Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XhlWvOuPByfB-7AWpwMMHY_c61I.asa
File:                     XhlWvOuPByfB-7AWpwMMHY_c61I.asa (raw, json)
Hash identifier:          eRpOvAcHiB2Ij5RTRLDtQcI1KXL+taNjhex9SR0OZiQ=
Subject key identifier:   5E:19:56:BC:EB:8F:07:27:C1:FB:B0:16:A7:03:0C:1D:8F:DC:EB:52
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E41333CAC9E0E80B94AA9C150A299EF5D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XhlWvOuPByfB-7AWpwMMHY_c61I.asa
Signing time:             Tue 19 May 2026 17:05:37 +0000
ASPA not before:          Tue 19 May 2026 17:05:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49006
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:33:3c:ac:9e:0e:80:b9:4a:a9:c1:50:a2:99:ef:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:05:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e1956bceb8f0727c1fbb016a7030c1d8fdceb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:96:5e:22:24:96:7f:40:16:16:01:45:f4:
                    45:17:cc:c8:2f:2d:18:cd:da:5a:7c:b1:f4:87:f9:
                    29:f1:52:3b:9b:74:5a:00:64:3f:1b:db:c4:9f:47:
                    fd:2b:f4:fc:41:2d:41:21:48:07:d8:b2:8c:5f:dd:
                    41:40:d2:0a:8c:8b:30:16:ac:f3:8f:02:e4:54:89:
                    8d:96:85:d6:50:64:c1:5e:77:1b:bd:de:15:d9:9f:
                    24:b3:ff:0e:72:fd:4d:0f:51:f9:0b:86:07:dd:21:
                    55:17:dc:41:0e:0a:a7:52:09:92:db:6e:9e:9e:4f:
                    60:71:d9:3a:6a:ac:4f:b5:ce:98:c9:57:01:d0:66:
                    7d:a5:f1:b7:76:50:83:1f:1e:ec:ea:ff:d5:31:5f:
                    c8:5d:f9:20:55:ba:21:c5:1d:6c:ee:bc:a8:8e:c2:
                    95:95:84:80:3d:0a:b6:e3:b7:15:31:00:55:86:79:
                    7a:1a:76:4d:f6:08:e3:51:0c:16:95:4e:75:93:86:
                    d3:eb:49:b6:0e:07:2e:5f:6b:8a:88:f7:05:32:1d:
                    8a:af:73:ae:46:0b:7d:ac:cb:2a:d3:6b:f4:65:6b:
                    3d:81:65:63:47:72:0a:de:b8:e3:16:7e:17:f8:c9:
                    7a:dd:ac:7c:0b:43:be:05:3f:96:1f:64:0b:d3:34:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:56:BC:EB:8F:07:27:C1:FB:B0:16:A7:03:0C:1D:8F:DC:EB:52
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XhlWvOuPByfB-7AWpwMMHY_c61I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49006

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:71:dd:65:7a:1d:2d:db:a9:94:05:e4:aa:0e:8d:40:3f:
         2f:07:a5:d7:ab:4b:c0:cc:6f:56:13:4c:81:d1:05:83:80:ac:
         fe:4b:64:5e:ac:e3:5c:e0:17:74:35:e7:66:34:a0:8b:b1:87:
         f1:ce:ea:d9:24:3b:cb:48:b8:2b:f1:b7:03:bf:e8:6a:67:14:
         32:60:c7:00:77:02:74:66:ac:1c:fa:35:ee:d1:73:a9:cb:a3:
         07:cb:df:5a:1c:d5:3e:da:f8:bf:93:ce:67:28:96:35:a3:28:
         68:ce:e1:7d:03:d7:73:2a:80:bf:34:10:14:c2:6f:8d:f4:d7:
         83:d4:21:b8:dd:09:60:ee:ad:ba:4f:43:80:b3:d7:4e:87:54:
         c0:18:66:c1:0e:af:3f:f5:e4:2a:25:60:84:25:26:d1:0b:9f:
         d0:d0:41:1b:7b:09:ee:fd:b1:dc:20:aa:45:36:71:f7:19:a9:
         3f:c1:f8:93:9b:a0:49:95:0e:40:75:d0:0f:07:07:01:a9:c4:
         80:3c:0f:de:19:13:5e:00:bb:38:3d:36:ae:3d:18:9d:be:dc:
         d5:36:13:ee:9a:9d:d4:aa:17:6c:35:00:bb:82:23:fb:ef:8f:
         52:cc:62:78:60:3f:c6:38:65:e8:d3:50:63:58:81:0a:d0:3c:
         30:04:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:39 2026 by rpki-client