
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/3j6ITLuEAtzvq7lDDH-_99jLsyw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57822

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:7b:41:e4:b9:3f:c1:67:63:dc:4b:c0:a5:b1:8f:3b:28:
         5e:4e:4a:4a:1f:9a:21:c2:42:08:46:f4:b4:15:7f:33:7b:05:
         35:a0:b5:9d:6b:c0:80:1a:11:29:eb:83:b4:09:39:89:da:db:
         ad:f2:a1:66:40:9e:d7:e3:05:58:39:6f:37:2d:04:79:ad:a7:
         85:83:12:49:44:6a:51:f6:f3:2c:22:ce:c4:3e:43:86:83:49:
         12:9f:18:4a:49:4f:49:d7:89:c7:5a:da:16:58:a8:29:4a:4e:
         85:57:a4:2a:55:94:5e:25:85:ed:c5:5d:8d:b2:24:0e:41:02:
         08:ce:b3:1b:cb:25:11:3e:29:72:3d:da:36:d4:ed:ca:bd:3c:
         83:1b:ab:57:ee:a4:e2:5e:db:e6:1f:75:83:d9:ba:5e:9e:1d:
         a8:95:8a:d2:9b:e5:09:b9:a0:b2:f1:8a:fc:9e:75:8b:8f:f2:
         59:72:8b:9e:3c:17:bf:79:86:c6:06:76:f3:72:7c:79:0d:77:
         41:54:61:de:b9:8f:f4:8f:0e:12:73:c8:06:df:0c:06:3c:70:
         8e:ea:c4:64:a3:2d:eb:20:44:9f:72:87:92:91:98:16:bb:3c:
         83:c3:e9:b4:d2:e1:8f:8c:98:67:62:2c:aa:6d:4e:36:12:26:
         26:1e:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:32 2026 by rpki-client