Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YcsByhB53GKxLT3dTdKtQcH3egc.asa
File:                     YcsByhB53GKxLT3dTdKtQcH3egc.asa (raw, json)
Hash identifier:          W5NUR4wHaDrqknw9qJ6RUsilTsvNd7Z/qyrIz7nXJHg=
Subject key identifier:   61:CB:01:CA:10:79:DC:62:B1:2D:3D:DD:4D:D2:AD:41:C1:F7:7A:07
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019FF1814E91DBE7E5360FB3A67F78D524AD
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YcsByhB53GKxLT3dTdKtQcH3egc.asa
Signing time:             Tue 11 Aug 2026 15:46:51 +0000
ASPA not before:          Tue 11 Aug 2026 15:46:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44955
Providers:                AS: 20473
                          AS: 35200
                          AS: 42831
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f1:81:4e:91:db:e7:e5:36:0f:b3:a6:7f:78:d5:24:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Aug 11 15:46:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61cb01ca1079dc62b12d3ddd4dd2ad41c1f77a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:64:76:bf:cd:8a:70:90:a2:0c:83:75:30:
                    30:ad:54:af:33:c8:d2:f8:8f:d0:5d:79:b1:39:aa:
                    82:50:6d:34:fe:e0:44:1d:f8:1f:a1:ba:25:63:f0:
                    7e:be:52:44:6f:0e:32:e0:41:70:7c:10:62:d8:d0:
                    af:cb:e6:cb:09:48:97:24:5e:3a:d5:93:3a:fd:19:
                    a2:b6:60:42:5a:e9:4b:40:aa:10:af:f8:75:f5:cb:
                    62:f7:b0:c9:d7:85:0c:23:c4:4f:d1:8b:52:2b:58:
                    17:3a:c1:bd:b8:c7:f6:ae:1f:c9:a2:4f:d8:45:36:
                    52:37:1d:b5:9f:01:7f:92:f8:ca:45:23:99:b4:29:
                    a8:e0:95:17:ca:f8:d8:42:53:25:a7:cc:1e:c2:b7:
                    ba:90:09:95:07:0f:95:e9:80:68:98:24:00:68:f2:
                    35:77:ea:45:ec:f6:c6:f3:f0:e3:4c:a4:7e:5e:92:
                    92:63:d2:c5:d2:98:52:10:85:38:d3:39:30:df:5c:
                    81:79:13:7b:0b:be:0c:9b:ad:79:f0:49:cb:a9:a6:
                    e5:3e:be:e9:0d:bc:c1:a0:fe:20:ba:c0:17:02:1d:
                    59:6c:cb:21:67:23:9f:94:02:aa:15:78:04:1b:c0:
                    e1:1e:bd:34:7e:6f:4a:29:81:c9:39:45:a5:e3:8b:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:01:CA:10:79:DC:62:B1:2D:3D:DD:4D:D2:AD:41:C1:F7:7A:07
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YcsByhB53GKxLT3dTdKtQcH3egc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44955

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:7e:87:62:b6:c4:e5:fe:12:a0:d5:92:6a:d9:b1:f7:be:
         f3:a2:06:c9:2b:df:68:92:65:5e:fc:f2:5b:8d:71:7b:93:9a:
         80:df:98:fc:be:71:ab:da:67:0c:93:10:99:1f:d9:df:5c:ed:
         4b:88:6e:b5:6e:63:20:d9:78:ed:7f:ea:10:1e:d5:93:24:3c:
         c9:be:ef:4d:b5:85:fe:c5:91:a2:e5:2a:fd:e1:fc:b1:6b:38:
         68:43:7f:04:61:9f:82:6d:b0:af:24:d1:5e:df:12:d2:97:a2:
         b8:38:91:21:f7:59:3f:45:d3:5d:e3:8f:61:d1:97:98:6b:65:
         31:4d:15:0b:f7:07:cd:27:8f:61:e2:54:8b:20:97:ca:ea:24:
         eb:78:f6:d8:bc:bf:e4:ef:cf:61:fb:0e:a4:7c:24:f4:bf:d2:
         bf:78:5b:ca:dd:e0:22:ae:8f:da:90:d7:ab:f7:d1:e2:6e:73:
         4b:78:38:6c:39:7d:c4:07:10:4c:4c:f6:fb:0d:44:f7:c3:44:
         07:53:f0:d5:4d:ed:4f:63:61:c0:e5:00:b7:53:31:dc:12:e5:
         c4:55:1b:b3:b3:ff:b7:f0:5e:f6:ac:58:13:32:c2:c4:66:b7:
         c0:75:f5:ac:92:c8:48:1e:6a:1f:57:93:a8:c0:92:4e:24:b0:
         9f:51:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:40 2026 by rpki-client