Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/cTBVq8IaxYyfOgiN7k4f-e28FbU.asa
File:                     cTBVq8IaxYyfOgiN7k4f-e28FbU.asa (raw, json)
Hash identifier:          1ma5ToDnMNJrsWgIfWt0MF3pzZ/xVttnBZ5HnjCFnoc=
Subject key identifier:   71:30:55:AB:C2:1A:C5:8C:9F:3A:08:8D:EE:4E:1F:F9:ED:BC:15:B5
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       01A162F1F884517727922D6D0B564735E65F
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/cTBVq8IaxYyfOgiN7k4f-e28FbU.asa
Signing time:             Thu 22 Oct 2026 09:29:47 +0000
ASPA not before:          Thu 22 Oct 2026 09:29:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57734
Providers:                AS: 8218
                          AS: 29075
                          AS: 39801
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:f1:f8:84:51:77:27:92:2d:6d:0b:56:47:35:e6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Oct 22 09:29:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=713055abc21ac58c9f3a088dee4e1ff9edbc15b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:ca:b7:dc:af:f6:b6:16:e3:f7:30:6e:83:
                    01:32:40:e4:b6:97:8e:c1:ac:c8:45:cd:63:34:10:
                    71:95:61:9f:1b:b4:9d:e2:12:c8:87:7c:b8:06:b9:
                    16:7b:66:0e:1d:2f:ee:45:33:e4:d5:a3:fe:03:1d:
                    9a:1f:e2:56:f7:44:8f:d1:8d:7f:f5:3a:af:6a:c2:
                    63:f4:14:8a:4a:41:3f:64:58:3e:93:81:17:67:0d:
                    80:73:15:d0:52:ee:6d:0e:de:82:13:5b:83:af:6c:
                    c6:1e:5b:24:13:f2:83:e8:36:4d:e8:42:67:5f:33:
                    28:7d:56:e8:1b:8e:1c:19:15:14:b0:99:ea:b5:c4:
                    e9:9b:42:d9:18:1b:05:5a:85:f8:5a:b7:4a:d5:70:
                    96:45:dc:21:15:7a:f5:03:6e:0b:2f:f3:5b:74:83:
                    8a:3b:34:df:c3:c3:8e:12:1a:6f:b0:41:a6:72:93:
                    9f:6a:da:61:c4:56:d2:ba:8c:0e:d8:34:65:c2:25:
                    b2:0b:50:34:d7:08:65:8e:89:2d:52:30:72:e8:58:
                    71:cd:ef:ef:2c:ea:4e:1b:1c:7f:e1:a1:3d:2a:54:
                    fa:4d:8e:21:87:f3:8d:e5:08:73:8f:ad:c0:e6:d8:
                    80:46:94:77:6c:d1:a8:e8:19:08:0c:c7:9e:bd:a5:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:55:AB:C2:1A:C5:8C:9F:3A:08:8D:EE:4E:1F:F9:ED:BC:15:B5
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/cTBVq8IaxYyfOgiN7k4f-e28FbU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57734

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:50:c9:69:3b:8e:be:af:e6:c3:d5:d8:e2:91:c0:98:0e:
         9a:5c:7f:51:73:29:22:b8:81:54:cc:8e:66:3b:af:ae:71:e6:
         7c:f5:bb:07:bc:5d:27:18:11:93:df:bd:8c:44:86:bb:ce:6b:
         8b:54:c9:03:f9:0d:3c:72:ad:e3:3c:1d:95:76:02:3d:f8:b5:
         87:1a:8f:eb:41:4f:8f:41:8a:2b:03:10:67:d5:ae:29:db:e4:
         6b:25:90:3f:22:03:28:fb:d2:ca:5d:8f:28:8a:06:8e:67:3e:
         25:3b:88:73:56:2b:0c:f4:27:24:34:d0:86:8e:a6:1c:7f:d0:
         35:f9:a6:8a:e7:d1:90:2d:2b:d5:c6:df:7c:75:b9:96:cc:05:
         5d:62:35:41:9e:e2:aa:7f:3b:86:2d:a2:44:1f:fa:43:d4:67:
         10:16:8f:ca:ae:c1:7b:8d:3b:63:d9:5d:e0:74:b5:d6:8f:fc:
         5a:65:9a:b5:dc:44:f5:1a:6f:1a:aa:3f:1b:81:ca:61:00:5c:
         d8:10:cb:f0:41:7e:ad:66:55:01:ee:1e:6e:40:4b:03:d1:61:
         52:92:43:a6:fc:7f:12:ee:53:58:d6:f6:b3:f3:3f:6f:ad:19:
         14:73:56:eb:af:b8:20:a2:8e:aa:70:80:86:94:38:41:51:03:
         0b:e1:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:29 2026 by rpki-client