Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/SHmv7kbCcQLjM8ZgU8uOFgyPtqQ.asa
File:                     SHmv7kbCcQLjM8ZgU8uOFgyPtqQ.asa (raw, json)
Hash identifier:          Hmfe2jpZLnmPV/6pUBUay41mCVqVa11zfsZ4L8rUtJY=
Subject key identifier:   48:79:AF:EE:46:C2:71:02:E3:33:C6:60:53:CB:8E:16:0C:8F:B6:A4
Certificate issuer:       /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial:       019CC7631B358F1E8D0B294CFD1A6538E183
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/SHmv7kbCcQLjM8ZgU8uOFgyPtqQ.asa
Signing time:             Sat 07 Mar 2026 08:21:26 +0000
ASPA not before:          Sat 07 Mar 2026 08:21:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201616
Providers:                AS: 8283
                          AS: 41051
                          AS: 44684
                          AS: 48070
                          AS: 212396
                          AS: 212635
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:63:1b:35:8f:1e:8d:0b:29:4c:fd:1a:65:38:e1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
        Validity
            Not Before: Mar  7 08:21:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4879afee46c27102e333c66053cb8e160c8fb6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:30:29:35:46:e2:90:55:91:29:c5:e6:21:
                    05:cd:28:fe:df:8e:d7:ad:4f:54:0a:1d:98:ea:16:
                    35:d4:3d:d3:16:5d:0e:c1:09:38:aa:d0:c9:6b:a7:
                    02:60:95:39:d7:44:0d:d1:a3:92:32:6a:6f:52:6c:
                    ef:92:34:4e:78:3d:16:6d:cb:cd:74:33:00:2d:cf:
                    07:6c:18:1f:02:7e:c6:39:03:28:d9:5b:5c:2d:34:
                    4e:af:cd:71:ab:be:24:f5:2b:a7:7c:5f:62:ad:12:
                    af:fa:08:2e:70:77:a3:d2:25:78:e6:0e:ce:88:9d:
                    fc:e0:95:8e:e7:d2:7e:88:8d:0d:b6:81:1e:b8:53:
                    ad:b8:eb:69:4c:2a:03:99:c1:db:e0:8f:6a:2a:e7:
                    db:dc:27:a5:ef:3a:69:b1:19:a3:98:dc:e4:1b:89:
                    23:84:2e:6a:5f:b8:8e:cf:63:88:f8:16:f1:98:cc:
                    9e:58:63:40:8c:ee:a4:6c:86:6f:e2:58:53:42:30:
                    2f:da:80:f0:1a:b2:7a:93:34:84:82:ba:3c:30:ff:
                    75:38:6e:5f:d0:b4:20:21:1a:0c:8c:5a:6c:ac:a5:
                    61:06:11:46:24:01:96:dc:5b:fd:fb:26:fb:86:5c:
                    16:26:7a:24:c0:d3:23:62:76:98:b7:38:07:63:e9:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:AF:EE:46:C2:71:02:E3:33:C6:60:53:CB:8E:16:0C:8F:B6:A4
            X509v3 Authority Key Identifier:
                keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/SHmv7kbCcQLjM8ZgU8uOFgyPtqQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201616

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:0b:2d:fa:95:3b:b1:55:d4:a8:ce:08:6f:0a:fb:98:94:
         4b:72:a6:ae:90:1a:14:97:d2:1b:0f:3c:c7:e3:92:a6:36:a5:
         de:1e:72:82:31:42:ae:2e:4e:db:ba:b4:66:85:74:93:2b:9b:
         c2:bc:46:35:02:a1:c1:60:1d:4c:99:10:d2:86:3c:6a:3c:b2:
         cf:72:64:9a:31:48:05:47:5a:f8:03:08:f5:06:92:c4:5a:92:
         5e:77:89:f1:a5:59:2e:56:f2:1a:e6:70:b9:5e:f5:bb:ea:1c:
         ab:b9:88:dd:ce:96:aa:69:f4:d3:f1:b7:d5:37:2f:f2:7f:7b:
         ee:a1:47:de:ca:05:f8:22:82:09:ff:68:26:3c:63:b0:70:1d:
         94:1e:01:9b:37:52:e8:01:ec:53:74:cc:73:ef:42:f5:9d:c1:
         ac:0c:27:79:56:dd:ee:89:72:be:2a:39:d3:54:bd:98:0d:0a:
         59:c6:8a:2e:99:47:8a:b0:92:e8:e5:14:4b:a5:29:57:a5:5d:
         bc:73:5b:79:e5:fa:71:a6:37:7f:0d:6d:60:be:52:44:d4:1e:
         c2:a9:f8:30:4a:4d:9d:e4:d6:9c:a7:a7:7b:72:ba:c1:87:f6:
         a2:f8:3e:be:f8:5b:3e:b4:88:36:01:42:5e:c0:27:c2:9d:3e:
         56:ee:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:52:45 2026 by rpki-client