Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa
File:                     vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (raw, json)
Hash identifier:          B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=
Subject key identifier:   BE:F4:C0:BF:17:61:C7:73:6A:45:8E:CC:83:AB:08:46:34:DA:BD:43
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       019CC7399541E6408AAF0B5069178EE3C9D8
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa
Signing time:             Sat 07 Mar 2026 07:36:05 +0000
ASPA not before:          Sat 07 Mar 2026 07:36:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            40964
Providers:                AS: 28917
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:39:95:41:e6:40:8a:af:0b:50:69:17:8e:e3:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Mar  7 07:36:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bef4c0bf1761c7736a458ecc83ab084634dabd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:85:44:7d:bb:ea:5c:63:81:d9:80:6f:ed:
                    3c:2e:06:27:a3:56:2e:35:03:90:d0:3e:6f:36:18:
                    71:ae:b3:d8:66:9f:df:8a:88:3e:fd:4d:47:b8:20:
                    ed:ae:3b:a4:61:cf:22:75:6a:8a:87:e8:3c:48:48:
                    cf:03:83:55:9d:bf:54:4d:61:18:82:bb:2f:31:15:
                    03:04:eb:e7:ee:a8:e7:8f:89:79:f3:4e:5c:a5:b5:
                    eb:a2:81:e9:de:27:b6:ec:f7:62:68:7b:4e:7c:32:
                    0a:fc:2b:85:f5:2b:b7:a2:0a:3b:7a:ca:34:dd:8a:
                    23:92:7d:f8:6b:92:63:e2:f6:98:9d:48:b9:0f:78:
                    ae:ad:8d:d7:57:ec:bb:e4:9f:7c:f9:4a:bb:68:f2:
                    13:40:ce:b1:0b:0a:c9:46:b8:42:d9:f6:97:fa:8c:
                    bb:aa:83:f4:6a:ac:95:c2:d5:0d:b7:d3:09:be:e4:
                    8b:93:90:07:96:a0:f7:64:a7:f9:73:02:95:64:42:
                    ba:fe:af:6c:94:e9:11:d3:e0:86:b1:c7:07:4c:18:
                    28:a5:e3:99:4e:3d:f7:8b:d9:d9:23:8c:70:0e:29:
                    26:a9:94:c0:14:7a:74:d8:57:de:6c:d8:55:4c:ba:
                    8b:fa:07:b4:4f:f8:86:c4:a5:f9:32:21:9e:d4:89:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:C0:BF:17:61:C7:73:6A:45:8E:CC:83:AB:08:46:34:DA:BD:43
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40964

    Signature Algorithm: sha256WithRSAEncryption
         08:60:5f:c8:30:1a:39:31:bf:10:62:e3:76:e9:45:f1:63:de:
         57:d0:26:19:a6:78:8d:5f:f3:10:9b:7b:8f:83:37:86:8c:52:
         0b:2b:44:51:0b:24:71:f4:96:e8:1c:04:44:c6:da:19:aa:e6:
         71:7e:1a:f0:4b:ec:a0:c1:40:44:67:4e:7a:cc:fc:b0:37:8e:
         b5:a0:0f:d7:4e:e5:e9:c7:9c:79:b0:a6:b8:37:44:bd:10:a9:
         aa:8d:c4:0c:e5:94:cc:07:cc:cd:2c:a3:02:a1:d5:57:d0:58:
         aa:bb:0c:93:60:cc:dc:d3:08:6f:35:77:4b:f1:33:76:b0:50:
         be:ff:4f:25:4b:ce:df:c4:da:0c:7b:70:98:fe:0e:35:32:be:
         d5:e3:f1:3a:6e:22:cd:12:36:6a:88:d2:0a:ac:c2:98:08:4a:
         72:7f:8f:e7:04:7d:51:74:d9:ce:00:bf:c7:da:79:d8:ab:f6:
         6f:2d:f1:c9:23:8a:dc:ae:10:a5:96:a6:62:2b:1b:7a:98:57:
         2d:3c:38:2e:38:9e:95:cb:23:9a:3d:fa:47:cf:25:44:88:11:
         3b:17:be:6f:3d:e2:fd:92:78:22:63:2b:d3:c7:4f:f8:18:4d:
         9c:ac:19:0d:81:20:9d:85:1f:a8:a0:7c:66:c6:03:fe:d9:99:
         ff:e9:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:52:46 2026 by rpki-client