Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pa7wwjIkT1Rr96gm_Dc4p2m855E.asa
File:                     pa7wwjIkT1Rr96gm_Dc4p2m855E.asa (raw, json)
Hash identifier:          RsIYLhR+mRTMkDXxLZppxtYbuEPlLdG4QeIWLwhn7KY=
Subject key identifier:   A5:AE:F0:C2:32:24:4F:54:6B:F7:A8:26:FC:37:38:A7:69:BC:E7:91
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019DD2FD43EFBD479DE3E032DDEF673E72F2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pa7wwjIkT1Rr96gm_Dc4p2m855E.asa
Signing time:             Tue 28 Apr 2026 07:28:26 +0000
ASPA not before:          Tue 28 Apr 2026 07:28:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            3291
Providers:                AS: 3257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d2:fd:43:ef:bd:47:9d:e3:e0:32:dd:ef:67:3e:72:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Apr 28 07:28:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5aef0c232244f546bf7a826fc3738a769bce791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:fb:64:95:61:31:26:f5:6e:44:36:71:50:
                    c5:23:96:00:4b:d7:64:e3:7c:01:b9:88:c4:82:74:
                    c3:9b:86:3d:ce:2e:33:7a:44:c2:b5:42:67:73:39:
                    52:3e:0e:6d:d1:86:56:17:8d:47:e6:4a:d8:49:d6:
                    24:ae:2e:40:55:3a:74:2f:17:5b:bc:d9:95:f5:5d:
                    f3:90:8c:71:e2:76:b4:a9:ee:f4:7e:a7:f3:15:0e:
                    94:5f:ed:8e:34:87:13:f8:50:ec:58:1a:3d:fd:c7:
                    22:42:ca:f0:df:a6:68:7d:47:66:23:d8:8b:36:76:
                    50:62:2c:20:fd:12:c4:88:f9:f5:a1:60:06:89:df:
                    72:5f:86:98:55:2b:15:82:b1:88:4c:ad:bd:af:ff:
                    40:7b:64:00:9a:1d:2b:de:84:00:b5:6e:8b:a8:74:
                    c9:23:2d:4b:56:1e:3b:0c:8d:e9:2e:fb:62:cf:97:
                    5c:a0:8d:3e:2b:c9:fb:31:5e:e2:a0:f2:07:ef:cb:
                    6b:2f:a5:ea:84:42:a7:b6:be:1a:98:13:ae:e8:f2:
                    25:3f:5d:3d:80:73:8e:cd:ea:8c:85:1b:fa:6e:1c:
                    13:4b:79:0b:c8:f9:a3:db:bb:af:24:e7:41:e8:49:
                    79:bc:a0:2b:80:c2:3b:ce:7e:2e:a4:85:ac:c7:99:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AE:F0:C2:32:24:4F:54:6B:F7:A8:26:FC:37:38:A7:69:BC:E7:91
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pa7wwjIkT1Rr96gm_Dc4p2m855E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3291

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:46:83:9b:55:ac:89:84:6e:da:b0:cc:95:52:7f:f0:52:
         92:d5:61:19:f7:86:c2:df:5e:30:a0:43:b5:4d:bd:1c:4b:4c:
         77:ca:01:d8:2f:35:6d:66:ca:07:c2:67:e0:47:bb:d9:39:6e:
         96:74:4f:96:93:2e:a2:e0:5c:54:92:b1:c1:26:15:44:07:fd:
         2d:e1:9f:d3:cc:88:5e:66:06:18:6f:2a:c9:25:41:14:df:b8:
         1d:f5:61:30:e7:03:ee:a6:db:af:e2:db:8d:27:8f:cb:d1:27:
         b6:fb:89:f9:de:74:d6:11:40:f8:17:d0:bd:be:8e:c2:4a:13:
         aa:6b:7e:65:fd:c3:c3:18:1c:b6:ec:e2:9b:99:83:3b:c7:06:
         7c:40:bd:9d:2b:cb:ca:7b:09:92:45:61:3d:dd:bc:1f:f4:cf:
         9c:73:71:7d:62:de:9b:97:f4:63:cc:91:80:74:d4:70:93:d5:
         d5:e2:5f:b8:f2:d3:a3:43:55:32:ce:81:0a:1c:ba:8d:32:80:
         93:aa:14:33:13:1a:fb:33:fd:5c:c0:aa:21:b0:83:eb:fa:1a:
         bd:44:1c:a1:0f:c6:d9:ee:dd:0a:18:23:c4:c1:d5:ec:d6:ab:
         8f:6a:8a:72:db:4c:3e:bf:93:e0:08:70:18:04:0a:9b:b7:77:
         f5:4f:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:54 2026 by rpki-client