Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/a32MUCBEBD7yImaxmD5xprVyEpU.asa
File:                     a32MUCBEBD7yImaxmD5xprVyEpU.asa (raw, json)
Hash identifier:          LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=
Subject key identifier:   6B:7D:8C:50:20:44:04:3E:F2:22:66:B1:98:3E:71:A6:B5:72:12:95
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       019CDCFFB4BBC81FC93A6B9CD423581AD08A
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/a32MUCBEBD7yImaxmD5xprVyEpU.asa
Signing time:             Wed 11 Mar 2026 13:04:31 +0000
ASPA not before:          Wed 11 Mar 2026 13:04:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50446
Providers:                AS: 174
                          AS: 1299
                          AS: 3215
                          AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:ff:b4:bb:c8:1f:c9:3a:6b:9c:d4:23:58:1a:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: Mar 11 13:04:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b7d8c502044043ef22266b1983e71a6b5721295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:b1:67:a8:6e:9b:6e:14:23:dc:67:4d:fb:
                    d3:20:66:d8:c4:f2:7e:12:24:cf:b6:80:b1:2d:8d:
                    0c:1c:ec:22:45:9b:78:1d:cb:1a:7a:ad:04:e3:eb:
                    5c:fd:73:29:f5:fd:45:91:ce:2f:f3:a2:b4:f3:68:
                    69:62:97:10:37:81:03:f4:60:d7:aa:0b:4d:14:84:
                    e9:5f:1e:57:58:dc:ea:ad:6a:9b:35:f5:87:b1:f5:
                    39:d5:63:8b:24:b3:17:e5:58:7e:cf:78:c0:7b:94:
                    41:79:15:43:e0:6c:c0:38:c9:ac:e0:82:26:bc:fa:
                    75:09:59:69:d2:3e:7c:3e:6e:6d:62:56:59:0c:64:
                    d4:7f:ec:fd:22:c2:68:50:77:88:d4:5f:ee:00:ee:
                    86:9b:5f:ef:0d:0e:f3:54:25:a8:32:37:59:7b:54:
                    71:93:a0:ef:b2:fe:67:8b:40:c5:de:b2:fd:49:ff:
                    f4:ab:79:a1:f2:35:70:b7:60:d2:df:c5:14:03:71:
                    90:cc:44:9e:71:3e:3d:f2:7e:ef:e8:70:8c:8a:a2:
                    75:b2:da:8e:ee:7f:46:38:13:78:03:68:d4:1d:a2:
                    f4:3b:31:09:18:82:62:30:ce:34:76:8f:cd:89:67:
                    f7:0e:8f:f4:dc:dd:b6:cf:f9:46:99:a1:b5:5a:6e:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:8C:50:20:44:04:3E:F2:22:66:B1:98:3E:71:A6:B5:72:12:95
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/a32MUCBEBD7yImaxmD5xprVyEpU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50446

    Signature Algorithm: sha256WithRSAEncryption
         38:32:25:b3:dd:ce:18:c4:93:77:65:9d:68:05:b8:9f:07:32:
         ae:ab:3c:9c:9b:9a:22:fa:6a:0e:84:c5:da:cc:42:75:f2:c1:
         a5:38:4c:3a:3e:84:2e:15:d5:e5:4f:8f:36:6f:5d:f2:b0:cc:
         2e:69:20:71:f9:c5:6d:1c:af:05:8b:75:9d:80:b6:9b:dd:07:
         40:aa:2f:fc:54:3c:0d:42:97:b4:01:32:a3:da:5c:94:04:57:
         a2:89:22:f3:09:80:26:26:88:b4:22:b2:60:4d:25:c0:4b:50:
         7d:54:b7:28:ec:e1:b3:b5:27:cf:ef:9c:dd:24:57:ea:3e:b5:
         97:27:33:65:0b:03:9a:19:bb:b5:a4:52:8a:60:08:67:fa:5a:
         64:ad:ac:ca:4e:bf:4a:9a:d2:db:f1:5e:6a:46:d3:71:c5:dd:
         59:ea:c3:34:b8:7d:4d:96:35:dd:b8:3a:3d:06:2e:db:2f:c6:
         c3:e5:90:b9:53:4a:87:ca:af:5a:7c:18:c5:74:32:88:18:1c:
         e8:8e:76:e2:ec:6b:a6:c3:f9:0d:5d:14:de:12:2c:0a:e1:f4:
         24:3e:6a:c5:ab:32:fd:89:bc:a2:e3:92:32:4e:d0:30:c0:88:
         30:5c:97:fb:cf:71:53:8a:c3:37:5f:d1:2a:54:9f:60:b3:30:
         fb:4d:8f:73
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzc/7S7yB/JOmuc1CNYGtCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2
ZTZjOTAwHhcNMjYwMzExMTMwNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjdkOGM1MDIwNDQwNDNlZjIyMjY2YjE5ODNlNzFhNmI1NzIxMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aqxZ6hum24UI9xnTfvTIGbYxPJ+
EiTPtoCxLY0MHOwiRZt4Hcsaeq0E4+tc/XMp9f1Fkc4v86K082hpYpcQN4ED9GDX
qgtNFITpXx5XWNzqrWqbNfWHsfU51WOLJLMX5Vh+z3jAe5RBeRVD4GzAOMms4IIm
vPp1CVlp0j58Pm5tYlZZDGTUf+z9IsJoUHeI1F/uAO6Gm1/vDQ7zVCWoMjdZe1Rx
k6Dvsv5ni0DF3rL9Sf/0q3mh8jVwt2DS38UUA3GQzESecT498n7v6HCMiqJ1stqO
7n9GOBN4A2jUHaL0OzEJGIJiMM40do/NiWf3Do/03N22z/lGmaG1Wm406QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGt9jFAgRAQ+8iJmsZg+caa1chKVMB8GA1UdIwQY
MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt
YjMzNDQwYWFhYjcyLzEvYTMyTVVDQkVCRDd5SW1heG1ENXhwclZ5RXBVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy
LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFDjANBgkqhkiG
9w0BAQsFAAOCAQEAODIls93OGMSTd2WdaAW4nwcyrqs8nJuaIvpqDoTF2sxCdfLB
pThMOj6ELhXV5U+PNm9d8rDMLmkgcfnFbRyvBYt1nYC2m90HQKov/FQ8DUKXtAEy
o9pclARXooki8wmAJiaItCKyYE0lwEtQfVS3KOzhs7Unz++c3SRX6j61lyczZQsD
mhm7taRSimAIZ/paZK2syk6/SprS2/FeakbTccXdWerDNLh9TZY13bg6PQYu2y/G
w+WQuVNKh8qvWnwYxXQyiBgc6I524uxrpsP5DV0U3hIsCuH0JD5qxasy/Ym8ouOS
Mk7QMMCIMFyX+89xU4rDN1/RKlSfYLMw+02Pcw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:38 2026 by rpki-client