Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/DeVxF-ajyv69tQ1jWZaFly-h3_M.asa
File:                     DeVxF-ajyv69tQ1jWZaFly-h3_M.asa (raw, json)
Hash identifier:          s3uI2uzcUVAP2Ke0qq2OsJ0Qz8VUvl1F8D3nklCzw3w=
Subject key identifier:   0D:E5:71:17:E6:A3:CA:FE:BD:B5:0D:63:59:96:85:97:2F:A1:DF:F3
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       019D302003AE74D2D048CCBE50BAD9A31231
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/DeVxF-ajyv69tQ1jWZaFly-h3_M.asa
Signing time:             Fri 27 Mar 2026 16:28:17 +0000
ASPA not before:          Fri 27 Mar 2026 16:28:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50022
Providers:                AS: 3216
                          AS: 20485
                          AS: 50427
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:20:03:ae:74:d2:d0:48:cc:be:50:ba:d9:a3:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Mar 27 16:28:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0de57117e6a3cafebdb50d63599685972fa1dff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:47:c8:7c:23:8e:06:3c:bf:c9:10:59:4d:
                    47:a5:93:77:d3:e1:15:34:62:4d:f9:6a:4c:96:b7:
                    ab:03:6a:27:51:c5:10:da:fb:f9:2d:59:ce:42:80:
                    fe:05:4a:97:20:59:49:2b:82:8f:92:04:aa:35:09:
                    bc:c1:db:33:78:0b:40:10:91:1f:47:72:09:58:98:
                    17:c8:62:f0:a7:0c:71:c3:94:d7:13:7e:20:f1:e4:
                    e7:56:7d:57:15:0e:1f:2f:7c:da:36:47:64:55:9d:
                    95:4c:dd:19:86:50:09:d9:ac:de:bd:ad:e2:dc:20:
                    3e:8a:32:f2:74:be:e4:fb:e8:52:f6:63:78:66:91:
                    48:52:0e:a3:89:d2:94:1d:7f:12:fd:e9:5e:d2:e5:
                    c1:0a:77:09:f7:a4:8a:9c:a2:20:98:c1:8c:d9:b1:
                    e8:d7:fb:f4:c3:51:30:e8:3a:ee:be:b8:0a:ae:17:
                    8d:8e:bb:a5:b6:a1:9f:77:f1:0e:ce:28:2d:69:a3:
                    47:7e:2d:9a:03:42:ae:e4:ff:f9:db:79:38:c7:d3:
                    7b:fc:ad:de:df:25:3f:dc:93:9e:9b:f8:9b:4d:ee:
                    c3:04:a4:15:35:66:73:40:04:86:48:b0:e2:5f:2e:
                    e0:e3:14:6b:dc:de:5f:ac:60:82:c4:7c:db:97:03:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:71:17:E6:A3:CA:FE:BD:B5:0D:63:59:96:85:97:2F:A1:DF:F3
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/DeVxF-ajyv69tQ1jWZaFly-h3_M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50022

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:73:87:51:06:ce:e8:1b:c0:5f:9a:59:0e:18:32:9f:ba:
         a9:bd:d1:c8:bc:9e:20:c1:ef:e8:2d:80:d0:18:90:46:40:63:
         9b:d9:ce:b7:44:50:bf:39:ec:88:d8:df:24:13:14:5c:f2:f4:
         23:78:d9:6f:a0:3a:42:2c:81:d2:d7:96:b3:ec:bc:07:9c:28:
         cc:b4:05:45:15:9f:55:20:e8:7b:d8:c2:56:87:e2:cf:c3:da:
         39:36:02:a8:c7:31:ed:de:b6:4e:03:e0:59:7d:93:c0:15:b3:
         f3:1a:b9:a5:84:cf:4e:9d:58:de:50:f1:0d:a9:60:f6:74:bb:
         a1:e8:43:44:c6:54:6d:57:05:51:54:20:3d:8f:b8:c1:17:81:
         9c:11:d0:d2:4a:e0:f3:0f:54:35:d3:1d:e4:ba:fb:25:ea:50:
         92:cb:dc:0b:c5:8e:94:e6:f0:b1:77:d5:de:71:b6:13:c4:82:
         cd:73:9e:6b:b1:d1:62:52:cc:09:e0:07:8f:1a:61:0f:dd:dc:
         e2:e3:92:6a:a5:a0:ca:18:2c:01:ae:b9:3b:c7:0b:c8:94:70:
         71:c6:fb:55:3b:1f:7a:e1:1d:01:31:be:7c:86:05:e5:dc:af:
         db:f1:f7:34:7b:8a:0c:25:1d:51:86:af:03:e2:81:df:26:e6:
         3e:4f:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:20:39 2026 by rpki-client