Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UMBADPmHHgDZKMzHfthGrwp5OI8.asa
File:                     UMBADPmHHgDZKMzHfthGrwp5OI8.asa (raw, json)
Hash identifier:          R3dkgSia4Z4c6J2EEiXrzXeUHBgOo67dEot1UkUA4t0=
Subject key identifier:   50:C0:40:0C:F9:87:1E:00:D9:28:CC:C7:7E:D8:46:AF:0A:79:38:8F
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       01A0D8E5CECED4FBC2AA5B711248CE522806
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UMBADPmHHgDZKMzHfthGrwp5OI8.asa
Signing time:             Fri 25 Sep 2026 14:08:54 +0000
ASPA not before:          Fri 25 Sep 2026 14:08:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48040
Providers:                AS: 6204
                          AS: 6939
                          AS: 42708
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:e5:ce:ce:d4:fb:c2:aa:5b:71:12:48:ce:52:28:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Sep 25 14:08:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50c0400cf9871e00d928ccc77ed846af0a79388f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:86:2a:69:dd:f4:b5:f0:90:e2:55:1a:1f:
                    2f:5d:ac:6e:57:12:30:98:81:49:b6:b1:8b:72:bc:
                    a5:23:44:88:ed:bf:60:01:5e:d1:6f:77:f9:9a:1b:
                    95:5f:88:31:1a:60:2f:7a:60:79:4a:97:ff:cf:b5:
                    57:99:e1:88:4d:1e:43:2b:c8:7e:61:f2:9e:84:5c:
                    16:52:45:f3:9c:e2:42:50:03:1c:23:ba:38:e3:88:
                    2c:ff:9d:4a:d1:13:a0:e5:9f:d3:6b:32:fe:49:ca:
                    f7:8e:47:20:28:95:3a:63:07:ac:f9:7e:61:88:1f:
                    f7:b1:de:e2:07:8f:82:77:5f:c0:e7:86:02:3c:39:
                    b3:39:71:6c:fb:89:2c:bd:c4:83:d6:a8:4b:3c:7e:
                    90:ea:88:03:5f:50:cf:09:65:b1:b9:eb:df:ba:cb:
                    89:1c:9e:45:ba:c3:a0:90:cb:2d:a7:d7:6a:3d:56:
                    46:dd:f0:0f:f6:84:a7:c0:5f:e0:87:88:2f:97:8e:
                    a1:26:10:84:7a:b4:68:97:a6:62:45:b6:40:74:4c:
                    2c:00:fd:6d:59:e0:de:23:2f:59:01:c1:ff:0a:d5:
                    e9:c3:47:1d:77:b2:d8:73:9e:9e:d3:f0:46:fc:8d:
                    e0:2e:bb:77:e6:9a:48:e3:fc:30:d5:b2:14:1c:6c:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:40:0C:F9:87:1E:00:D9:28:CC:C7:7E:D8:46:AF:0A:79:38:8F
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/UMBADPmHHgDZKMzHfthGrwp5OI8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48040

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:c1:18:e9:ef:03:41:20:88:aa:51:30:13:a4:62:4a:41:
         f9:8e:87:a9:8a:d0:54:c3:ca:d4:85:50:e7:a4:90:97:2e:7a:
         f7:7d:d3:e6:4e:7d:80:62:85:23:d6:28:2c:51:f2:78:fa:90:
         f1:22:78:f3:24:68:48:4c:86:f3:60:ad:e7:74:28:f7:26:8e:
         f7:6b:6b:4a:e7:88:ee:33:e7:d4:18:ce:39:43:01:da:05:fb:
         84:4b:20:b7:64:ac:49:75:e0:e5:5b:e1:3c:13:af:46:50:b3:
         de:f5:82:4a:12:88:f6:9e:5d:5d:e9:aa:bd:aa:12:2e:74:0a:
         8c:6e:cc:60:3b:0e:d2:5a:b9:ac:8c:28:2c:c0:84:f3:48:42:
         f6:f5:6b:f2:28:78:97:f9:ce:c0:c0:2a:76:b0:1c:b4:49:3c:
         ed:4e:54:63:c5:db:54:cd:76:89:fd:8e:97:b7:1a:ba:f1:6e:
         cb:a3:b5:49:4f:39:b6:7b:d3:c6:11:df:35:98:c7:91:1f:90:
         bf:0e:76:49:f3:0f:8f:0d:b6:3b:fd:0a:14:a8:54:82:53:97:
         bc:71:4f:3f:70:03:ea:23:68:6a:e1:70:9a:1c:f1:f8:b1:15:
         a1:3b:c2:6a:ed:ce:cc:a3:21:12:0c:06:c6:ae:7c:42:c2:16:
         a6:d6:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:12 2026 by rpki-client