Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RiuyBDbZDIVCowq-bdedOucRlMc.asa
File:                     RiuyBDbZDIVCowq-bdedOucRlMc.asa (raw, json)
Hash identifier:          He18fxpY+TqM+BPwBmEK7Zee6YAGWeoKPP1CdTSRbMo=
Subject key identifier:   46:2B:B2:04:36:D9:0C:85:42:A3:0A:BE:6D:D7:9D:3A:E7:11:94:C7
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       019F19011BB9260DE0475A8B7A41930C45CC
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RiuyBDbZDIVCowq-bdedOucRlMc.asa
Signing time:             Tue 30 Jun 2026 14:48:50 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57050
Providers:                AS: 6939
                          AS: 8708
                          AS: 34872
                          AS: 58057
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1b:b9:26:0d:e0:47:5a:8b:7a:41:93:0c:45:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Jun 30 14:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=462bb20436d90c8542a30abe6dd79d3ae71194c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:5e:9c:99:98:12:f2:6a:3d:c8:2b:3b:1d:
                    f8:b0:ea:10:de:5d:fd:d8:7f:6f:f5:67:a0:d8:c9:
                    6d:c9:c5:a4:53:9f:10:9e:a2:c4:32:99:7a:e6:91:
                    43:8e:19:96:a1:c8:14:36:d1:7a:7e:04:e8:62:c6:
                    7e:e7:de:03:18:a7:d5:0c:bd:9a:0a:de:f4:c2:19:
                    b2:30:08:42:1d:86:25:ae:e7:44:1b:4d:9e:c8:e4:
                    c0:de:f5:70:06:8b:22:5c:8f:70:0e:a2:05:1a:8d:
                    28:d4:82:65:29:94:c2:71:84:7c:6f:2b:e7:d4:98:
                    f8:72:a7:23:e9:e8:40:f8:7b:8b:0e:70:8a:4a:c3:
                    b6:3a:1d:96:3d:8e:50:34:38:46:72:c9:33:fa:af:
                    69:26:4f:b0:a7:67:83:fc:5e:ac:d2:87:fa:86:2d:
                    55:fc:92:89:2a:bd:2d:96:3e:de:f4:74:27:3f:e7:
                    7a:07:84:c6:a6:7c:cb:05:c0:be:27:64:24:29:2b:
                    26:58:69:cf:f4:55:71:ef:0c:2b:c8:60:9e:cd:b7:
                    70:cc:65:f3:a8:91:40:dc:4d:9d:f1:80:e9:07:50:
                    f1:b9:b8:20:fe:83:48:23:bc:5e:c9:93:aa:06:11:
                    97:71:45:1b:39:38:cf:8f:62:cf:57:9d:6c:fb:40:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:B2:04:36:D9:0C:85:42:A3:0A:BE:6D:D7:9D:3A:E7:11:94:C7
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RiuyBDbZDIVCowq-bdedOucRlMc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57050

    Signature Algorithm: sha256WithRSAEncryption
         17:95:8f:6b:c2:9f:b3:ea:f7:4a:3d:94:fa:46:bf:b6:50:df:
         f8:f7:e6:f0:fa:32:1f:aa:22:31:ac:c0:6b:7a:67:93:89:89:
         82:e3:7c:65:60:7b:3f:1e:a6:43:05:35:1b:8b:b6:c8:a1:eb:
         0c:65:24:1c:76:dd:e6:23:e3:f2:ac:c1:67:cb:0a:73:54:07:
         09:4f:10:17:b3:73:ca:15:72:39:61:8d:88:7c:90:97:e7:28:
         b7:54:e3:fd:eb:5b:58:49:84:e0:3b:1d:95:b6:82:e7:2b:8b:
         5a:7c:e2:f3:8e:2e:fb:2a:2d:e5:d7:55:10:f3:4c:6c:59:7a:
         c5:59:89:08:03:8b:81:56:e9:88:cb:51:64:d1:af:b9:ef:78:
         6a:2c:ec:e1:57:8e:e9:52:bb:5c:19:21:08:f7:70:8d:75:39:
         b0:d6:a4:fd:50:7f:1c:8d:46:16:43:03:7b:9d:8e:7d:f1:71:
         36:10:37:62:a0:19:d7:52:7a:ea:bd:f4:df:89:0c:78:85:73:
         dd:61:69:83:a5:f8:3d:48:3b:56:85:6d:55:1c:6c:7a:90:64:
         cd:29:c8:39:cf:f7:e1:15:c7:8b:f2:ce:f6:96:aa:ca:65:22:
         ab:92:fa:aa:ec:3c:f2:75:e5:e3:cb:6e:82:da:12:e9:18:2e:
         06:4b:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:24 2026 by rpki-client